Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/3139302e38332e39362e302f32322d3232203d3e20323730333431.roa
File:                     3139302e38332e39362e302f32322d3232203d3e20323730333431.roa (raw, json)
Hash identifier:          O7AqomeFnn0VGtLG9zqQVRFUTLwOm6ncfQppuTcN3Xg=
Subject key identifier:   56:08:5F:B2:05:A5:3A:B2:DA:D9:BC:53:8F:09:AD:57:39:53:FF:77
Certificate issuer:       /CN=A12243E041034F7ADB7DA1B9D7254B03C52B3446
Certificate serial:       558917D20DDAA1ACF3CFC07E83CC64B4AC025180
Authority key identifier: A1:22:43:E0:41:03:4F:7A:DB:7D:A1:B9:D7:25:4B:03:C5:2B:34:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A12243E041034F7ADB7DA1B9D7254B03C52B3446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/3139302e38332e39362e302f32322d3232203d3e20323730333431.roa
Signing time:             Wed 08 Feb 2023 18:19:29 +0000
ROA not before:           Wed 08 Feb 2023 18:14:29 +0000
ROA not after:            Wed 07 Feb 2024 18:19:29 +0000
asID:                     270341
IP address blocks:        190.83.96.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:89:17:d2:0d:da:a1:ac:f3:cf:c0:7e:83:cc:64:b4:ac:02:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A12243E041034F7ADB7DA1B9D7254B03C52B3446
        Validity
            Not Before: Feb  8 18:14:29 2023 GMT
            Not After : Feb  7 18:19:29 2024 GMT
        Subject: CN=56085FB205A53AB2DAD9BC538F09AD573953FF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:45:88:f3:07:5b:2d:d1:1b:de:f9:6d:e0:
                    84:96:79:a1:c1:9b:49:12:57:30:43:6e:ea:cc:9b:
                    e4:91:a7:e1:c1:e4:1b:f4:1b:d8:50:64:fd:07:43:
                    59:d8:b2:c5:03:f0:86:da:e6:2f:62:8e:05:43:df:
                    8c:c8:72:07:48:cb:7d:14:4d:b8:fd:70:71:38:6a:
                    4a:dc:cb:85:7b:b6:22:49:9e:fb:73:1c:fd:2e:95:
                    71:0a:98:a6:1b:25:ed:39:ba:b0:f9:84:1e:14:2f:
                    6f:4f:91:99:47:18:78:80:8f:20:00:e0:dd:62:02:
                    89:d5:2e:1d:e8:af:8b:fd:7b:86:4d:d2:51:40:03:
                    40:1a:65:6a:98:74:61:8d:68:8a:82:62:7c:73:72:
                    a5:02:45:b1:21:80:62:c2:f3:11:c7:d9:eb:ee:56:
                    1c:6e:97:8f:a2:84:ba:2e:b4:87:6d:10:12:b9:67:
                    5e:95:6d:9d:05:92:3c:81:17:e1:c9:3e:78:bd:42:
                    cf:39:74:ff:4d:03:0a:ad:2f:f6:e4:6c:4d:0b:5c:
                    59:88:3e:b1:49:15:26:38:12:60:c1:18:f9:1d:b7:
                    db:08:20:9c:b8:80:e3:81:5f:e0:bb:b1:e4:ad:ac:
                    e4:7c:1e:b6:68:8b:fa:ed:ea:5f:dd:00:3a:0f:d0:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:08:5F:B2:05:A5:3A:B2:DA:D9:BC:53:8F:09:AD:57:39:53:FF:77
            X509v3 Authority Key Identifier:
                keyid:A1:22:43:E0:41:03:4F:7A:DB:7D:A1:B9:D7:25:4B:03:C5:2B:34:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/A12243E041034F7ADB7DA1B9D7254B03C52B3446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A12243E041034F7ADB7DA1B9D7254B03C52B3446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/3139302e38332e39362e302f32322d3232203d3e20323730333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:a8:ae:82:84:e8:a4:2d:3f:e2:63:c3:14:26:f3:61:69:3a:
         35:6c:da:00:6f:6b:29:c7:66:61:96:a3:45:20:1f:15:46:2a:
         19:e5:52:7c:96:02:ce:46:95:82:40:d1:d3:41:ef:a6:7b:8a:
         1c:5a:5f:1a:11:85:94:f5:11:5d:05:39:be:de:fe:df:4f:10:
         90:9c:e3:c1:6a:bf:10:38:8f:c6:d1:d2:43:68:90:0b:c9:cd:
         75:38:9e:c8:99:f4:6a:11:1a:92:77:44:7a:5d:b4:d3:1a:a5:
         37:0a:70:80:ee:e6:3f:5a:5d:61:83:9e:ff:28:71:aa:41:6b:
         ca:32:5a:c1:ee:1b:ad:b7:6c:2b:2f:82:08:33:9d:63:e5:63:
         63:8f:67:11:3c:24:9a:bd:f3:fd:90:45:2d:fe:83:b8:aa:a3:
         f4:03:80:bd:f8:37:41:29:23:16:37:2d:6c:4e:90:dc:5c:a3:
         0c:07:66:12:f4:97:18:17:b0:92:5a:a2:7b:c7:b8:bd:1e:a4:
         d8:b0:a7:16:6f:be:33:4d:0f:83:f7:5a:fa:00:3a:29:e0:51:
         36:49:00:9a:8c:94:36:86:f9:7c:e8:2c:ea:27:40:65:45:4b:
         2d:27:ee:69:6c:81:06:c6:d3:b5:7c:b8:dc:82:25:45:f3:56:
         04:2e:bf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:24 2025 by rpki-client