Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/3139302e3130372e38382e302f32332d3332203d3e20323731313839.roa
File:                     3139302e3130372e38382e302f32332d3332203d3e20323731313839.roa (raw, json)
Hash identifier:          xlUgiieB9E4mqMJc2eH05quKnDWmyEgr9EKP395ZZKE=
Subject key identifier:   45:26:91:1D:9B:76:3C:C6:6C:E5:2F:5C:A1:03:31:96:1B:54:36:0A
Certificate issuer:       /CN=ACBE08EA073D51A42B023C69A9F821BF74108655
Certificate serial:       3106A68DF79934B256996574854D83FCFCAA49CA
Authority key identifier: AC:BE:08:EA:07:3D:51:A4:2B:02:3C:69:A9:F8:21:BF:74:10:86:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACBE08EA073D51A42B023C69A9F821BF74108655.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/3139302e3130372e38382e302f32332d3332203d3e20323731313839.roa
Signing time:             Tue 07 May 2024 23:36:49 +0000
ROA not before:           Tue 07 May 2024 23:31:49 +0000
ROA not after:            Tue 06 May 2025 23:36:49 +0000
asID:                     271189
IP address blocks:        190.107.88.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:06:a6:8d:f7:99:34:b2:56:99:65:74:85:4d:83:fc:fc:aa:49:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACBE08EA073D51A42B023C69A9F821BF74108655
        Validity
            Not Before: May  7 23:31:49 2024 GMT
            Not After : May  6 23:36:49 2025 GMT
        Subject: CN=4526911D9B763CC66CE52F5CA10331961B54360A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:23:a1:95:3c:01:8d:bb:7f:d4:93:a8:cb:
                    36:6a:fa:33:6b:c3:f1:05:86:72:8b:8f:45:23:d0:
                    73:6b:ac:7e:00:8a:d2:97:81:59:e3:9b:4a:10:69:
                    ed:0d:42:b4:d5:f2:96:2f:fb:32:8c:b6:5e:f3:38:
                    6e:5f:c0:e6:36:8c:15:19:c8:b8:38:8c:9f:77:26:
                    6b:37:5e:f1:d9:9f:14:82:f6:43:45:37:8e:76:ae:
                    b8:7e:c4:6a:dd:56:6b:46:d1:7f:86:ee:fb:2b:79:
                    d3:3d:5e:c4:7d:d8:8c:cd:43:6e:11:3d:e6:58:75:
                    bd:97:77:40:52:65:d6:49:fb:18:2a:63:03:bc:08:
                    a3:8c:81:2f:d1:98:ec:7f:20:cc:59:73:19:dd:dd:
                    9a:a4:63:6f:09:e0:d1:74:8f:4c:89:76:fb:00:b2:
                    bd:83:43:a4:59:4e:5d:13:c9:48:05:94:84:1d:21:
                    aa:0e:ea:13:ab:6c:bf:30:8c:d4:fd:f3:61:e4:47:
                    be:10:16:08:6c:0b:cd:ba:8a:f9:ca:fa:b4:6a:2b:
                    3f:91:b2:25:5f:cf:e9:b8:e7:50:be:f8:8c:30:9b:
                    f1:26:62:cc:b0:01:37:96:3b:51:88:17:53:1e:09:
                    81:f5:ad:23:25:fb:32:08:41:35:80:89:ae:11:17:
                    4a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:26:91:1D:9B:76:3C:C6:6C:E5:2F:5C:A1:03:31:96:1B:54:36:0A
            X509v3 Authority Key Identifier:
                keyid:AC:BE:08:EA:07:3D:51:A4:2B:02:3C:69:A9:F8:21:BF:74:10:86:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/ACBE08EA073D51A42B023C69A9F821BF74108655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACBE08EA073D51A42B023C69A9F821BF74108655.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/3139302e3130372e38382e302f32332d3332203d3e20323731313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:f0:d7:ee:66:3a:4b:77:07:04:75:0e:69:0c:20:a0:10:a1:
         c9:b3:78:6a:5d:97:e2:44:98:6f:cf:33:5c:d0:1b:94:d8:b0:
         46:78:c7:ca:7e:76:aa:1c:b0:b1:45:e0:ca:69:4a:ad:5a:f3:
         56:61:bb:33:dc:6b:11:da:cc:b5:5d:80:d4:cc:d1:e2:74:35:
         de:3b:44:d9:76:82:bc:66:42:17:30:b5:0b:5c:2c:35:21:da:
         e7:a5:4a:7f:72:6f:7f:c8:06:92:1c:6a:70:60:fe:a7:e7:f9:
         d0:1f:f3:ff:4c:65:62:4a:ab:1b:c5:bf:6f:78:02:fa:dc:e5:
         a9:c0:86:77:40:e2:a5:f1:f5:93:17:95:41:4c:94:ec:14:26:
         e5:3d:0d:1a:0f:2d:4c:c4:48:53:e4:3c:8b:b7:42:42:a2:87:
         3f:ee:50:ca:e9:75:a6:f3:33:08:9f:57:6d:3f:28:8d:15:d0:
         b2:d3:63:81:cf:0f:4f:7c:d3:e3:47:54:da:26:6f:a7:bc:b4:
         8e:b2:e6:62:a4:2a:82:fb:2f:05:95:59:ea:02:79:85:43:b5:
         f9:bc:6e:39:35:a7:10:f1:21:45:f8:89:57:68:8d:44:0a:7b:
         11:4a:57:22:76:ba:11:c6:bb:9a:dd:65:5f:e7:7f:e7:b4:31:
         13:f0:91:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:47:10 2025 by rpki-client