Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/3139302e38392e32312e302f32342d3234203d3e20323730333530.roa
File:                     3139302e38392e32312e302f32342d3234203d3e20323730333530.roa (raw, json)
Hash identifier:          ll7+YwC2sAVM8oeIbRYefG3d24DKepuYTZ8LGwbYXSM=
Subject key identifier:   30:A0:BC:4B:04:C5:3A:7F:F0:EC:39:21:88:EA:71:32:7A:F9:03:24
Certificate issuer:       /CN=5FEAAC2000A665FC612389853C8BC5F64B6E676E
Certificate serial:       0C69FAFCAD9BDD9A46C01C3533792C7C75232380
Authority key identifier: 5F:EA:AC:20:00:A6:65:FC:61:23:89:85:3C:8B:C5:F6:4B:6E:67:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/3139302e38392e32312e302f32342d3234203d3e20323730333530.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     270350
IP address blocks:        190.89.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:69:fa:fc:ad:9b:dd:9a:46:c0:1c:35:33:79:2c:7c:75:23:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FEAAC2000A665FC612389853C8BC5F64B6E676E
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=30A0BC4B04C53A7FF0EC392188EA71327AF90324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:63:93:6e:1f:3d:da:a7:e9:c9:ba:21:a4:
                    58:95:cd:43:b3:33:38:a9:0b:93:4a:ce:73:8c:a7:
                    dd:29:18:0c:15:38:41:0a:5c:d1:4e:88:b0:7d:ff:
                    86:b1:09:50:15:81:fa:21:5e:cb:39:ce:08:52:1a:
                    f5:b3:4f:d7:d7:e8:fd:75:12:42:46:e1:4b:63:0f:
                    7d:15:a1:30:e6:d2:a3:a2:ce:b4:b0:d3:31:0e:5c:
                    95:a2:5f:66:69:d6:d2:96:51:04:ab:7b:30:dd:31:
                    1e:9e:aa:46:c8:65:4d:c5:81:72:0c:81:9a:4d:43:
                    e6:b5:b2:51:22:55:99:f6:22:36:1b:ad:73:5c:70:
                    be:e2:16:f8:95:b7:75:5b:c5:af:5b:6f:d5:b0:18:
                    3a:3b:0f:97:f1:81:33:c6:e0:cd:db:f0:08:9b:be:
                    38:b6:08:b8:08:34:ce:c7:b0:6a:58:c9:da:5f:f1:
                    25:9a:75:f6:83:8d:80:3d:72:5c:12:dc:7b:e6:2f:
                    f0:b2:c6:04:33:91:4c:4f:b2:a9:9d:77:7d:90:dd:
                    d5:b7:d8:54:5d:d3:a5:82:1d:25:bb:00:a4:1e:ed:
                    36:b6:13:18:b7:9e:f6:f0:c6:7a:fc:d9:4b:1d:de:
                    b9:3f:2f:5b:77:f3:d7:01:4a:8d:88:42:1e:52:14:
                    47:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A0:BC:4B:04:C5:3A:7F:F0:EC:39:21:88:EA:71:32:7A:F9:03:24
            X509v3 Authority Key Identifier:
                keyid:5F:EA:AC:20:00:A6:65:FC:61:23:89:85:3C:8B:C5:F6:4B:6E:67:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FEAAC2000A665FC612389853C8BC5F64B6E676E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/1/3139302e38392e32312e302f32342d3234203d3e20323730333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:2b:3a:86:f5:d2:99:45:c0:66:82:74:ec:aa:13:5d:68:e7:
         d3:74:7a:18:ad:55:25:9b:0a:02:7e:47:b4:14:e2:e1:4d:a7:
         e2:9a:00:2f:b3:d6:2b:0e:51:d8:21:0b:6a:ea:da:51:45:63:
         8e:dd:98:15:64:d8:7e:4a:60:34:45:0f:c6:64:0b:ab:f1:d2:
         76:89:66:3b:60:0d:d4:70:c8:e4:fe:e8:27:28:f2:2a:d2:8c:
         ca:bb:bb:25:d5:40:a4:61:64:21:61:45:69:48:b7:56:a3:ab:
         ae:d6:06:69:21:cd:f9:64:03:87:66:01:cc:4b:d3:f1:f7:6f:
         d6:ce:e2:2d:31:8d:98:10:d5:f9:90:b4:b3:a8:bd:5e:de:03:
         10:69:f2:89:c2:79:0e:cd:8e:2e:af:89:5b:95:79:6a:50:fe:
         5f:c6:e2:60:ba:06:87:08:2b:c5:73:55:f2:68:67:10:5e:c6:
         d0:21:c2:bb:99:80:5d:75:ae:a7:63:02:b1:c0:4a:76:8f:c6:
         6e:da:ef:f7:ee:ca:5d:e7:fa:51:bd:c6:a6:ad:2b:e9:fc:1a:
         ee:c8:dc:c8:0c:fa:b0:c8:78:f3:45:e1:e0:55:df:3c:80:9c:
         76:23:ec:bb:d1:09:64:c8:79:dc:91:23:4d:c0:d5:76:04:ba:
         7d:ea:0e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:39 2025 by rpki-client