Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/3139302e38332e39382e302f32342d3234203d3e20323730333431.roa
File:                     3139302e38332e39382e302f32342d3234203d3e20323730333431.roa (raw, json)
Hash identifier:          MPZMzqhoDVM+U0K/SyztTm3t65Pu7Wpp7UH78SPOdUw=
Subject key identifier:   8E:F2:CB:19:57:2C:AE:27:07:27:01:8A:B0:55:16:D0:31:45:3F:04
Certificate issuer:       /CN=A12243E041034F7ADB7DA1B9D7254B03C52B3446
Certificate serial:       07D973135553F4D910C815F9D023FD437C9034BC
Authority key identifier: A1:22:43:E0:41:03:4F:7A:DB:7D:A1:B9:D7:25:4B:03:C5:2B:34:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A12243E041034F7ADB7DA1B9D7254B03C52B3446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/3139302e38332e39382e302f32342d3234203d3e20323730333431.roa
Signing time:             Wed 08 Feb 2023 18:19:29 +0000
ROA not before:           Wed 08 Feb 2023 18:14:29 +0000
ROA not after:            Wed 07 Feb 2024 18:19:29 +0000
asID:                     270341
IP address blocks:        190.83.98.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d9:73:13:55:53:f4:d9:10:c8:15:f9:d0:23:fd:43:7c:90:34:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A12243E041034F7ADB7DA1B9D7254B03C52B3446
        Validity
            Not Before: Feb  8 18:14:29 2023 GMT
            Not After : Feb  7 18:19:29 2024 GMT
        Subject: CN=8EF2CB19572CAE270727018AB05516D031453F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:11:a4:17:4c:ee:ee:4a:b6:b0:d1:0f:aa:bf:
                    9e:3d:c1:26:be:5f:e6:85:59:f0:0a:03:fc:d5:32:
                    be:94:75:82:ef:ab:99:95:6a:27:fc:09:7a:8f:34:
                    a7:48:de:b3:02:15:d7:e8:7d:e6:4b:ac:51:cb:6d:
                    b8:9f:d7:08:e1:f2:70:f3:f7:d7:f0:4a:cd:89:af:
                    a0:7f:f3:51:2b:a7:25:d4:0b:6c:28:9e:ba:21:3d:
                    7e:68:0f:95:2b:55:29:c9:1f:fe:68:51:a0:cf:e9:
                    ce:da:a8:75:07:ae:c8:d3:64:c7:39:ad:2b:e5:17:
                    cd:3e:97:55:44:04:c8:b4:a8:f2:ba:dc:7b:22:81:
                    77:8b:de:0b:24:68:4e:85:b6:0c:db:97:29:42:c4:
                    4c:9c:64:b8:de:5c:5d:23:e7:3d:f4:55:1c:9e:c5:
                    cf:08:f6:20:6b:e6:bd:cd:ce:a1:73:5d:ab:a9:6a:
                    f7:bf:31:d9:04:a3:17:5f:78:08:0b:6f:a8:af:a1:
                    72:1d:45:ed:5e:d3:c3:3c:c7:09:c8:c1:a5:a0:2f:
                    ef:24:df:03:23:cb:55:31:82:a3:02:02:0e:db:da:
                    c7:56:c0:05:45:ee:4c:71:8c:de:18:1b:34:dc:b3:
                    59:ee:24:26:20:cb:1d:44:1e:93:b9:b9:cb:ca:25:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F2:CB:19:57:2C:AE:27:07:27:01:8A:B0:55:16:D0:31:45:3F:04
            X509v3 Authority Key Identifier:
                keyid:A1:22:43:E0:41:03:4F:7A:DB:7D:A1:B9:D7:25:4B:03:C5:2B:34:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/A12243E041034F7ADB7DA1B9D7254B03C52B3446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A12243E041034F7ADB7DA1B9D7254B03C52B3446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/3139302e38332e39382e302f32342d3234203d3e20323730333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:64:67:15:74:25:55:70:7f:f9:c3:dc:91:b9:86:60:46:f1:
         8f:e1:1d:29:fe:58:59:b5:4b:d9:c6:4f:da:94:e9:55:d4:38:
         5a:ca:33:bf:54:ef:f0:56:23:47:47:ae:42:50:92:61:ec:ab:
         cb:37:01:d9:fe:2d:59:24:8c:d6:44:ab:2e:f0:ae:6d:42:4a:
         d6:4b:55:b3:3d:e7:42:53:d8:22:0d:b5:c3:00:cb:c7:47:b8:
         03:30:6b:b1:76:b7:ad:d5:f8:7e:57:55:6e:5d:c2:f8:e4:24:
         60:66:20:b5:60:d9:bc:9c:b7:b3:0d:41:bb:91:0a:90:65:c7:
         86:77:6b:f1:c8:66:28:b4:71:dd:48:8f:04:12:8d:fc:52:a1:
         af:78:16:3b:16:7d:fc:a3:b7:8a:df:75:17:3e:2f:97:6e:f8:
         c4:e5:3b:13:2c:70:08:f6:6e:c8:7d:13:2a:be:35:cf:12:4b:
         95:23:8f:07:3e:41:1f:78:8c:ad:f5:85:03:21:c1:23:38:d0:
         08:9a:70:ea:0e:d9:57:97:da:f0:bd:95:8d:32:4e:15:da:65:
         3e:12:aa:b6:9e:fb:54:8c:ee:7a:ea:95:f0:f9:2c:f4:29:c8:
         7a:e2:5f:5c:84:17:08:da:30:44:18:03:42:ca:db:ea:18:ee:
         ce:0f:c0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:00 2025 by rpki-client