Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HvRd3YQHzjuVVq8ktxp3QDexQFpiQwnVBhFZuxr9oALs/0/3139302e3132302e3233322e302f32322d3332203d3e20323730383232.roa
File:                     3139302e3132302e3233322e302f32322d3332203d3e20323730383232.roa (raw, json)
Hash identifier:          1ou5s8rLGq52QiekgLFymccjt/plomg1zJZ8PEuYpAA=
Subject key identifier:   6B:81:A1:4B:EC:0A:5B:AB:F4:6D:28:5C:42:64:35:7A:6C:0A:83:5A
Certificate issuer:       /CN=EDB560CFBCA94547260147877A8715556BCD3FB1
Certificate serial:       70DF2B75004F4FFDB326D147369A43D3250A803D
Authority key identifier: ED:B5:60:CF:BC:A9:45:47:26:01:47:87:7A:87:15:55:6B:CD:3F:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDB560CFBCA94547260147877A8715556BCD3FB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HvRd3YQHzjuVVq8ktxp3QDexQFpiQwnVBhFZuxr9oALs/0/3139302e3132302e3233322e302f32322d3332203d3e20323730383232.roa
Signing time:             Wed 17 Jan 2024 02:37:45 +0000
ROA not before:           Wed 17 Jan 2024 02:32:45 +0000
ROA not after:            Wed 15 Jan 2025 02:37:45 +0000
asID:                     270822
IP address blocks:        190.120.232.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:df:2b:75:00:4f:4f:fd:b3:26:d1:47:36:9a:43:d3:25:0a:80:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB560CFBCA94547260147877A8715556BCD3FB1
        Validity
            Not Before: Jan 17 02:32:45 2024 GMT
            Not After : Jan 15 02:37:45 2025 GMT
        Subject: CN=6B81A14BEC0A5BABF46D285C4264357A6C0A835A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4e:38:8c:ba:54:7e:a0:35:68:7b:38:5a:7c:
                    64:63:0a:2c:39:c7:39:55:01:52:5b:9f:52:40:72:
                    02:b2:d6:c5:b2:d8:9e:59:25:9a:c3:0a:64:75:ab:
                    27:82:8a:a1:a2:eb:f0:74:2e:41:29:47:a1:6d:af:
                    95:a8:4f:8d:62:5d:26:57:22:17:e4:c9:f3:4e:e7:
                    93:33:8c:be:ba:e2:e7:f8:4c:a8:56:45:76:8d:4d:
                    9c:0e:37:1b:1b:08:ab:e6:7d:65:e4:28:0f:ee:74:
                    76:c6:82:c5:60:7c:cc:9b:b7:56:67:5b:94:0d:45:
                    dd:c9:ab:9d:da:ca:d6:4a:8f:7f:60:2d:43:a2:da:
                    d0:a7:8d:58:31:9d:2b:21:c8:a9:ec:08:e7:6f:8c:
                    58:2e:18:91:5c:8e:dd:5e:d0:3e:2e:dd:ce:c9:c0:
                    93:2e:2e:07:b1:41:34:7a:56:35:d0:c7:30:a1:6c:
                    16:73:5c:e7:1a:4b:6e:d7:c2:4e:c3:99:34:20:8d:
                    10:f4:98:ed:14:91:b4:5c:55:9e:5c:2e:5a:b5:b0:
                    47:ec:56:31:22:76:93:85:b4:bc:f5:67:d7:60:41:
                    4a:1f:48:e2:03:37:af:dc:2f:76:c0:08:10:9b:ee:
                    1a:5f:a6:77:04:ac:e5:55:2b:81:a1:eb:15:3b:72:
                    b1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:81:A1:4B:EC:0A:5B:AB:F4:6D:28:5C:42:64:35:7A:6C:0A:83:5A
            X509v3 Authority Key Identifier:
                keyid:ED:B5:60:CF:BC:A9:45:47:26:01:47:87:7A:87:15:55:6B:CD:3F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HvRd3YQHzjuVVq8ktxp3QDexQFpiQwnVBhFZuxr9oALs/0/EDB560CFBCA94547260147877A8715556BCD3FB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDB560CFBCA94547260147877A8715556BCD3FB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HvRd3YQHzjuVVq8ktxp3QDexQFpiQwnVBhFZuxr9oALs/0/3139302e3132302e3233322e302f32322d3332203d3e20323730383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:ce:94:b4:7d:72:b1:84:fb:01:a3:d0:9c:24:e8:b0:a5:c4:
         a8:df:b6:25:03:a7:d4:09:63:5f:17:e7:57:fb:52:a6:00:f9:
         18:0c:10:33:ce:f3:90:81:0a:9a:c2:da:b3:50:41:2c:39:ea:
         a4:86:4c:e4:e9:0e:e3:3b:a7:69:6e:46:b0:9b:ac:6b:a5:a0:
         d2:85:8a:d6:4b:02:41:bc:cd:20:8b:50:6d:4e:b7:d2:e1:cd:
         c3:88:50:ac:57:a5:4d:f2:13:c7:80:83:93:92:64:6c:9f:b0:
         2b:89:49:26:4a:47:51:e8:cb:9d:8f:58:5e:cf:38:9d:1c:b7:
         4e:20:8c:db:02:84:b9:13:04:a3:f3:48:5a:2c:4d:14:ba:6f:
         f7:c7:97:f7:43:d7:94:b1:73:57:3a:fd:fb:84:a2:10:66:77:
         fc:66:60:c8:07:4e:ae:c0:cd:d0:10:49:d5:63:f9:4a:36:32:
         05:b9:e6:44:44:a2:95:ed:3b:e3:3c:4e:35:ce:70:ae:f7:ea:
         b3:36:d9:d7:64:29:d2:27:33:05:aa:a0:3c:10:81:35:89:bb:
         e1:6a:7c:1e:a2:1f:3d:6e:f8:79:52:c6:92:2c:8b:0a:0a:e7:
         72:3f:34:bd:f7:59:dd:1c:a8:68:36:c1:79:5a:b5:cd:53:d7:
         7b:ec:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:14 2025 by rpki-client