Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/0/3139302e38332e302e302f32342d3234203d3e20323730333139.roa
File:                     3139302e38332e302e302f32342d3234203d3e20323730333139.roa (raw, json)
Hash identifier:          oFNzsa+Sgp9IcpbzDUZwAlrzUz9Mgv/MlUtG1GhbmkY=
Subject key identifier:   80:62:6A:01:CB:CD:0C:AC:49:5D:66:F8:09:B6:62:2A:B8:97:DD:70
Certificate issuer:       /CN=A5A26ED2218EB0EB577553778D5CD61470558FF3
Certificate serial:       1D23837FBB4557E2E2EBDA4FE7CACD1C37BFA78F
Authority key identifier: A5:A2:6E:D2:21:8E:B0:EB:57:75:53:77:8D:5C:D6:14:70:55:8F:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5A26ED2218EB0EB577553778D5CD61470558FF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/0/3139302e38332e302e302f32342d3234203d3e20323730333139.roa
Signing time:             Wed 21 Feb 2024 15:17:57 +0000
ROA not before:           Wed 21 Feb 2024 15:12:57 +0000
ROA not after:            Wed 19 Feb 2025 15:17:57 +0000
asID:                     270319
IP address blocks:        190.83.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:23:83:7f:bb:45:57:e2:e2:eb:da:4f:e7:ca:cd:1c:37:bf:a7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A26ED2218EB0EB577553778D5CD61470558FF3
        Validity
            Not Before: Feb 21 15:12:57 2024 GMT
            Not After : Feb 19 15:17:57 2025 GMT
        Subject: CN=80626A01CBCD0CAC495D66F809B6622AB897DD70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:06:a3:3e:9b:a2:72:a1:74:bc:f5:ad:f1:
                    2d:52:88:2e:86:14:fc:cf:29:32:d4:f6:73:f2:b5:
                    01:43:64:ac:3a:7d:56:09:5f:4e:cf:12:22:9a:f8:
                    a0:08:ad:ae:9f:b2:f4:b8:4d:31:ef:27:73:87:78:
                    2e:6b:da:94:7c:c0:c2:e6:3d:f5:6f:a2:79:46:87:
                    6a:9a:3f:ad:98:7b:ca:c7:5b:a6:fd:6e:e3:79:81:
                    07:4d:a9:b4:76:fb:07:35:b2:70:f3:48:2d:df:2e:
                    e1:cf:28:4d:bd:36:f4:a0:6c:0e:8a:03:69:45:ec:
                    29:34:ad:03:24:0f:a1:c5:db:e8:4b:69:a5:93:73:
                    34:5a:27:f6:97:21:7e:c9:b4:0d:bb:48:fb:5e:86:
                    db:21:d2:e1:31:cd:17:96:39:c2:0d:f5:35:6f:4a:
                    05:7c:56:b9:54:5b:bc:6c:68:05:4d:4a:01:eb:cf:
                    9c:88:63:de:71:7e:51:9b:ca:a7:ed:6f:be:39:76:
                    d4:9a:6e:99:b5:ee:44:2e:4e:f3:04:b3:98:fb:d3:
                    86:3d:7e:b7:53:0f:d2:89:77:46:85:e8:4e:bd:0b:
                    29:5e:92:f1:f6:53:3c:8b:84:90:a7:a2:9a:9c:6d:
                    c6:ab:a9:30:53:7a:00:0b:c8:b2:3c:c7:f9:e4:bc:
                    2b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:62:6A:01:CB:CD:0C:AC:49:5D:66:F8:09:B6:62:2A:B8:97:DD:70
            X509v3 Authority Key Identifier:
                keyid:A5:A2:6E:D2:21:8E:B0:EB:57:75:53:77:8D:5C:D6:14:70:55:8F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/0/A5A26ED2218EB0EB577553778D5CD61470558FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5A26ED2218EB0EB577553778D5CD61470558FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/0/3139302e38332e302e302f32342d3234203d3e20323730333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:f0:e6:00:74:3f:4c:51:23:59:ff:d1:a1:86:ea:5f:a1:ac:
         5f:9e:8e:08:66:6a:ff:e0:8f:4f:99:6a:06:9c:23:fb:16:f1:
         41:6d:d4:96:f2:08:c8:33:b6:68:cf:fd:50:25:0a:24:89:09:
         59:42:32:6f:d6:1b:6a:15:3d:30:cb:8d:a5:52:cc:22:65:d3:
         76:cd:1f:a2:7c:9e:fa:9f:2f:0c:fd:6e:44:b5:b8:04:6a:af:
         5e:de:5d:dd:e3:56:7a:d1:86:3c:ac:79:26:75:23:66:5b:67:
         ee:a5:95:d1:8d:dc:1f:21:c0:10:88:8b:9c:3f:25:72:22:32:
         92:6f:5f:cd:cf:10:81:b5:6a:3c:21:9f:78:9b:98:3c:52:cb:
         62:3f:55:00:aa:b3:e3:2a:6c:73:4d:06:e4:d5:1b:ee:f8:39:
         1b:da:54:91:7b:44:e5:2c:21:a7:95:67:57:ec:55:0e:8a:cb:
         4d:ae:37:4d:72:6c:aa:66:d5:08:73:d6:42:67:7d:80:fd:ba:
         3c:88:65:ac:76:a1:9d:da:02:9d:1a:a3:d7:c0:73:b7:42:21:
         e0:70:3d:43:cb:bc:40:86:6c:25:4b:51:bf:da:77:8c:ca:55:
         09:3a:bf:20:05:7b:e7:77:cc:fa:f3:d3:bb:07:71:87:d5:bb:
         d6:79:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:07 2025 by rpki-client