Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/3139302e38392e342e302f32322d3232203d3e20323730333939.roa
File:                     3139302e38392e342e302f32322d3232203d3e20323730333939.roa (raw, json)
Hash identifier:          gKNXaYXpOCh2DtUz5XLJo0NK7M4LZ50OsheJK1qyTEo=
Subject key identifier:   32:D3:1C:1E:F6:B5:1A:55:33:FB:AC:C3:5E:60:4D:7B:34:59:AC:54
Certificate issuer:       /CN=06D8D5D048750DC3A3EEB9D6F4A0F2E3E172F021
Certificate serial:       1738E4ABA1B16A639CA4E63FC886EDEF3F91BD6C
Authority key identifier: 06:D8:D5:D0:48:75:0D:C3:A3:EE:B9:D6:F4:A0:F2:E3:E1:72:F0:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06D8D5D048750DC3A3EEB9D6F4A0F2E3E172F021.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/3139302e38392e342e302f32322d3232203d3e20323730333939.roa
Signing time:             Tue 07 Jan 2025 15:04:24 +0000
ROA not before:           Tue 07 Jan 2025 14:59:24 +0000
ROA not after:            Tue 06 Jan 2026 15:04:24 +0000
asID:                     270399
IP address blocks:        190.89.4.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:38:e4:ab:a1:b1:6a:63:9c:a4:e6:3f:c8:86:ed:ef:3f:91:bd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06D8D5D048750DC3A3EEB9D6F4A0F2E3E172F021
        Validity
            Not Before: Jan  7 14:59:24 2025 GMT
            Not After : Jan  6 15:04:24 2026 GMT
        Subject: CN=32D31C1EF6B51A5533FBACC35E604D7B3459AC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:b4:f4:ab:bc:53:94:7c:c7:d9:40:ed:11:
                    49:a6:70:a9:5c:44:4f:76:4c:c4:76:3d:e8:c3:35:
                    3e:ea:22:d1:a4:17:94:48:88:2b:9f:79:ea:65:6e:
                    63:8c:42:ab:c4:59:96:88:0e:e4:2c:84:54:b2:1b:
                    d3:45:e1:11:90:73:1e:0b:8b:c7:60:a9:a9:f6:86:
                    bf:10:94:ee:ff:25:bf:f6:e9:10:69:2d:61:a3:62:
                    a0:9a:e9:56:50:81:66:c4:76:5f:af:b7:b8:94:53:
                    a8:25:d6:48:40:d1:f1:69:73:02:66:52:92:47:49:
                    19:c2:29:4a:98:a6:02:45:b3:2a:93:7c:5b:9c:53:
                    bf:a6:fb:b2:27:99:b2:22:fb:8e:f2:03:94:a7:c5:
                    ae:ab:96:11:10:8d:4a:66:ee:a6:ec:ce:9c:f5:b7:
                    bd:c2:85:23:a6:c6:59:07:ab:d8:31:e5:36:3b:8a:
                    a6:9a:76:58:47:59:e4:15:13:69:52:17:30:11:36:
                    5e:26:de:c4:58:82:00:ff:fd:0c:f4:d6:a4:f6:db:
                    6b:b1:b9:50:b3:ce:aa:6c:57:85:9e:71:65:58:7d:
                    22:06:62:bc:0f:55:37:8e:9c:03:22:c3:03:c4:be:
                    91:c0:8c:88:6c:51:a5:a4:19:18:a9:a2:cc:a0:44:
                    e5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D3:1C:1E:F6:B5:1A:55:33:FB:AC:C3:5E:60:4D:7B:34:59:AC:54
            X509v3 Authority Key Identifier:
                keyid:06:D8:D5:D0:48:75:0D:C3:A3:EE:B9:D6:F4:A0:F2:E3:E1:72:F0:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/06D8D5D048750DC3A3EEB9D6F4A0F2E3E172F021.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06D8D5D048750DC3A3EEB9D6F4A0F2E3E172F021.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/3139302e38392e342e302f32322d3232203d3e20323730333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:6f:1f:55:ad:56:61:2a:25:29:1d:af:b6:fe:b2:a1:7d:49:
         50:c0:30:33:e7:5e:02:4d:dc:de:d5:69:7d:11:6d:07:a5:95:
         e7:a4:06:65:7f:2b:39:9c:d7:fb:f8:cf:a6:d6:8d:0f:5e:78:
         fa:2f:e9:4b:49:01:16:b4:21:c5:fa:5a:4c:17:5b:d8:ae:29:
         5a:09:31:86:db:5b:b7:b3:9b:a9:20:a9:5c:54:01:b0:a5:e8:
         8b:3a:29:67:e4:83:5e:95:5c:d6:d7:d7:ba:4c:57:97:8b:38:
         62:34:25:57:73:da:c1:10:7a:16:06:54:9d:75:be:69:df:1a:
         c3:f4:be:02:00:52:87:3f:21:d3:db:9a:9f:58:98:5c:7e:34:
         12:7b:bb:2e:ec:7d:aa:08:bc:f3:5b:32:d8:34:2f:66:04:48:
         fb:34:26:cf:fc:7c:83:67:a0:97:30:00:12:6e:21:65:34:ac:
         1f:6c:b4:0e:be:03:df:bf:9d:75:f7:1e:e6:04:2e:f2:2e:25:
         f1:07:7a:13:8e:ac:e5:2b:3f:d1:63:02:8b:70:d8:09:f5:7e:
         4f:44:10:d1:98:c8:7f:b6:ef:7d:28:98:8d:ef:01:b7:6c:db:
         90:3f:f4:c6:44:0c:a7:d3:52:c9:45:18:31:bc:f7:cc:21:b0:
         1e:47:0c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:35:12 2025 by rpki-client