Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e39302e302f32342d3234203d3e203238323130.roa
File:                     3139312e3234332e39302e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          +XcJsh4U2RORohw8JsmPODuQvZVQUkNm4u0c8nN5zJY=
Subject key identifier:   FA:13:E5:8A:7D:DA:01:A1:C4:FE:F0:C3:83:B2:30:2C:35:6C:56:DA
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       399B3EC6E2FA8FD1515F171D1E365DB18B3439E0
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e39302e302f32342d3234203d3e203238323130.roa
Signing time:             Thu 06 Mar 2025 04:42:14 +0000
ROA not before:           Thu 06 Mar 2025 04:37:14 +0000
ROA not after:            Thu 05 Mar 2026 04:42:14 +0000
asID:                     28210
IP address blocks:        191.243.90.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9b:3e:c6:e2:fa:8f:d1:51:5f:17:1d:1e:36:5d:b1:8b:34:39:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Mar  6 04:37:14 2025 GMT
            Not After : Mar  5 04:42:14 2026 GMT
        Subject: CN=FA13E58A7DDA01A1C4FEF0C383B2302C356C56DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:24:8c:b1:2f:ea:4c:e7:74:15:b1:5c:d0:37:
                    ae:87:54:34:0d:00:22:00:e8:a1:a5:36:07:b0:7a:
                    8f:72:ab:e3:80:7a:d2:c9:64:6a:65:72:95:e3:fc:
                    2d:76:55:6c:9a:66:38:c4:f2:eb:ab:d3:f8:ac:9a:
                    c9:30:31:b8:50:ee:1d:5a:fb:75:e6:f9:dd:10:80:
                    f3:b3:cf:63:81:71:a9:58:1d:2f:df:b7:23:db:d7:
                    44:02:1e:cc:ca:4f:32:aa:09:27:5c:47:41:b8:29:
                    39:51:32:73:17:dd:b4:76:72:77:a9:4f:12:ad:03:
                    33:66:9b:a8:25:74:04:f2:06:77:fe:44:22:3c:44:
                    29:35:f3:f6:d8:83:dd:29:45:84:fa:86:11:f3:cf:
                    e9:13:58:03:ed:02:b3:88:ba:75:10:c1:e0:d8:67:
                    a0:b5:2d:c3:1d:e6:14:62:f7:d9:db:d8:2f:99:ce:
                    40:bc:76:47:90:bf:a9:81:14:26:c7:78:f3:f4:e2:
                    00:cb:1b:e7:a4:d9:b8:46:ce:0f:cf:f2:7f:21:9d:
                    25:a3:e3:29:4a:71:65:64:d9:df:f7:4e:f6:95:06:
                    99:07:cd:78:bd:5f:5e:0d:72:0a:bb:15:50:d3:50:
                    56:4f:2b:c6:3a:84:b1:ca:4b:c5:ce:34:8f:9a:7a:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:13:E5:8A:7D:DA:01:A1:C4:FE:F0:C3:83:B2:30:2C:35:6C:56:DA
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e39302e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:63:03:a1:20:7a:ad:7d:3d:4e:a1:fe:5c:45:09:33:55:75:
         51:9c:8c:4e:9b:aa:a3:c2:6d:e0:38:c4:e9:f4:15:e9:cf:d8:
         5e:17:ad:b4:36:26:0e:5c:b8:cc:86:21:f9:47:ab:94:be:ad:
         09:44:b9:97:4e:bd:ab:92:89:09:f4:b6:dd:7c:5c:e1:6b:3a:
         61:2b:8e:41:b1:73:2e:49:0a:60:90:89:11:1d:b0:9b:ac:b8:
         cb:d9:7d:4f:e3:ea:71:04:d6:41:60:47:bf:1a:2d:80:b6:22:
         8d:10:f5:4d:29:43:5f:5d:04:81:22:91:97:39:fe:54:8f:14:
         36:43:32:8b:5c:ae:ae:da:5e:1e:63:9e:d9:54:a7:78:a6:d8:
         5f:b9:c6:0b:15:1c:a2:a4:04:46:39:49:90:00:e5:3c:62:a2:
         53:52:ee:3f:73:9e:a4:09:95:63:e8:e9:a4:fc:97:da:9e:3a:
         21:bc:6b:da:00:41:bd:19:72:57:bd:cc:8b:86:cf:c3:c5:2e:
         c6:d8:c1:6c:6d:80:a9:1f:52:3b:47:f9:7d:8e:a9:8a:d6:09:
         b6:3f:d2:0f:b2:b6:df:49:c5:f0:17:ac:ba:f1:b7:3b:68:5c:
         85:2a:0a:b4:72:1e:79:dd:6f:ea:64:5d:2a:e3:f4:09:ea:4e:
         d5:d6:07:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:50:25 2025 by rpki-client