Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FwuHJRjgVtJ9iqXqq6i5FNifgsEexdADmbxqa8hGHgYr/0/3139302e38392e3235302e302f32342d3234203d3e20323730343232.roa
File:                     3139302e38392e3235302e302f32342d3234203d3e20323730343232.roa (raw, json)
Hash identifier:          2N0pSliEKXrexvf8uFj7QL1/Rw3jT4pQ4+C8flLcbg4=
Subject key identifier:   3E:6C:1D:03:C7:3D:1D:4E:7A:F6:B2:F9:82:40:31:CB:C4:A1:A4:44
Certificate issuer:       /CN=6B63BBA42510D3769660DEC12024878FF11D4859
Certificate serial:       147C7BD1B60CC6067F94FAFC8025E7281F661132
Authority key identifier: 6B:63:BB:A4:25:10:D3:76:96:60:DE:C1:20:24:87:8F:F1:1D:48:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B63BBA42510D3769660DEC12024878FF11D4859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FwuHJRjgVtJ9iqXqq6i5FNifgsEexdADmbxqa8hGHgYr/0/3139302e38392e3235302e302f32342d3234203d3e20323730343232.roa
Signing time:             Sat 11 Feb 2023 01:01:47 +0000
ROA not before:           Sat 11 Feb 2023 00:56:47 +0000
ROA not after:            Sat 10 Feb 2024 01:01:47 +0000
asID:                     270422
IP address blocks:        190.89.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7c:7b:d1:b6:0c:c6:06:7f:94:fa:fc:80:25:e7:28:1f:66:11:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B63BBA42510D3769660DEC12024878FF11D4859
        Validity
            Not Before: Feb 11 00:56:47 2023 GMT
            Not After : Feb 10 01:01:47 2024 GMT
        Subject: CN=3E6C1D03C73D1D4E7AF6B2F9824031CBC4A1A444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d7:79:db:fc:2a:14:81:8c:14:6a:be:af:b6:
                    e0:f7:83:e3:15:39:10:b5:01:d0:e1:29:e1:e3:fb:
                    ef:e3:83:d7:ad:a5:c0:c0:dc:8a:3f:31:af:26:10:
                    aa:cb:f3:c3:fc:1d:cd:d5:72:b2:04:92:0c:91:b6:
                    cc:91:35:65:37:a0:49:26:36:10:e5:6f:c6:34:a8:
                    aa:09:53:40:aa:c6:1a:a9:7b:de:cf:f6:90:41:27:
                    7b:86:02:20:ab:26:22:d3:58:3b:c1:04:c6:1e:5b:
                    05:36:55:5f:c1:93:99:e5:e6:ec:26:02:c4:f4:16:
                    91:53:74:3d:85:e7:8a:79:72:ab:36:10:e6:0e:4f:
                    42:c2:65:76:01:6e:c2:95:fc:d0:59:99:c6:64:0a:
                    28:6b:18:09:a5:2b:ac:1c:8c:14:cd:5e:e8:85:26:
                    e6:ef:f3:58:91:41:26:68:28:a5:53:a0:2f:59:f9:
                    27:cd:7a:51:b6:02:30:10:da:ac:e7:ae:37:a7:b4:
                    17:49:c9:8d:b4:9b:68:95:ff:e7:97:00:47:62:b1:
                    ae:b7:6d:93:e5:15:66:19:18:15:35:06:54:43:35:
                    b2:af:4a:7f:60:db:d0:fe:f4:ad:60:9f:62:2e:45:
                    64:2f:a0:a9:73:6a:87:84:a1:71:26:97:c4:2b:26:
                    f0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6C:1D:03:C7:3D:1D:4E:7A:F6:B2:F9:82:40:31:CB:C4:A1:A4:44
            X509v3 Authority Key Identifier:
                keyid:6B:63:BB:A4:25:10:D3:76:96:60:DE:C1:20:24:87:8F:F1:1D:48:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FwuHJRjgVtJ9iqXqq6i5FNifgsEexdADmbxqa8hGHgYr/0/6B63BBA42510D3769660DEC12024878FF11D4859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B63BBA42510D3769660DEC12024878FF11D4859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwuHJRjgVtJ9iqXqq6i5FNifgsEexdADmbxqa8hGHgYr/0/3139302e38392e3235302e302f32342d3234203d3e20323730343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:9b:22:bd:43:fd:d0:37:62:59:35:65:7f:e7:64:34:75:f3:
         25:97:b3:95:99:28:14:7e:36:87:33:eb:00:d2:65:6f:7c:49:
         ca:54:29:2e:e7:34:6e:48:fc:ad:19:72:1a:c2:ee:af:ed:a1:
         5d:65:f1:82:a9:6f:a8:e3:94:e0:0a:0f:df:68:e4:b1:88:b8:
         b2:3f:37:61:09:ca:19:35:94:64:63:18:2a:6a:78:76:a3:10:
         19:6b:76:63:82:c1:52:45:e6:ac:d2:11:71:5f:70:50:c8:df:
         9a:51:d5:a5:7e:6b:de:9e:ea:0c:92:86:57:f3:35:9e:3f:96:
         ea:c5:ae:8d:4e:c7:fe:cf:33:21:76:da:28:42:14:df:73:84:
         e3:b5:98:0f:ac:ae:b4:b8:d5:47:49:84:72:3b:e7:bb:b4:ad:
         65:5e:99:58:15:8d:b9:0e:e8:20:dd:6a:70:5f:5b:06:3e:e3:
         31:cc:91:dc:d1:20:00:67:be:77:c0:12:0c:50:11:a9:73:a5:
         81:ce:50:ae:e6:2c:fd:7e:2c:aa:92:62:67:cf:3d:bd:d3:36:
         ea:00:3c:2a:a8:23:87:30:77:03:2b:2c:0c:4e:bf:4d:46:95:
         c6:f9:9b:6e:21:1e:dd:e7:56:8c:ce:f7:94:39:72:6b:de:2e:
         f0:d8:76:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:03:28 2025 by rpki-client