Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/0/3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa
File:                     3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa (raw, json)
Hash identifier:          o/cxBZuRshdEgneeGUO7Lhv/SRp+ReW8hDipMIRhvRU=
Subject key identifier:   63:B1:A8:09:63:34:C4:41:89:42:36:0B:0D:35:0E:47:CC:26:19:CE
Certificate issuer:       /CN=D931E9B26A1EAFC9CFA4CB5B3FFDDB9AF23C9752
Certificate serial:       6B576AB25E5FA4A243D1D919A0FA0F25CFAF18FA
Authority key identifier: D9:31:E9:B2:6A:1E:AF:C9:CF:A4:CB:5B:3F:FD:DB:9A:F2:3C:97:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D931E9B26A1EAFC9CFA4CB5B3FFDDB9AF23C9752.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/0/3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa
Signing time:             Mon 19 Feb 2024 17:15:29 +0000
ROA not before:           Mon 19 Feb 2024 17:10:29 +0000
ROA not after:            Mon 17 Feb 2025 17:15:29 +0000
asID:                     270690
IP address blocks:        190.120.32.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:57:6a:b2:5e:5f:a4:a2:43:d1:d9:19:a0:fa:0f:25:cf:af:18:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D931E9B26A1EAFC9CFA4CB5B3FFDDB9AF23C9752
        Validity
            Not Before: Feb 19 17:10:29 2024 GMT
            Not After : Feb 17 17:15:29 2025 GMT
        Subject: CN=63B1A8096334C4418942360B0D350E47CC2619CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:54:19:2e:01:7d:e3:18:0c:5a:23:70:32:
                    06:44:2f:70:b7:5a:64:56:5e:c0:62:54:59:6f:c8:
                    9e:4e:e0:7b:ca:38:5f:cf:6e:69:de:1f:05:f7:b6:
                    88:97:27:05:a3:33:02:ff:b1:e2:5b:2a:6e:06:a2:
                    44:84:0b:26:2a:e6:f5:ef:de:7f:26:0d:03:ff:31:
                    61:79:65:32:03:01:2d:ae:53:81:15:92:d0:32:13:
                    6e:83:9d:8b:e2:c1:cd:6f:eb:cc:46:51:fc:fc:20:
                    7c:79:6b:80:82:40:7e:de:bc:91:13:b7:bd:e4:50:
                    04:6f:a6:fe:e5:cb:59:fe:83:c6:8f:00:02:b6:c9:
                    9e:ed:4b:dc:a9:60:ff:a2:ba:2e:bf:78:c4:62:00:
                    61:24:04:3d:0d:6f:b8:ab:70:66:cb:2e:d3:fc:4f:
                    e9:57:37:93:dc:03:30:1e:5b:35:50:2e:19:2d:2d:
                    4d:e0:6a:d4:8e:77:44:21:f4:09:52:88:94:9a:05:
                    cc:f5:b6:b9:80:02:70:db:e0:c2:e3:01:f3:46:a1:
                    22:80:2b:34:47:1b:db:22:4d:7d:4b:dd:2c:e3:2c:
                    08:ae:4d:ff:de:75:73:08:25:5b:0a:1a:67:b7:76:
                    b1:79:d5:58:f4:56:05:b7:6b:0f:03:33:aa:c4:e1:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B1:A8:09:63:34:C4:41:89:42:36:0B:0D:35:0E:47:CC:26:19:CE
            X509v3 Authority Key Identifier:
                keyid:D9:31:E9:B2:6A:1E:AF:C9:CF:A4:CB:5B:3F:FD:DB:9A:F2:3C:97:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/0/D931E9B26A1EAFC9CFA4CB5B3FFDDB9AF23C9752.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D931E9B26A1EAFC9CFA4CB5B3FFDDB9AF23C9752.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/0/3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:85:c1:a5:5f:16:9e:a9:7d:84:b1:2f:aa:0f:f7:72:ca:e6:
         3b:9d:26:b7:79:6e:1c:71:76:16:58:76:bc:2c:27:c9:5f:48:
         78:7e:ed:6a:a0:0c:2f:e1:c8:96:95:33:32:79:4c:d1:59:70:
         91:bc:7d:92:d1:7b:4d:ac:19:0e:62:df:67:67:95:01:a6:1a:
         36:68:3e:92:e4:60:a5:96:97:78:02:75:e5:5e:05:0b:64:eb:
         5d:89:3e:cd:96:c9:04:e2:c8:66:77:41:7a:76:e3:29:89:34:
         d0:bb:d9:9d:6a:f5:10:de:e4:44:63:13:eb:ea:a4:8b:b9:a0:
         7e:b3:74:17:5f:7d:f6:af:6f:e2:18:e2:20:b6:cb:0e:6b:44:
         7f:1c:53:03:14:1e:73:22:35:17:ee:8f:3b:11:27:58:76:1e:
         ef:30:f7:ba:90:dc:17:7c:fc:4a:49:77:d6:d1:c8:ac:be:a5:
         4e:f0:0a:df:34:c1:79:e7:5a:1a:c1:76:0b:a5:ff:b8:68:6a:
         f3:63:32:b1:e7:2b:83:f4:09:d7:03:d8:75:eb:77:7c:16:3f:
         72:d8:3a:73:fe:01:6a:af:d7:1b:a2:9d:d5:ba:85:b3:12:23:
         26:32:51:48:ea:d2:5d:77:1d:85:69:87:05:be:25:2d:21:55:
         85:9b:82:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:56 2025 by rpki-client