Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37362e302f32342d3234203d3e20323731333533.roa
File:                     3139302e35322e37362e302f32342d3234203d3e20323731333533.roa (raw, json)
Hash identifier:          ZdfExrOUHHezLOrgDtJt6m+pUlMkmX43ABTVJG5swQ4=
Subject key identifier:   69:E5:C2:89:3C:FA:90:98:E1:7B:89:24:4C:B4:EC:A5:02:5F:19:95
Certificate issuer:       /CN=49DBAD5FECCD33235162300AA0573876E9771175
Certificate serial:       36AFC4CEACCB459F3A2BF0074A1F1852111F2FD3
Authority key identifier: 49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37362e302f32342d3234203d3e20323731333533.roa
Signing time:             Wed 17 Jul 2024 19:34:47 +0000
ROA not before:           Wed 17 Jul 2024 19:29:47 +0000
ROA not after:            Wed 16 Jul 2025 19:34:47 +0000
asID:                     271353
IP address blocks:        190.52.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:af:c4:ce:ac:cb:45:9f:3a:2b:f0:07:4a:1f:18:52:11:1f:2f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49DBAD5FECCD33235162300AA0573876E9771175
        Validity
            Not Before: Jul 17 19:29:47 2024 GMT
            Not After : Jul 16 19:34:47 2025 GMT
        Subject: CN=69E5C2893CFA9098E17B89244CB4ECA5025F1995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ff:ae:c8:1b:83:0e:e3:be:ce:c1:40:53:24:
                    21:ee:57:c1:1a:35:d3:fd:3a:5a:01:00:15:e3:f3:
                    31:e8:55:44:77:46:73:62:cf:56:6f:90:7f:c8:54:
                    15:f9:07:a6:55:74:b1:e4:a5:06:7f:bd:d5:23:64:
                    b7:df:c3:72:35:a3:2d:ea:6c:81:ba:67:88:60:90:
                    d8:53:fe:78:bd:55:2e:f3:85:3f:4d:ba:72:16:92:
                    3a:6e:16:fe:e1:4a:bc:dd:29:8b:e1:69:40:d5:bc:
                    62:ba:af:e2:84:3a:22:81:67:14:cb:a6:2c:c7:cb:
                    c7:af:e3:27:26:e6:29:fa:8a:5d:af:61:8b:a4:ed:
                    a1:28:ce:6d:26:69:ce:5d:e2:bb:d9:a6:5c:c3:56:
                    21:14:46:0e:5c:71:8d:27:75:43:90:5a:45:6e:2b:
                    87:17:4b:4f:4c:27:23:1e:8a:f4:0d:be:7d:99:94:
                    65:88:a6:ba:23:14:48:92:58:3d:cd:9b:8d:19:d7:
                    ea:51:2f:ab:ae:4a:75:88:f9:56:67:a3:36:a4:40:
                    ee:83:74:c7:06:74:39:bb:8e:09:ca:a2:96:e6:27:
                    1e:fa:0f:49:56:bc:cd:20:74:59:2b:3b:55:ab:78:
                    37:64:2d:80:82:63:28:bf:c8:06:0b:f5:65:9b:46:
                    35:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E5:C2:89:3C:FA:90:98:E1:7B:89:24:4C:B4:EC:A5:02:5F:19:95
            X509v3 Authority Key Identifier:
                keyid:49:DB:AD:5F:EC:CD:33:23:51:62:30:0A:A0:57:38:76:E9:77:11:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/49DBAD5FECCD33235162300AA0573876E9771175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49DBAD5FECCD33235162300AA0573876E9771175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/3139302e35322e37362e302f32342d3234203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:f7:26:06:65:b7:9f:14:75:ab:6b:03:b4:bf:1b:f2:0b:b2:
         c6:fd:84:12:e4:a9:69:a3:18:35:0e:37:48:a2:06:20:58:b2:
         24:1f:83:d3:41:ae:34:78:a4:c2:b9:6a:48:a3:ac:3c:8a:3d:
         f5:51:5f:31:02:e8:c4:15:7e:82:e3:d4:13:d7:87:b9:f6:50:
         d7:07:ee:38:e5:94:e4:8e:41:9b:85:49:b8:90:7c:60:ff:91:
         80:77:fa:fb:bb:39:4e:57:57:24:39:38:4c:ac:57:69:7f:88:
         60:5b:18:61:87:db:eb:1d:4c:28:81:02:60:2b:46:3e:dd:a9:
         21:94:5e:e2:8a:56:b6:e3:c1:8a:62:c7:92:11:c6:b9:be:12:
         c2:73:ab:05:cd:0b:58:8c:1a:5b:96:af:4f:9c:1d:83:c9:00:
         e0:26:b8:de:79:3c:40:64:91:f8:a3:cd:96:f3:62:da:44:2d:
         25:f0:06:ae:3a:74:b2:4d:d6:72:90:06:ee:c5:41:13:4f:9e:
         c4:48:b4:5c:15:02:0a:9b:25:cf:56:4b:72:88:b2:69:20:33:
         49:8d:af:23:bf:5c:63:da:73:13:32:7c:9e:cd:31:ef:3e:79:
         8e:d0:8d:26:41:98:a0:6d:ed:10:64:0c:b2:fb:3a:4e:fc:e8:
         5e:1e:11:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:35 2025 by rpki-client