Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/3139302e3131352e3139362e302f32322d3332203d3e20323730383234.roa
File:                     3139302e3131352e3139362e302f32322d3332203d3e20323730383234.roa (raw, json)
Hash identifier:          eCw/C9LlbtF/No+7/jeb3xY+TS1m866XzvRR8GktArw=
Subject key identifier:   FB:35:92:BB:78:33:51:2E:78:31:45:6A:29:94:D8:4C:8B:6A:1B:6B
Certificate issuer:       /CN=98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E
Certificate serial:       2D11C0E6AD67233F11E84EEFA2D188B967CBDF2B
Authority key identifier: 98:C3:85:2C:5F:3D:C1:45:FD:71:BC:A9:2F:69:96:B5:B6:DB:A4:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/3139302e3131352e3139362e302f32322d3332203d3e20323730383234.roa
Signing time:             Fri 06 Sep 2024 22:24:01 +0000
ROA not before:           Fri 06 Sep 2024 22:19:01 +0000
ROA not after:            Fri 05 Sep 2025 22:24:01 +0000
asID:                     270824
IP address blocks:        190.115.196.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:11:c0:e6:ad:67:23:3f:11:e8:4e:ef:a2:d1:88:b9:67:cb:df:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E
        Validity
            Not Before: Sep  6 22:19:01 2024 GMT
            Not After : Sep  5 22:24:01 2025 GMT
        Subject: CN=FB3592BB7833512E7831456A2994D84C8B6A1B6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0f:f6:c4:da:79:e0:90:b8:5f:66:00:25:39:
                    38:66:db:b7:48:de:2f:b6:7e:77:d7:55:5a:13:36:
                    80:8a:04:82:f1:60:8c:2b:1c:4f:4a:ac:6a:15:b2:
                    52:2c:80:16:5e:15:ae:86:dd:3a:20:24:b0:7a:b1:
                    04:85:80:80:ed:49:ea:96:c2:e0:ba:77:e7:d5:cf:
                    6b:8d:68:dd:1a:f1:a7:ad:c6:e6:2e:d1:88:60:36:
                    01:10:5f:bc:84:0f:c7:e3:f9:95:c1:12:eb:56:02:
                    13:5a:dc:90:14:19:bf:0d:da:13:b9:84:70:56:0c:
                    3a:00:72:8d:d9:07:fd:d9:ad:d2:96:e6:05:64:3c:
                    3e:53:b5:db:f3:00:75:92:d5:b8:85:3a:f6:06:4e:
                    75:17:5c:81:56:5b:df:2b:9d:28:2c:40:00:6a:92:
                    c7:b5:58:ab:c3:7b:91:d1:66:ce:d8:01:92:32:f1:
                    e3:99:f8:b5:6d:41:cf:0f:8b:f0:51:20:cc:f5:7a:
                    9b:a3:ec:4c:b9:2c:4a:35:75:bf:fc:78:8c:57:18:
                    fe:62:5d:1c:c6:09:b5:b4:34:7e:41:6e:95:86:e1:
                    7b:2c:f4:07:c7:81:4f:26:fc:f7:6f:5f:24:d8:a3:
                    7e:51:12:c5:7c:87:e6:36:2e:4b:61:3f:4e:f4:d0:
                    f5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:35:92:BB:78:33:51:2E:78:31:45:6A:29:94:D8:4C:8B:6A:1B:6B
            X509v3 Authority Key Identifier:
                keyid:98:C3:85:2C:5F:3D:C1:45:FD:71:BC:A9:2F:69:96:B5:B6:DB:A4:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C3852C5F3DC145FD71BCA92F6996B5B6DBA46E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/3139302e3131352e3139362e302f32322d3332203d3e20323730383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:53:5e:bc:33:e9:22:83:97:26:52:c0:4c:dc:a5:b7:21:06:
         c1:c3:3b:5b:fc:57:79:09:d5:47:e4:bf:3f:8e:6e:6a:bb:ac:
         be:68:ae:75:a9:df:d6:e4:9a:b8:45:6e:86:30:8b:b1:79:52:
         9a:5e:e2:fc:d5:f8:f1:f9:70:ee:86:f8:ab:a6:c0:7c:e2:81:
         d6:33:56:b9:a5:1e:a2:e4:8b:e4:16:2a:6b:d1:e5:41:d9:b8:
         a1:ba:57:8b:93:06:e5:db:fb:3b:59:b6:25:74:32:ed:4e:ef:
         5a:1c:27:18:b5:d5:53:f2:6d:9a:fd:11:fe:8b:a3:45:31:64:
         0f:6b:73:1a:04:a5:b1:23:3f:7e:34:d6:53:35:33:fa:69:3e:
         c8:a1:ce:0e:65:ae:23:39:1f:17:54:38:d2:c3:7d:05:d5:e5:
         0f:43:f3:35:cf:fb:39:b0:e0:4b:f5:0b:f8:f7:97:eb:44:b6:
         e4:e4:31:97:ba:fa:6c:bd:0c:86:2e:f8:3b:1d:21:aa:c3:05:
         67:ac:57:75:08:33:27:64:0f:8e:91:98:00:1c:88:1b:a9:d4:
         f5:ff:74:e6:94:b3:78:37:b1:ba:a9:58:58:11:ed:b8:09:fd:
         43:b5:01:e3:f2:33:72:b3:42:20:d8:2a:30:e2:c9:4c:11:9a:
         26:8f:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:17:17 2025 by rpki-client