Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/0/3139302e3132302e33322e302f32322d3234203d3e20323730363930.roa
File:                     3139302e3132302e33322e302f32322d3234203d3e20323730363930.roa (raw, json)
Hash identifier:          Ky4fZudDnaCbvsFFOsOz6zf78SZtkP3EC03l7JLi3bo=
Subject key identifier:   60:CD:3A:74:6B:FA:5B:78:9A:E5:AE:2C:AF:2D:28:DE:1F:95:91:DF
Certificate issuer:       /CN=D931E9B26A1EAFC9CFA4CB5B3FFDDB9AF23C9752
Certificate serial:       119709D70F619523BF70F7FDB8CF9F0D188EAFEC
Authority key identifier: D9:31:E9:B2:6A:1E:AF:C9:CF:A4:CB:5B:3F:FD:DB:9A:F2:3C:97:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D931E9B26A1EAFC9CFA4CB5B3FFDDB9AF23C9752.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/0/3139302e3132302e33322e302f32322d3234203d3e20323730363930.roa
Signing time:             Thu 15 Feb 2024 12:48:40 +0000
ROA not before:           Thu 15 Feb 2024 12:43:40 +0000
ROA not after:            Thu 13 Feb 2025 12:48:40 +0000
asID:                     270690
IP address blocks:        190.120.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:97:09:d7:0f:61:95:23:bf:70:f7:fd:b8:cf:9f:0d:18:8e:af:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D931E9B26A1EAFC9CFA4CB5B3FFDDB9AF23C9752
        Validity
            Not Before: Feb 15 12:43:40 2024 GMT
            Not After : Feb 13 12:48:40 2025 GMT
        Subject: CN=60CD3A746BFA5B789AE5AE2CAF2D28DE1F9591DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:7e:81:5d:54:da:51:50:be:f2:6a:a1:0d:
                    6a:a8:ff:e7:e1:68:01:10:e1:1b:82:70:32:3b:0c:
                    46:c7:b5:ed:5f:43:50:a4:c1:5b:de:1c:07:e1:3f:
                    2e:6f:40:e2:6b:e4:28:17:dc:dd:8d:d0:ac:b6:c5:
                    80:aa:dd:09:4e:f2:89:51:e0:d3:59:a0:33:28:b8:
                    82:4f:08:f3:06:50:47:c9:4e:ea:0b:d1:c8:6c:56:
                    05:d5:ed:f5:6e:69:1b:65:59:ba:2e:c4:76:b8:d7:
                    15:38:e1:8b:ad:08:eb:db:03:f8:9d:75:49:ed:7d:
                    21:09:25:bc:d7:c1:ea:5c:7d:12:82:d4:80:26:24:
                    de:7b:a9:77:9b:16:b9:87:6d:ba:40:ee:94:36:08:
                    0d:f8:96:40:bd:45:d4:14:19:ec:37:d5:28:29:5c:
                    af:66:fb:e2:ab:d8:93:cd:17:ee:8d:56:26:34:15:
                    f4:c7:33:14:ef:27:1d:ae:bf:53:4d:cd:ee:25:f6:
                    1a:35:0f:fd:ae:f0:e3:45:c7:a7:46:a5:ec:22:ee:
                    e6:ab:ba:42:1c:76:11:87:ce:a9:1c:56:35:0a:ab:
                    94:f6:0d:cf:4b:d3:a0:ac:5f:bc:e2:3d:80:89:a2:
                    ff:2a:5a:b6:53:09:1b:1b:a7:c0:c8:c3:81:9f:b1:
                    76:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CD:3A:74:6B:FA:5B:78:9A:E5:AE:2C:AF:2D:28:DE:1F:95:91:DF
            X509v3 Authority Key Identifier:
                keyid:D9:31:E9:B2:6A:1E:AF:C9:CF:A4:CB:5B:3F:FD:DB:9A:F2:3C:97:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/0/D931E9B26A1EAFC9CFA4CB5B3FFDDB9AF23C9752.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D931E9B26A1EAFC9CFA4CB5B3FFDDB9AF23C9752.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/0/3139302e3132302e33322e302f32322d3234203d3e20323730363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:ff:9e:35:ae:ce:90:e1:b1:fd:23:3d:d5:84:b9:de:e4:0b:
         7d:7c:e0:e6:c1:2d:0b:65:0f:16:7a:e8:9c:4f:be:df:6b:a4:
         27:7a:8c:f7:97:d8:18:08:ca:49:f3:d1:d4:bd:39:59:d3:3f:
         8d:27:bc:bc:4a:d4:ca:ee:82:f5:58:1e:ee:9a:6f:56:06:50:
         aa:73:b5:dd:97:61:7b:fe:3e:50:8b:31:60:16:7a:63:a7:fd:
         a1:b4:06:c8:2a:7d:91:5b:4d:de:7d:23:c9:0c:fd:fa:bd:a4:
         13:78:1f:0f:02:e6:69:ee:17:da:3d:a1:57:df:1d:43:51:b2:
         95:e1:8d:86:f7:2d:2a:6f:63:b5:3d:43:a2:4e:d3:10:f0:5c:
         80:9e:a4:fb:46:04:2e:0d:a7:b9:6f:85:66:6a:ed:f3:5e:1c:
         19:1d:ef:42:0d:12:75:21:39:01:c5:d8:53:f4:f6:d9:c2:c3:
         0c:39:e9:3f:31:13:ba:a8:1f:e6:19:ff:95:bd:ba:3a:5c:53:
         1a:4e:26:4d:04:d2:fb:09:ef:d0:d9:75:64:50:2d:9b:ed:24:
         f0:81:b4:0d:83:7d:1b:d9:42:c2:3b:cb:ed:56:58:a9:e8:52:
         1c:c8:52:15:cd:82:6d:ef:d6:54:2d:d5:d6:66:11:b0:2c:bd:
         35:48:29:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:40 2025 by rpki-client