Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/3139302e3130372e3136382e302f32322d3332203d3e20323730343034.roa
File:                     3139302e3130372e3136382e302f32322d3332203d3e20323730343034.roa (raw, json)
Hash identifier:          YqaCH4APFmPcvzz6aQdgIpEz87WOb2RkiSy+o6P8Sgc=
Subject key identifier:   41:53:C8:84:A4:15:5C:42:3C:02:61:A5:93:7F:B3:F6:A3:3A:A5:12
Certificate issuer:       /CN=9D0109BCB2508720AD7A2EA1B508AA247A2D7BE1
Certificate serial:       0803BA9EFF95FB450812DE9C8B36A88229D21BD9
Authority key identifier: 9D:01:09:BC:B2:50:87:20:AD:7A:2E:A1:B5:08:AA:24:7A:2D:7B:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D0109BCB2508720AD7A2EA1B508AA247A2D7BE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/3139302e3130372e3136382e302f32322d3332203d3e20323730343034.roa
Signing time:             Mon 30 Sep 2024 23:03:32 +0000
ROA not before:           Mon 30 Sep 2024 22:58:32 +0000
ROA not after:            Mon 29 Sep 2025 23:03:32 +0000
asID:                     270404
IP address blocks:        190.107.168.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:03:ba:9e:ff:95:fb:45:08:12:de:9c:8b:36:a8:82:29:d2:1b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D0109BCB2508720AD7A2EA1B508AA247A2D7BE1
        Validity
            Not Before: Sep 30 22:58:32 2024 GMT
            Not After : Sep 29 23:03:32 2025 GMT
        Subject: CN=4153C884A4155C423C0261A5937FB3F6A33AA512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4c:45:3a:41:48:6b:30:dd:82:59:29:b8:42:
                    75:8d:f1:dd:ef:85:40:5c:ae:9b:eb:5a:92:4f:9c:
                    35:32:5e:57:03:c6:56:18:3b:14:79:fd:9f:7f:a2:
                    81:d4:4d:54:d3:e8:b2:1e:a7:ec:a5:a4:42:03:a6:
                    77:3c:60:6b:47:83:b3:29:6b:b8:36:20:12:ba:fe:
                    8f:12:61:56:67:a8:51:49:61:bf:b9:fc:a4:88:b9:
                    87:62:fb:d3:c3:f1:2e:b8:44:29:3a:a9:50:6a:b4:
                    64:20:6c:09:e5:41:e6:e8:b4:90:aa:09:a9:54:a2:
                    67:34:56:4a:f1:44:ec:35:bd:e8:b1:5f:01:1c:b3:
                    9f:d6:47:a9:a6:b8:64:7b:70:56:2a:ac:fd:79:58:
                    aa:2c:97:d4:41:c1:fe:1f:b3:f5:13:44:fa:5b:55:
                    32:d3:c0:2d:ae:0b:b6:92:3f:e5:50:9c:c9:88:15:
                    31:70:bc:9b:af:e1:66:be:04:4e:e9:6c:00:29:d8:
                    db:25:54:ee:7a:93:60:be:11:bf:7b:cc:3e:5f:c7:
                    1b:d1:cb:79:2e:5b:99:80:37:23:f8:86:98:8c:ad:
                    64:81:27:e9:48:51:85:e9:bd:c5:fd:53:fe:46:01:
                    a0:84:bf:50:ea:c5:18:37:a3:e6:52:fd:a4:3f:ea:
                    48:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:53:C8:84:A4:15:5C:42:3C:02:61:A5:93:7F:B3:F6:A3:3A:A5:12
            X509v3 Authority Key Identifier:
                keyid:9D:01:09:BC:B2:50:87:20:AD:7A:2E:A1:B5:08:AA:24:7A:2D:7B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/9D0109BCB2508720AD7A2EA1B508AA247A2D7BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D0109BCB2508720AD7A2EA1B508AA247A2D7BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/0/3139302e3130372e3136382e302f32322d3332203d3e20323730343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:dd:f2:c8:1d:ef:a9:7a:1c:a7:8d:a8:a8:2a:ff:32:aa:df:
         6a:94:57:54:e6:90:29:22:30:0f:6d:61:fb:ed:98:8c:98:36:
         dd:83:91:7e:76:d5:08:32:86:13:7d:28:a9:2f:c6:76:97:80:
         d3:86:ec:5d:9d:e9:29:40:26:b3:3c:12:11:87:3b:33:0b:70:
         66:66:33:db:ed:e5:03:3b:06:c3:31:65:6e:da:34:21:04:ab:
         bc:68:92:09:d8:e4:d7:80:07:f3:20:ff:c7:ee:6e:ec:87:40:
         f9:e1:57:97:c9:c3:9b:0d:cc:30:8e:31:b6:00:08:61:99:91:
         27:40:d4:a3:d9:09:73:45:61:dd:56:2a:92:f9:1f:4b:e3:a7:
         df:cb:b9:45:da:4a:db:d3:d8:73:2f:8b:e9:a3:e2:0b:9f:25:
         fb:7d:e0:a3:65:a4:4d:1f:3b:cd:f8:69:30:2d:b9:f7:1f:2a:
         ee:8c:96:9a:be:bb:24:e0:6c:10:68:f9:e9:f9:b0:b3:94:3a:
         b3:ec:b7:7b:a6:de:ed:62:b7:eb:89:2c:c8:6e:fa:66:1c:9a:
         1b:a9:0e:51:2f:2c:97:24:82:77:99:3f:fa:ae:c9:42:de:ec:
         86:bb:74:6e:b8:41:56:01:c6:ae:c8:99:3c:ad:ea:4d:8b:60:
         d0:0f:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:50 2025 by rpki-client