Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UmLLvx6S36nJhusNXRYANxXRHs57qy5yXHoiH5rW6w3/0/3139302e322e37322e302f32312d3231203d3e203631393230.roa
File:                     3139302e322e37322e302f32312d3231203d3e203631393230.roa (raw, json)
Hash identifier:          jsdItOuPPtlf/YkmUlN6CgwCoxh+ZHtWbpbprS9hpKs=
Subject key identifier:   81:FA:12:11:78:3E:1C:A3:E1:3B:47:05:BF:00:33:F1:96:51:70:D6
Certificate issuer:       /CN=AAE0AF17A7DC38EB68E62E5A8280F89643AACF08
Certificate serial:       5AE9EF7B6DB3ABD46FEEB91A1787D2985B89773D
Authority key identifier: AA:E0:AF:17:A7:DC:38:EB:68:E6:2E:5A:82:80:F8:96:43:AA:CF:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAE0AF17A7DC38EB68E62E5A8280F89643AACF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UmLLvx6S36nJhusNXRYANxXRHs57qy5yXHoiH5rW6w3/0/3139302e322e37322e302f32312d3231203d3e203631393230.roa
Signing time:             Wed 20 Dec 2023 03:55:05 +0000
ROA not before:           Wed 20 Dec 2023 03:50:05 +0000
ROA not after:            Wed 18 Dec 2024 03:55:05 +0000
asID:                     61920
IP address blocks:        190.2.72.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e9:ef:7b:6d:b3:ab:d4:6f:ee:b9:1a:17:87:d2:98:5b:89:77:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAE0AF17A7DC38EB68E62E5A8280F89643AACF08
        Validity
            Not Before: Dec 20 03:50:05 2023 GMT
            Not After : Dec 18 03:55:05 2024 GMT
        Subject: CN=81FA1211783E1CA3E13B4705BF0033F1965170D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:06:e6:4c:75:69:28:78:97:51:dc:bb:08:88:
                    66:1f:6c:eb:f5:ad:cb:1a:dd:82:eb:2a:52:13:28:
                    1e:38:c9:0d:42:08:a2:c0:90:02:20:6b:a4:ae:90:
                    49:1c:ae:7d:59:87:9c:6b:7b:d6:9d:e6:29:85:f8:
                    36:e8:22:82:64:eb:b3:ab:9d:10:67:52:7f:72:09:
                    a0:4a:d0:00:3d:47:0b:c3:57:46:54:77:75:53:64:
                    94:09:8b:79:f7:16:91:b2:83:84:e3:79:e8:62:a9:
                    c2:0a:5d:83:4b:88:56:13:7c:95:db:21:f0:8d:0f:
                    67:9e:99:1a:13:e0:60:70:b3:ce:9a:e6:5a:53:c8:
                    90:cf:f4:cd:f0:77:ed:27:56:70:ce:a7:72:7d:64:
                    e1:8d:17:05:ba:5f:64:53:0c:6b:6d:0f:43:59:4c:
                    1a:a2:5f:a9:c0:c7:dc:9f:bc:c9:7f:16:84:28:ed:
                    55:73:20:5a:b4:5e:f0:bd:85:c3:b4:bc:56:9b:e7:
                    57:ee:1a:66:bb:b1:68:50:d1:93:16:2b:23:37:c0:
                    9b:41:9c:0c:cc:45:0b:33:9d:f5:d6:eb:d4:16:92:
                    d0:09:0d:25:17:b0:35:fa:fd:11:13:ef:38:33:60:
                    3b:2d:63:63:a7:1a:54:1c:cb:ff:4a:eb:e4:0b:27:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FA:12:11:78:3E:1C:A3:E1:3B:47:05:BF:00:33:F1:96:51:70:D6
            X509v3 Authority Key Identifier:
                keyid:AA:E0:AF:17:A7:DC:38:EB:68:E6:2E:5A:82:80:F8:96:43:AA:CF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UmLLvx6S36nJhusNXRYANxXRHs57qy5yXHoiH5rW6w3/0/AAE0AF17A7DC38EB68E62E5A8280F89643AACF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAE0AF17A7DC38EB68E62E5A8280F89643AACF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UmLLvx6S36nJhusNXRYANxXRHs57qy5yXHoiH5rW6w3/0/3139302e322e37322e302f32312d3231203d3e203631393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:29:99:e5:a5:3d:74:01:06:f8:47:79:ac:2b:6e:61:2e:0d:
         88:f6:19:9e:e5:1a:04:5b:68:03:60:4d:7e:1b:35:80:ce:25:
         11:d2:86:9e:bf:1e:ea:d9:68:7f:af:5f:bd:22:60:bb:15:48:
         fe:be:b6:f1:7e:73:71:9e:02:b8:9f:e6:a0:c8:72:15:6a:78:
         51:35:25:91:36:f9:1f:f3:84:04:55:09:50:74:95:20:bc:da:
         78:b9:14:62:c8:56:e8:82:ac:c1:b9:60:d4:75:8a:0c:55:e9:
         88:25:4c:4a:6e:90:34:53:81:da:93:e6:f0:00:0b:4c:85:ee:
         66:fe:fd:0f:0b:5d:55:12:8a:bb:48:38:eb:28:c8:ec:04:58:
         61:22:bc:46:7e:d9:c0:44:60:b5:ff:72:3e:60:d9:8a:67:e0:
         14:cb:ab:98:03:6b:96:c2:26:0e:df:c5:b8:35:3c:64:ae:41:
         85:2e:74:70:57:72:65:29:4d:72:49:91:4b:5f:82:1a:96:74:
         d7:7e:06:e6:1a:ba:7e:e6:ea:5b:23:fa:b1:9d:a9:47:69:f8:
         f4:35:dd:89:59:6d:4e:86:25:d6:2c:56:b1:77:19:50:dd:60:
         41:ab:ed:c9:54:d6:c1:74:2a:a0:3c:11:17:a2:26:d4:74:a5:
         83:50:93:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:07 2025 by rpki-client