Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/3139302e3132332e322e302f32342d3234203d3e20323730393238.roa
File:                     3139302e3132332e322e302f32342d3234203d3e20323730393238.roa (raw, json)
Hash identifier:          FLWZ2xFcbze0mRJmIHtAM6ZKQFnKXfPs7mILK+O/IYY=
Subject key identifier:   20:E9:45:57:F4:FA:1F:2D:C7:11:37:FC:62:77:39:0B:94:5E:F6:E1
Certificate issuer:       /CN=F33964B1ED87508677A8F011D0970E1ED41A02A3
Certificate serial:       70017AF6C7E81A558790AA67466086BA8E915090
Authority key identifier: F3:39:64:B1:ED:87:50:86:77:A8:F0:11:D0:97:0E:1E:D4:1A:02:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F33964B1ED87508677A8F011D0970E1ED41A02A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/3139302e3132332e322e302f32342d3234203d3e20323730393238.roa
Signing time:             Fri 16 Feb 2024 13:12:23 +0000
ROA not before:           Fri 16 Feb 2024 13:07:23 +0000
ROA not after:            Fri 14 Feb 2025 13:12:23 +0000
asID:                     270928
IP address blocks:        190.123.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:01:7a:f6:c7:e8:1a:55:87:90:aa:67:46:60:86:ba:8e:91:50:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F33964B1ED87508677A8F011D0970E1ED41A02A3
        Validity
            Not Before: Feb 16 13:07:23 2024 GMT
            Not After : Feb 14 13:12:23 2025 GMT
        Subject: CN=20E94557F4FA1F2DC71137FC6277390B945EF6E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:58:44:f6:9c:88:06:99:59:4b:5b:b6:6f:
                    04:43:7c:6a:4b:7a:14:64:8c:32:2b:25:e3:a0:26:
                    8e:10:3a:78:74:45:2b:af:a1:30:2e:1f:5e:57:be:
                    ba:77:d5:ec:f6:1c:db:05:e5:1a:dc:e3:73:7b:b3:
                    cc:98:be:86:72:58:43:17:74:e4:44:e1:49:21:6a:
                    b3:2a:a6:a1:08:69:0e:0e:67:8c:44:20:ec:04:67:
                    ff:02:49:15:7a:fa:3f:a5:f8:92:92:d1:4a:c6:84:
                    7a:46:ac:cc:a2:dd:ad:09:0c:e8:2a:58:1f:c7:79:
                    1e:fd:67:81:40:ae:4a:dd:64:72:2b:3f:f6:b7:62:
                    9b:2c:89:5e:bf:ce:3d:a9:d4:d2:a3:e5:86:8c:be:
                    d5:40:11:be:7c:63:c6:8b:f8:6e:c9:ed:81:bd:83:
                    1b:33:58:9b:0f:ff:8d:35:e5:92:6b:4b:65:70:27:
                    51:45:95:67:b8:ec:a3:2a:1a:24:ca:95:53:fa:33:
                    91:66:c3:72:8c:ab:95:bc:98:5e:26:8c:13:1a:28:
                    43:8e:0c:06:ac:56:53:67:7a:cc:a9:61:53:f2:e6:
                    8a:e1:74:75:19:c8:9f:f7:1b:e1:2b:ce:29:16:32:
                    ca:16:9a:ae:f4:ec:48:4f:ad:d9:76:0c:df:68:97:
                    a1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E9:45:57:F4:FA:1F:2D:C7:11:37:FC:62:77:39:0B:94:5E:F6:E1
            X509v3 Authority Key Identifier:
                keyid:F3:39:64:B1:ED:87:50:86:77:A8:F0:11:D0:97:0E:1E:D4:1A:02:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/F33964B1ED87508677A8F011D0970E1ED41A02A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F33964B1ED87508677A8F011D0970E1ED41A02A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/3139302e3132332e322e302f32342d3234203d3e20323730393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:7c:32:94:9d:4e:15:3d:53:f7:83:c9:c4:0f:3c:de:43:06:
         b4:b2:1f:7e:4e:db:d0:79:6e:3b:dc:03:db:1c:c1:d7:25:b2:
         4b:18:ee:bb:8b:dc:91:8a:4a:f4:e2:80:32:5f:c5:b3:10:06:
         fd:eb:7e:79:d9:c1:15:8c:95:f2:93:f2:af:d3:87:52:31:91:
         60:40:52:b0:fe:83:37:15:58:38:09:2d:64:e1:ca:85:41:7f:
         7c:4b:52:3a:71:1d:6e:6c:e8:41:68:b2:de:35:86:e0:a9:23:
         34:41:1e:e0:1d:00:a2:95:7a:6b:f1:71:6a:80:e2:f5:38:9b:
         85:bb:90:30:4a:dd:c2:23:f2:06:4c:e6:fe:cb:47:d2:05:d8:
         b6:16:5a:41:e9:3b:6b:9a:a2:71:6d:d8:29:f6:0b:54:9e:71:
         01:43:b5:56:3b:3e:1c:61:f8:3e:72:77:0a:04:ad:4e:82:41:
         51:00:9a:de:8d:b8:53:fa:89:01:5d:37:f1:d4:54:70:a7:c4:
         a5:d9:7e:6f:c3:10:55:a2:5d:9a:28:c1:ce:e4:ea:79:c2:17:
         1a:ab:8b:6c:f0:60:9b:64:bb:65:3b:fe:42:5f:ab:52:62:5d:
         df:0f:85:f4:ce:5e:82:83:12:d1:17:da:10:77:c8:78:f1:21:
         6f:cb:df:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:55:13 2025 by rpki-client