Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/3139302e3130372e39302e302f32332d3233203d3e20323731313839.roa
File:                     3139302e3130372e39302e302f32332d3233203d3e20323731313839.roa (raw, json)
Hash identifier:          FJD5ulUssW1tmY+TMjLTqe+Z5PUmAbGDiR8sJokfa6A=
Subject key identifier:   AA:4D:C9:D2:0D:47:EF:5A:C5:75:72:F3:77:FF:19:D3:52:3E:90:A9
Certificate issuer:       /CN=ACBE08EA073D51A42B023C69A9F821BF74108655
Certificate serial:       4E5E2354D0360FEBA9B99B21794C5C34AFD7B9B3
Authority key identifier: AC:BE:08:EA:07:3D:51:A4:2B:02:3C:69:A9:F8:21:BF:74:10:86:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACBE08EA073D51A42B023C69A9F821BF74108655.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/3139302e3130372e39302e302f32332d3233203d3e20323731313839.roa
Signing time:             Tue 07 May 2024 23:37:37 +0000
ROA not before:           Tue 07 May 2024 23:32:37 +0000
ROA not after:            Tue 06 May 2025 23:37:37 +0000
asID:                     271189
IP address blocks:        190.107.90.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5e:23:54:d0:36:0f:eb:a9:b9:9b:21:79:4c:5c:34:af:d7:b9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACBE08EA073D51A42B023C69A9F821BF74108655
        Validity
            Not Before: May  7 23:32:37 2024 GMT
            Not After : May  6 23:37:37 2025 GMT
        Subject: CN=AA4DC9D20D47EF5AC57572F377FF19D3523E90A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ab:90:9a:79:12:45:5a:62:7e:0c:86:09:c6:
                    f2:4b:e4:b8:f2:9d:64:e0:8f:8a:41:1b:cf:b8:4f:
                    50:ee:ff:8d:87:d3:e0:dc:73:50:be:0f:32:8e:5d:
                    18:4b:8a:cb:79:0c:ad:57:4a:bb:29:d1:cd:86:a6:
                    eb:2e:7c:93:c6:7c:bf:a5:15:3f:c4:af:00:a0:95:
                    0b:a5:ff:d9:21:a1:64:1f:cc:2f:88:bc:99:39:a8:
                    ac:30:e8:b9:be:dd:63:0c:09:5b:cf:03:38:47:4e:
                    dc:ce:50:bf:ee:35:92:be:91:a2:16:75:09:0c:26:
                    d1:45:2e:76:b9:0d:5b:53:6d:09:bf:11:62:22:7c:
                    58:b4:a8:37:30:7d:4a:f4:3a:1f:cf:6d:fc:22:1f:
                    2c:71:c2:3a:ca:46:47:6c:c4:b5:11:65:c9:41:38:
                    4a:48:1b:9a:8c:9a:e9:9f:8f:f7:1e:33:a9:ec:38:
                    7d:a7:a2:21:1e:3c:24:2a:4d:c4:62:f1:cf:ab:d5:
                    ca:1a:20:f8:f8:13:5a:8c:1d:b4:93:6b:45:86:79:
                    ab:de:62:af:31:68:7e:3b:cc:8f:af:0b:77:b4:f9:
                    73:11:ba:e5:86:b4:bb:78:31:c2:8e:78:4d:04:b9:
                    e5:1c:a5:30:8c:d6:76:88:51:d7:87:a4:1d:e9:12:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4D:C9:D2:0D:47:EF:5A:C5:75:72:F3:77:FF:19:D3:52:3E:90:A9
            X509v3 Authority Key Identifier:
                keyid:AC:BE:08:EA:07:3D:51:A4:2B:02:3C:69:A9:F8:21:BF:74:10:86:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/ACBE08EA073D51A42B023C69A9F821BF74108655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACBE08EA073D51A42B023C69A9F821BF74108655.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mSXHSQpdAqhL4Er4j4nK7Rts98AqvNgBeZ5ecr3NzD7/0/3139302e3130372e39302e302f32332d3233203d3e20323731313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:c0:9f:ec:b3:c9:a8:0d:82:27:f8:e9:c4:fa:22:d3:17:77:
         ce:21:a5:be:19:04:99:ae:c4:63:31:fc:1d:c6:3e:46:73:e4:
         ef:7b:7c:fc:cd:fe:08:37:26:c9:57:5c:0d:68:36:9a:48:c0:
         24:75:a8:8d:9b:bc:92:64:7b:34:60:46:90:16:d9:b2:0f:6b:
         96:78:14:5b:24:43:92:ef:85:0c:cf:bb:62:64:dc:de:61:df:
         07:29:44:7b:35:af:ff:8d:79:b5:99:fb:a4:ec:12:b9:e9:b6:
         6c:1b:7c:2c:ab:38:b0:ec:65:6c:1a:64:61:c8:0d:af:de:a0:
         9b:70:1d:6c:1a:9b:a7:dc:0f:d6:af:2e:09:0e:15:1a:f5:80:
         b1:53:d0:f3:b2:1b:1d:35:2f:72:85:2b:c5:65:af:78:31:66:
         75:64:f2:46:23:98:a3:50:fe:d0:d8:f1:6c:ea:6e:c7:57:2b:
         00:c3:b2:40:4b:4c:48:c4:6c:2a:74:ff:7c:3d:ed:2e:85:13:
         bc:81:e7:f1:70:23:8b:a7:25:ba:f9:cf:59:bc:62:36:e3:ef:
         ef:fc:01:05:89:70:8e:0f:6f:aa:52:c1:aa:cf:14:e3:4e:a0:
         d8:08:ab:27:87:9e:e0:01:5f:d8:ad:81:07:75:4c:09:42:48:
         b7:f9:72:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:18:17 2025 by rpki-client