Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/3139302e38332e342e302f32322d3233203d3e20323730333230.roa
File:                     3139302e38332e342e302f32322d3233203d3e20323730333230.roa (raw, json)
Hash identifier:          agMDvWqzh+IeWHdWmDKbvRhhjE3SJSJq112hQ/gqyEU=
Subject key identifier:   8A:10:7D:16:A2:5B:EE:F9:93:E7:9C:AD:B8:47:09:3A:9E:59:19:39
Certificate issuer:       /CN=32F2AD125C3315F823A44E2CEE9FB684EA897421
Certificate serial:       04B0F8CBD2532A2545EFEBCFAEAAF33B9759FEF1
Authority key identifier: 32:F2:AD:12:5C:33:15:F8:23:A4:4E:2C:EE:9F:B6:84:EA:89:74:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F2AD125C3315F823A44E2CEE9FB684EA897421.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/3139302e38332e342e302f32322d3233203d3e20323730333230.roa
Signing time:             Wed 23 Mar 2022 15:38:23 +0000
ROA not before:           Wed 23 Mar 2022 15:33:23 +0000
ROA not after:            Wed 22 Mar 2023 15:38:23 +0000
asID:                     270320
IP address blocks:        190.83.4.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b0:f8:cb:d2:53:2a:25:45:ef:eb:cf:ae:aa:f3:3b:97:59:fe:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F2AD125C3315F823A44E2CEE9FB684EA897421
        Validity
            Not Before: Mar 23 15:33:23 2022 GMT
            Not After : Mar 22 15:38:23 2023 GMT
        Subject: CN=8A107D16A25BEEF993E79CADB847093A9E591939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:2e:05:72:10:b5:ac:7f:cb:b1:2d:ac:6e:
                    3e:2e:5a:ef:62:7c:a4:32:57:a2:50:73:fb:af:bb:
                    9a:a6:b2:ea:96:78:2c:96:0a:f2:2a:75:de:bc:c8:
                    0d:9f:8b:89:32:10:96:1a:e5:bb:2f:9b:f3:47:5b:
                    39:f8:df:71:92:29:81:c6:a0:ef:4a:6e:e2:77:5f:
                    1d:af:94:a6:3f:48:e4:6a:84:f1:5c:85:39:5f:51:
                    85:d8:42:ec:47:1c:8a:91:83:9d:60:fd:95:a5:14:
                    e4:86:f7:b0:e0:08:93:89:47:41:4f:42:cb:75:97:
                    4b:ad:8f:95:e0:b0:93:d1:fc:b3:d9:e5:ca:1e:5a:
                    4d:ef:30:b5:93:ef:48:46:ec:94:f9:38:a9:75:5a:
                    93:53:28:5b:0c:33:8f:40:73:d4:fd:a5:af:13:ed:
                    47:22:46:7e:c6:f6:9f:56:20:14:aa:12:96:d3:63:
                    bf:99:bf:6e:93:92:4c:83:51:e7:51:26:c6:64:02:
                    89:e7:d6:61:a2:a0:f6:e3:b1:85:9c:f6:49:7a:fc:
                    d9:99:1b:ea:cc:97:1a:73:40:dc:60:cb:16:51:5d:
                    ad:d7:1c:e4:a2:7b:a9:51:11:36:92:69:bc:5c:29:
                    2a:42:4e:8e:26:3e:ee:02:65:2d:28:66:4a:2d:d0:
                    26:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:10:7D:16:A2:5B:EE:F9:93:E7:9C:AD:B8:47:09:3A:9E:59:19:39
            X509v3 Authority Key Identifier:
                keyid:32:F2:AD:12:5C:33:15:F8:23:A4:4E:2C:EE:9F:B6:84:EA:89:74:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/32F2AD125C3315F823A44E2CEE9FB684EA897421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F2AD125C3315F823A44E2CEE9FB684EA897421.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJ8emFdrd1gCpaqJ81Xs62i1yAqtB9pJzu1KsLwutjuk/0/3139302e38332e342e302f32322d3233203d3e20323730333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:74:fb:d6:49:a9:93:d9:55:a5:8d:0a:1c:12:b8:cc:14:f7:
         a6:9f:d4:13:4e:2f:ed:63:88:15:c8:68:8c:ee:41:20:96:a6:
         36:38:70:13:06:c8:1a:55:a7:4b:0a:09:a3:6e:3a:ce:b9:72:
         5e:e4:0c:fe:6c:cc:f6:a0:2c:d2:61:43:bf:1f:ee:77:fa:43:
         b7:d1:f5:74:c3:c5:53:0a:f0:66:4d:81:e4:e2:f7:f9:d7:7d:
         c9:e9:87:4a:33:2e:6f:5d:a0:e8:22:1b:f5:cc:80:62:37:c5:
         8f:fe:ac:20:59:b3:e9:b9:28:44:e4:d8:09:cd:40:c3:82:43:
         c8:ae:dd:83:62:e2:60:cb:0d:86:8b:a9:7e:a3:d7:1a:69:67:
         65:5c:9d:66:7e:12:68:90:c6:36:09:39:a8:bc:85:06:41:e2:
         0f:fd:d9:a1:06:1a:6d:54:79:d9:47:dd:29:60:8f:a3:e2:bf:
         1d:80:5e:12:91:77:94:25:71:e5:35:8b:04:33:18:ed:18:65:
         95:44:da:8f:44:5c:6d:0c:6d:8b:c6:5d:3b:04:88:4f:2b:8a:
         88:e1:88:cf:77:ab:f8:e7:18:46:d5:03:aa:01:08:eb:9f:47:
         9e:91:5a:10:d2:a7:3f:8c:cd:14:c4:a7:64:80:ee:f0:54:55:
         13:24:bd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:51 2025 by rpki-client