Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/3139302e31322e3133362e302f32322d3234203d3e20323731323734.roa
File:                     3139302e31322e3133362e302f32322d3234203d3e20323731323734.roa (raw, json)
Hash identifier:          Q3yHgRlmtEhdQ8yepDv0S7EpKfArRnJDjYInZLcsL7Y=
Subject key identifier:   0A:05:4A:AD:76:6A:1D:CA:E6:B1:50:14:06:48:7B:57:16:3A:F8:AE
Certificate issuer:       /CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478
Certificate serial:       2AF05EBEEF0665A72959AFC3A62F34DF8E4DF4EC
Authority key identifier: A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/3139302e31322e3133362e302f32322d3234203d3e20323731323734.roa
Signing time:             Thu 09 Jan 2025 12:32:58 +0000
ROA not before:           Thu 09 Jan 2025 12:27:58 +0000
ROA not after:            Thu 08 Jan 2026 12:32:58 +0000
asID:                     271274
IP address blocks:        190.12.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f0:5e:be:ef:06:65:a7:29:59:af:c3:a6:2f:34:df:8e:4d:f4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478
        Validity
            Not Before: Jan  9 12:27:58 2025 GMT
            Not After : Jan  8 12:32:58 2026 GMT
        Subject: CN=0A054AAD766A1DCAE6B1501406487B57163AF8AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:1e:7f:60:ec:0c:3e:5b:64:02:28:35:ef:
                    e2:43:dd:c3:6b:7c:a7:c5:84:ef:e9:cf:a0:d4:fa:
                    e6:4e:95:21:89:30:8d:0e:ad:c9:26:31:ea:ac:ae:
                    1e:d1:8a:68:95:1b:a2:55:f0:18:aa:46:cd:0b:21:
                    ba:dc:10:ed:9e:a2:75:0c:e5:e2:ef:5c:64:1e:d7:
                    ff:be:9e:72:f5:e4:a8:c4:4d:62:c2:5e:47:70:41:
                    d0:17:f6:f3:9c:11:ff:7f:1e:6a:dc:ee:04:86:eb:
                    cc:06:03:1e:f2:c6:fe:a2:44:33:57:cc:22:9b:bc:
                    59:e2:41:59:9f:99:8c:98:d1:11:ae:2c:cb:2e:ab:
                    c7:1c:42:c4:c3:18:f5:59:9f:e0:6d:90:f2:65:af:
                    68:4a:e9:74:47:6b:23:9b:f7:e9:d8:8f:e3:c3:91:
                    12:19:5c:8a:b9:2d:da:7a:91:03:ab:90:5c:a6:df:
                    cf:d0:da:f5:17:66:7d:00:f9:dc:88:7d:db:a3:d6:
                    6f:ea:1f:bc:d2:52:fa:8d:1e:d3:d4:88:44:14:ad:
                    05:ac:47:f3:2e:5a:69:cb:13:fc:1f:20:99:a0:19:
                    5b:da:af:70:a7:15:22:a9:a8:29:ab:38:15:79:85:
                    24:c4:40:c8:60:db:4b:99:28:28:fc:0a:ab:6d:53:
                    30:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:05:4A:AD:76:6A:1D:CA:E6:B1:50:14:06:48:7B:57:16:3A:F8:AE
            X509v3 Authority Key Identifier:
                keyid:A1:CC:88:C7:FD:49:EE:B4:16:9B:CC:7F:C3:66:DD:AD:75:0C:14:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1CC88C7FD49EEB4169BCC7FC366DDAD750C1478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfhT7jJ2CmY94GEVKx8gymSCP84HdPk8TkESEsZZQa7u/0/3139302e31322e3133362e302f32322d3234203d3e20323731323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:e6:83:b8:bf:39:61:5f:4d:6b:bb:bc:79:ee:17:0f:da:a3:
         66:71:f8:00:19:e7:8d:7e:1e:bd:8b:f5:fa:4c:57:29:0f:4b:
         52:4d:4f:e6:01:c4:cb:f2:13:e4:bf:62:cb:fb:d3:f2:f0:a3:
         56:b7:9c:fa:b8:fe:0f:5a:8e:da:2f:90:99:44:4e:3b:8d:ce:
         12:bb:14:69:0c:c8:ad:78:b2:a4:10:8c:1e:4d:48:14:01:70:
         38:7f:1d:f8:3a:a0:05:71:80:f1:25:0f:8c:b9:ef:19:9f:17:
         63:39:78:62:6a:b0:31:32:41:d9:77:3e:7d:0d:22:da:1c:c6:
         1c:57:f6:db:b3:6b:2a:8c:7a:df:05:8d:0c:fa:e0:76:5f:56:
         33:af:71:eb:91:c4:d8:46:33:7c:08:7a:ca:b0:7c:d2:93:d5:
         25:f1:c0:fb:4e:5a:50:1f:6f:98:f6:7b:9a:2c:5a:f4:c6:4e:
         13:81:dc:03:9c:63:33:95:d7:8b:a5:7a:07:4a:95:eb:12:ff:
         4a:5c:16:8d:89:2c:dd:de:16:5e:99:84:fc:2f:9a:bb:3e:34:
         9b:08:19:1c:ef:67:78:9b:0f:04:71:b4:cc:35:08:10:87:81:
         c6:4e:ec:6d:9f:5f:13:a2:a8:df:87:68:60:16:d2:a6:a5:9c:
         75:b4:ab:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:59:16 2025 by rpki-client