Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/3139302e382e3137332e302f32342d3234203d3e20323731303131.roa
File:                     3139302e382e3137332e302f32342d3234203d3e20323731303131.roa (raw, json)
Hash identifier:          eYgweG3/5oDZV0935nRvk6IxMmeYQyKvD0XdwFjXp/o=
Subject key identifier:   08:51:59:1B:BC:CE:61:8B:94:E7:2F:09:E8:12:9B:BD:3A:01:75:DE
Certificate issuer:       /CN=F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9
Certificate serial:       3216EA8570DF3682551E9203E1BB585ABFCF363E
Authority key identifier: F6:33:EC:1D:98:41:26:CD:6B:D3:A7:EF:2F:04:BC:6E:15:F2:61:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/3139302e382e3137332e302f32342d3234203d3e20323731303131.roa
Signing time:             Thu 06 Jul 2023 19:00:00 +0000
ROA not before:           Thu 06 Jul 2023 18:55:00 +0000
ROA not after:            Thu 04 Jul 2024 19:00:00 +0000
asID:                     271011
IP address blocks:        190.8.173.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:16:ea:85:70:df:36:82:55:1e:92:03:e1:bb:58:5a:bf:cf:36:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9
        Validity
            Not Before: Jul  6 18:55:00 2023 GMT
            Not After : Jul  4 19:00:00 2024 GMT
        Subject: CN=3082010A028201010091D49FC445A42926A60A393DF20DF3D68BE3C3D3275576CFF604808CB814E5739BD40B167C77158AF5D0D0896779ADDBAAC85C4523EBA19DC32E7CB1C748D3DA171850B3301240394B33D1D4DD178FDEAA84C0A469DE66ACFBF157335755F99135265E59C2FE8FA0AB2875839930B7821413C664C20DE15C16EA782095B192B3908BF47FBA2FB35DFD17656DE885EF93886DC517E9D0954C502865A4D94D9DC164851B088F3B142CB0B1C748E80B55798D6F337F420BF32898C36D0CF70ED1C46199DDCE183563A23638D56329D6DA25F8A2BD973559C59BD40A061531217DB854662DF637A93C7ECE3B3EC49789B41D1DB8EC2BBDF8135919D6FBA1526422350203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d4:9f:c4:45:a4:29:26:a6:0a:39:3d:f2:0d:
                    f3:d6:8b:e3:c3:d3:27:55:76:cf:f6:04:80:8c:b8:
                    14:e5:73:9b:d4:0b:16:7c:77:15:8a:f5:d0:d0:89:
                    67:79:ad:db:aa:c8:5c:45:23:eb:a1:9d:c3:2e:7c:
                    b1:c7:48:d3:da:17:18:50:b3:30:12:40:39:4b:33:
                    d1:d4:dd:17:8f:de:aa:84:c0:a4:69:de:66:ac:fb:
                    f1:57:33:57:55:f9:91:35:26:5e:59:c2:fe:8f:a0:
                    ab:28:75:83:99:30:b7:82:14:13:c6:64:c2:0d:e1:
                    5c:16:ea:78:20:95:b1:92:b3:90:8b:f4:7f:ba:2f:
                    b3:5d:fd:17:65:6d:e8:85:ef:93:88:6d:c5:17:e9:
                    d0:95:4c:50:28:65:a4:d9:4d:9d:c1:64:85:1b:08:
                    8f:3b:14:2c:b0:b1:c7:48:e8:0b:55:79:8d:6f:33:
                    7f:42:0b:f3:28:98:c3:6d:0c:f7:0e:d1:c4:61:99:
                    dd:ce:18:35:63:a2:36:38:d5:63:29:d6:da:25:f8:
                    a2:bd:97:35:59:c5:9b:d4:0a:06:15:31:21:7d:b8:
                    54:66:2d:f6:37:a9:3c:7e:ce:3b:3e:c4:97:89:b4:
                    1d:1d:b8:ec:2b:bd:f8:13:59:19:d6:fb:a1:52:64:
                    22:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:51:59:1B:BC:CE:61:8B:94:E7:2F:09:E8:12:9B:BD:3A:01:75:DE
            X509v3 Authority Key Identifier:
                keyid:F6:33:EC:1D:98:41:26:CD:6B:D3:A7:EF:2F:04:BC:6E:15:F2:61:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F633EC1D984126CD6BD3A7EF2F04BC6E15F261D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vUHcD7GhxGkrcJ85X6Uix3PhoPgQZppgZL2TVYmZrkA/0/3139302e382e3137332e302f32342d3234203d3e20323731303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:bb:9d:3c:bb:a7:fa:f4:28:2b:64:40:a6:a5:cd:8b:a8:eb:
         e2:06:0e:af:e5:a1:7b:5b:be:18:e2:20:75:ab:a8:a4:58:89:
         65:22:13:e6:1c:d3:b9:83:b1:4b:18:96:c7:d6:d3:8f:33:56:
         5f:8c:f0:50:71:f6:35:28:06:9e:ba:4d:d2:df:5d:75:52:21:
         ff:6c:7f:95:6c:bf:12:3d:d7:e5:fa:cc:49:38:d6:ca:8f:b3:
         90:61:28:5b:98:5d:c8:94:0d:28:ba:29:6a:72:6e:a4:da:e8:
         25:15:4f:28:7c:3a:4d:87:f4:88:de:65:c0:2b:99:00:41:b0:
         cf:e9:b1:93:e5:ab:02:4e:0f:90:8a:f2:bf:10:b5:ac:71:b4:
         3e:ab:9d:86:6f:f5:0a:e4:6e:3e:e2:10:29:be:69:eb:80:23:
         1e:70:e1:09:bc:9f:f5:63:fe:b1:52:ae:9f:40:14:56:70:08:
         89:4a:53:ba:32:ac:52:53:28:fc:5a:69:b7:3d:dc:90:14:0e:
         93:82:0f:d1:d5:be:b6:95:68:36:3a:fc:6a:de:98:c8:d5:db:
         b8:7d:26:b1:03:ec:5a:88:ef:ba:28:f7:23:fe:d6:1b:2d:ad:
         e5:b4:41:bc:4f:40:29:74:f7:f6:a9:53:aa:91:bd:37:2f:e6:
         76:a6:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:48 2025 by rpki-client