Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/3139302e38332e3132302e302f32322d3234203d3e20323730343235.roa
File:                     3139302e38332e3132302e302f32322d3234203d3e20323730343235.roa (raw, json)
Hash identifier:          wFdMy+qyaw9TPyJDVeF3aeKPwDUXDrfrZtnDyYP2EB0=
Subject key identifier:   FD:34:00:E3:1A:35:92:AE:62:6F:1B:0F:36:48:31:4A:D0:45:5A:A9
Certificate issuer:       /CN=A422D440165BAA30AAA7A2F917873160E46205D6
Certificate serial:       1B95F46E7C322755A1611CB43B41183EC12158D1
Authority key identifier: A4:22:D4:40:16:5B:AA:30:AA:A7:A2:F9:17:87:31:60:E4:62:05:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A422D440165BAA30AAA7A2F917873160E46205D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/3139302e38332e3132302e302f32322d3234203d3e20323730343235.roa
Signing time:             Thu 08 Aug 2024 18:24:57 +0000
ROA not before:           Thu 08 Aug 2024 18:19:57 +0000
ROA not after:            Thu 07 Aug 2025 18:24:57 +0000
asID:                     270425
IP address blocks:        190.83.120.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:95:f4:6e:7c:32:27:55:a1:61:1c:b4:3b:41:18:3e:c1:21:58:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A422D440165BAA30AAA7A2F917873160E46205D6
        Validity
            Not Before: Aug  8 18:19:57 2024 GMT
            Not After : Aug  7 18:24:57 2025 GMT
        Subject: CN=FD3400E31A3592AE626F1B0F3648314AD0455AA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:14:33:57:bb:4b:60:78:14:ef:73:b1:46:
                    15:71:38:a1:62:31:54:f4:fc:97:04:30:2c:1d:52:
                    f4:ec:be:b1:24:1d:ea:75:d3:7e:82:4a:50:1c:7f:
                    86:1b:f3:82:ae:b0:63:86:05:2c:0e:3f:f6:47:59:
                    8d:7a:c1:0b:3d:1f:b6:35:2c:03:1d:bd:4c:13:b6:
                    8f:59:a6:aa:bb:14:db:82:bd:22:3e:c4:6b:01:62:
                    2d:98:5e:8d:f4:dd:d8:62:7e:33:d5:3e:db:dc:48:
                    d0:7c:25:49:49:3f:60:6e:ad:8a:1b:f3:39:b3:d5:
                    db:68:d2:92:e7:ef:1c:a2:07:cb:fb:16:37:7a:53:
                    ad:e5:10:54:26:8c:98:d3:ef:e3:e7:01:49:a3:5b:
                    95:fe:70:89:b7:0a:97:4a:43:79:37:f4:63:6a:9a:
                    43:95:cb:c6:ef:56:23:ac:e7:c8:3d:4f:96:9d:8d:
                    75:f3:65:07:05:ab:33:61:b7:f9:15:e3:79:9c:1b:
                    40:29:b9:55:0a:dc:20:9d:59:ae:b0:3c:56:29:12:
                    e2:da:8f:4e:86:6a:20:c2:57:31:ad:98:68:67:77:
                    ce:a1:40:59:aa:25:cc:c8:72:01:cd:fb:e3:bf:90:
                    ac:6a:cd:64:ab:54:dc:aa:fa:61:f9:da:88:ed:05:
                    24:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:34:00:E3:1A:35:92:AE:62:6F:1B:0F:36:48:31:4A:D0:45:5A:A9
            X509v3 Authority Key Identifier:
                keyid:A4:22:D4:40:16:5B:AA:30:AA:A7:A2:F9:17:87:31:60:E4:62:05:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/A422D440165BAA30AAA7A2F917873160E46205D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A422D440165BAA30AAA7A2F917873160E46205D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/3139302e38332e3132302e302f32322d3234203d3e20323730343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:14:2f:8b:74:c2:89:20:83:97:18:72:71:6c:f1:e2:cf:73:
         7a:52:e7:42:d5:7e:d5:aa:f0:ca:db:f4:d7:aa:20:11:6e:e6:
         68:ff:9c:c2:8d:b1:52:cf:23:9a:68:53:51:4b:bf:c2:c2:18:
         ab:2d:cf:3f:d2:af:e0:88:00:aa:03:a3:c0:7a:95:c9:a2:d8:
         22:59:17:5a:fe:a8:d6:e7:c4:85:20:8d:9c:6c:dc:36:b4:af:
         31:ec:bd:d2:5c:20:60:55:0f:11:27:e5:1e:cf:25:1f:48:6b:
         c9:cb:25:dd:83:a0:ac:ab:e4:6a:2b:a5:72:98:4e:e6:ac:2d:
         38:16:f0:b6:17:1b:79:d3:cb:73:62:de:9a:1d:f0:64:24:55:
         e8:a8:85:88:c6:86:ca:d6:b6:2d:b9:b9:7a:0c:d0:2e:81:54:
         ed:cf:6c:63:a2:62:6e:0e:6f:67:17:bc:81:d7:ec:00:14:f5:
         a0:8b:e7:04:1b:ac:42:6c:b0:8c:c3:f7:e2:9f:22:c1:ad:e2:
         a0:7b:03:03:55:c8:4b:80:24:0f:c0:e9:ad:81:fc:25:f1:4f:
         1d:78:59:4e:dd:9d:f3:97:01:55:13:36:1e:65:86:22:49:62:
         34:ef:6c:19:7c:fe:8e:26:2e:20:89:0f:71:e4:37:30:16:13:
         69:91:04:ec
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG5X0bnwyJ1WhYRy0O0EYPsEhWNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQyMkQ0NDAxNjVCQUEzMEFBQTdBMkY5MTc4NzMxNjBF
NDYyMDVENjAeFw0yNDA4MDgxODE5NTdaFw0yNTA4MDcxODI0NTdaMDMxMTAvBgNV
BAMTKEZEMzQwMEUzMUEzNTkyQUU2MjZGMUIwRjM2NDgzMTRBRDA0NTVBQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDXhQzV7tLYHgU73OxRhVxOKFi
MVT0/JcEMCwdUvTsvrEkHep1036CSlAcf4Yb84KusGOGBSwOP/ZHWY16wQs9H7Y1
LAMdvUwTto9Zpqq7FNuCvSI+xGsBYi2YXo303dhifjPVPtvcSNB8JUlJP2BurYob
8zmz1dto0pLn7xyiB8v7Fjd6U63lEFQmjJjT7+PnAUmjW5X+cIm3CpdKQ3k39GNq
mkOVy8bvViOs58g9T5adjXXzZQcFqzNht/kV43mcG0ApuVUK3CCdWa6wPFYpEuLa
j06GaiDCVzGtmGhnd86hQFmqJczIcgHN++O/kKxqzWSrVNyq+mH52ojtBSSdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/TQA4xo1kq5ibxsPNkgxStBFWqkwHwYDVR0j
BBgwFoAUpCLUQBZbqjCqp6L5F4cxYORiBdYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEdRTjRTbVI3OXV2Zk56bU1CakhQdVdra1F0ZnlFc3puV3M4Y1hzVkVt
QWovMC9BNDIyRDQ0MDE2NUJBQTMwQUFBN0EyRjkxNzg3MzE2MEU0NjIwNUQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0MjJENDQwMTY1QkFBMzBB
QUE3QTJGOTE3ODczMTYwRTQ2MjA1RDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhHUU40U21SNzl1dmZOem1NQmpIUHVXa2tRdGZ5RXN6bldzOGNYc1ZFbUFqLzAv
MzEzOTMwMmUzODMzMmUzMTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK+U3gwDQYJKoZIhvcNAQELBQADggEBAH8UL4t0
wokgg5cYcnFs8eLPc3pS50LVftWq8Mrb9NeqIBFu5mj/nMKNsVLPI5poU1FLv8LC
GKstzz/Sr+CIAKoDo8B6lcmi2CJZF1r+qNbnxIUgjZxs3Da0rzHsvdJcIGBVDxEn
5R7PJR9Ia8nLJd2DoKyr5GorpXKYTuasLTgW8LYXG3nTy3Ni3pod8GQkVeiohYjG
hsrWti25uXoM0C6BVO3PbGOiYm4Ob2cXvIHX7AAU9aCL5wQbrEJssIzD9+KfIsGt
4qB7AwNVyEuAJA/A6a2B/CXxTx14WU7dnfOXAVUTNh5lhiJJYjTvbBl8/o4mLiCJ
D3HkNzAWE2mRBOw=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:02 2025 by rpki-client