Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/3139302e392e38342e302f32322d3332203d3e20323731353935.roa
File:                     3139302e392e38342e302f32322d3332203d3e20323731353935.roa (raw, json)
Hash identifier:          VNqFxChjSOp78IX+LdJKBoVtVw4RUS6yHJnbXRnQb4I=
Subject key identifier:   E8:6B:16:BD:66:0A:A9:98:1E:67:D5:F0:7A:6F:02:B0:4F:D5:C5:33
Certificate issuer:       /CN=2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC
Certificate serial:       61A4AE5E4914FD7E122604C2D9670419F7354047
Authority key identifier: 2F:9E:D4:DB:7F:EB:E4:0A:94:D4:D7:C5:D6:A1:75:16:A3:C3:CE:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/3139302e392e38342e302f32322d3332203d3e20323731353935.roa
Signing time:             Fri 21 Feb 2025 17:42:16 +0000
ROA not before:           Fri 21 Feb 2025 17:37:16 +0000
ROA not after:            Fri 20 Feb 2026 17:42:16 +0000
asID:                     271595
IP address blocks:        190.9.84.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a4:ae:5e:49:14:fd:7e:12:26:04:c2:d9:67:04:19:f7:35:40:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC
        Validity
            Not Before: Feb 21 17:37:16 2025 GMT
            Not After : Feb 20 17:42:16 2026 GMT
        Subject: CN=E86B16BD660AA9981E67D5F07A6F02B04FD5C533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:07:46:94:df:59:0d:63:57:5a:2b:58:43:
                    13:a5:5f:9f:47:ff:b6:d4:54:1e:df:5e:25:52:f7:
                    11:a7:03:22:12:01:38:97:b9:93:dc:fe:00:8c:31:
                    da:9e:31:37:2f:21:bc:5b:32:da:4e:47:9b:89:b1:
                    04:5e:89:77:91:92:b8:ac:b0:6a:f0:99:ec:b1:3e:
                    32:eb:af:ac:ee:ae:dd:2f:61:98:85:aa:78:be:ae:
                    b6:ca:db:3e:46:c7:d1:01:1f:6a:94:bd:8e:ed:50:
                    74:b9:53:d6:6e:d8:54:61:eb:bd:56:e8:fb:cf:27:
                    e3:f5:4f:8c:50:1b:f7:11:57:a0:0d:b9:e8:13:05:
                    40:0b:b3:90:eb:1d:50:55:12:51:31:0e:e3:52:9b:
                    ee:64:52:85:02:07:a7:41:60:0e:2b:81:46:2b:58:
                    74:4e:8f:55:2b:77:23:1c:98:29:87:54:06:70:84:
                    b4:4f:4f:6a:09:13:31:a2:38:42:ad:98:13:3b:8f:
                    13:de:4c:bc:66:8e:6c:56:dc:30:21:3c:db:73:47:
                    ef:80:9e:23:d7:63:a0:ae:f4:26:8d:8c:7e:b8:73:
                    79:ea:40:cd:ac:e9:b4:52:9b:11:70:88:a2:d6:2d:
                    2d:2f:5b:7a:26:4e:2b:ed:0f:a6:09:34:ff:81:47:
                    45:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6B:16:BD:66:0A:A9:98:1E:67:D5:F0:7A:6F:02:B0:4F:D5:C5:33
            X509v3 Authority Key Identifier:
                keyid:2F:9E:D4:DB:7F:EB:E4:0A:94:D4:D7:C5:D6:A1:75:16:A3:C3:CE:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/3139302e392e38342e302f32322d3332203d3e20323731353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:de:4b:75:3a:32:ce:36:34:ca:03:90:93:b3:ea:3e:45:95:
         f2:60:2c:04:2b:62:35:08:46:19:d3:5e:66:13:e1:46:71:23:
         d3:13:e8:0b:85:24:ca:a0:dc:65:3e:6f:31:31:34:a4:fb:58:
         68:76:90:b0:64:16:57:a8:55:18:38:1d:f6:19:42:22:e6:07:
         c2:f2:90:e7:08:94:b0:7c:41:e3:f3:e4:fb:e5:f1:81:25:0c:
         59:19:df:cd:45:1c:87:73:a0:30:a1:92:f9:52:de:33:fe:03:
         9c:c5:bb:2f:26:ad:34:84:58:a4:93:83:74:19:e3:dc:6a:08:
         6a:86:0f:b7:c3:37:dd:44:14:69:2d:d9:c3:b0:fe:02:b4:f9:
         fd:2b:1c:c6:69:0f:75:ed:95:06:6d:62:58:31:3f:ab:77:12:
         41:b9:61:f2:c1:0b:03:f9:f1:07:13:5a:8b:93:d5:1d:4f:97:
         76:c0:4e:3b:9c:33:6d:b3:fb:97:e9:a1:69:41:f2:d2:75:6f:
         83:22:76:b1:b2:9b:f6:63:09:a7:6e:6a:41:f3:c7:7a:76:08:
         01:60:5a:55:84:6e:fa:3d:4a:bd:10:e1:c3:62:4f:0f:23:80:
         15:09:a8:69:37:ec:29:45:73:da:f6:f4:1b:d3:a0:6b:42:cd:
         17:01:bf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:24:48 2025 by rpki-client