Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/3139302e3132332e322e302f32332d3233203d3e20323730393238.roa
File:                     3139302e3132332e322e302f32332d3233203d3e20323730393238.roa (raw, json)
Hash identifier:          8Jp9UtcMpn2ImxfAFH5coZLkvw7QDn8qGgZaiZqWd30=
Subject key identifier:   B4:F9:51:6D:2C:1B:D3:55:F0:62:AE:67:31:6E:94:5F:2D:F4:AB:E4
Certificate issuer:       /CN=1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F
Certificate serial:       3290CE830A9F0F1723C254AD968E3B8E84F732E7
Authority key identifier: 1B:DF:7A:3D:41:48:DF:1D:00:5B:63:FE:AC:01:57:72:6F:A7:BE:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/3139302e3132332e322e302f32332d3233203d3e20323730393238.roa
Signing time:             Thu 13 Jun 2024 03:53:02 +0000
ROA not before:           Thu 13 Jun 2024 03:48:02 +0000
ROA not after:            Thu 12 Jun 2025 03:53:02 +0000
asID:                     270928
IP address blocks:        190.123.2.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:90:ce:83:0a:9f:0f:17:23:c2:54:ad:96:8e:3b:8e:84:f7:32:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F
        Validity
            Not Before: Jun 13 03:48:02 2024 GMT
            Not After : Jun 12 03:53:02 2025 GMT
        Subject: CN=B4F9516D2C1BD355F062AE67316E945F2DF4ABE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:f5:80:ca:65:3d:ff:52:4f:14:0e:9b:2b:
                    69:e3:53:05:56:2d:e9:b8:ce:e3:90:73:d3:1b:84:
                    d5:bd:06:2b:71:4c:3e:59:46:11:78:af:a1:49:5f:
                    f8:44:ff:01:08:71:8f:3c:4a:2b:18:9b:de:39:ac:
                    07:4f:83:2c:2d:8d:12:6a:46:0e:7d:c2:30:30:6d:
                    d1:ae:cf:3a:bb:af:04:89:12:49:e4:ae:d6:c6:17:
                    38:52:60:30:e3:59:fe:a1:11:91:00:4f:77:86:c6:
                    29:68:3d:9e:32:47:11:ed:bb:11:9e:a3:e6:5e:2a:
                    77:a5:a0:8d:37:55:90:62:8d:bc:76:1c:69:da:f5:
                    aa:e6:a1:71:8f:15:5f:f1:dd:7d:17:95:b3:96:1c:
                    db:fb:1e:62:7f:1c:2d:2f:c7:07:97:6c:ff:9e:a0:
                    42:2f:8a:7b:f0:a7:c8:b7:19:ba:cf:02:60:fe:9d:
                    55:00:ec:a2:16:05:09:86:11:c0:f3:3b:fd:cf:b5:
                    2d:cd:e4:50:5d:22:e3:2b:59:c1:70:c5:c7:66:8a:
                    ea:ae:78:cc:d5:a9:60:2e:f8:8e:6a:27:fb:52:4d:
                    d1:14:0d:a1:90:eb:ae:29:92:f0:af:d3:da:22:69:
                    ca:3c:47:d1:1d:ed:b8:42:b9:5e:df:9d:c8:a6:1e:
                    47:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F9:51:6D:2C:1B:D3:55:F0:62:AE:67:31:6E:94:5F:2D:F4:AB:E4
            X509v3 Authority Key Identifier:
                keyid:1B:DF:7A:3D:41:48:DF:1D:00:5B:63:FE:AC:01:57:72:6F:A7:BE:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/3139302e3132332e322e302f32332d3233203d3e20323730393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:ab:41:5d:59:09:b5:6f:5a:00:2b:02:74:3b:dc:c9:1d:a9:
         87:f4:86:1a:f6:40:37:2c:8a:f0:3f:4e:67:34:58:1f:6b:79:
         49:a3:ac:95:6c:04:bb:7e:c5:f9:ce:26:f2:40:78:58:d6:4f:
         3c:21:c4:ee:66:9d:cc:b1:6b:6e:7d:2a:46:13:84:e6:06:c4:
         29:81:91:02:4b:6e:0e:20:00:3d:62:da:4e:7d:e3:5e:5a:9e:
         c5:6e:49:cd:64:82:d1:e2:c6:1f:a4:6a:f1:c3:3c:52:5d:f3:
         48:72:fd:9a:ea:fb:d7:d4:38:2e:1b:78:1f:0f:f1:14:6f:fc:
         14:57:d5:52:16:5e:8e:f4:89:40:2f:dd:b2:c3:80:f5:6b:0e:
         4f:0a:a1:4b:1e:0e:c3:15:33:42:1a:43:d6:8a:ca:e9:4d:00:
         50:aa:f4:d6:f3:f0:b1:41:c5:26:cb:16:4d:8a:2f:81:5f:08:
         47:ed:79:42:af:46:29:92:5f:8b:13:c0:03:b6:fc:04:c9:cd:
         c9:20:27:1b:18:b3:fa:a5:2a:63:8a:39:16:a5:91:ff:65:96:
         bb:f0:9f:54:08:e9:28:87:30:9a:33:26:77:40:8a:1e:f6:4e:
         11:02:6e:d3:12:80:e0:88:1e:2c:6c:40:a7:31:5e:ba:6c:27:
         59:8c:10:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:08:56 2025 by rpki-client