Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/3139302e38392e3134352e302f32342d3234203d3e20323730333639.roa
File:                     3139302e38392e3134352e302f32342d3234203d3e20323730333639.roa (raw, json)
Hash identifier:          tNQx5iDzIjTZiLn1E+jG7K7RQ5azpj0Rx0XG5rwTCJc=
Subject key identifier:   99:EE:54:A8:63:0D:44:91:E4:50:80:C8:36:A7:87:24:F5:D9:1F:6A
Certificate issuer:       /CN=46F5DA41263DF1C6CFF408FA7E3A13206F9F8DD1
Certificate serial:       CB4FC09A52B7204D4D686A5691162E1F7A0E5E
Authority key identifier: 46:F5:DA:41:26:3D:F1:C6:CF:F4:08:FA:7E:3A:13:20:6F:9F:8D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46F5DA41263DF1C6CFF408FA7E3A13206F9F8DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/3139302e38392e3134352e302f32342d3234203d3e20323730333639.roa
Signing time:             Sat 20 Aug 2022 15:10:55 +0000
ROA not before:           Sat 20 Aug 2022 15:05:55 +0000
ROA not after:            Sat 19 Aug 2023 15:10:55 +0000
asID:                     270369
IP address blocks:        190.89.145.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cb:4f:c0:9a:52:b7:20:4d:4d:68:6a:56:91:16:2e:1f:7a:0e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46F5DA41263DF1C6CFF408FA7E3A13206F9F8DD1
        Validity
            Not Before: Aug 20 15:05:55 2022 GMT
            Not After : Aug 19 15:10:55 2023 GMT
        Subject: CN=99EE54A8630D4491E45080C836A78724F5D91F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:4d:5d:cf:e3:02:5c:d2:41:ea:95:9b:29:
                    f8:7f:16:cc:d1:d7:21:b4:18:77:0d:3d:e8:a4:c9:
                    02:3a:24:0f:dd:00:6b:36:53:10:2c:3d:79:98:07:
                    7a:d9:21:e8:11:67:5b:46:e3:31:39:e0:a3:c5:2f:
                    f2:85:fa:84:ce:54:2d:a0:02:71:49:89:7c:6c:c5:
                    1a:05:a3:57:5f:6f:b5:15:d9:de:a1:ef:e7:b6:01:
                    6b:39:3a:0c:80:43:37:92:27:a5:e4:cf:63:b3:9f:
                    7a:fe:c2:f7:d6:2b:ab:8e:f6:3f:d2:b7:a3:e9:b7:
                    73:49:9b:78:b4:7b:2a:23:6b:9b:4b:9c:6b:5d:f3:
                    a1:b1:59:65:74:fa:74:3f:1d:ea:cd:53:77:11:e8:
                    fe:dd:2f:15:dc:a9:84:86:cb:14:77:52:f7:e2:df:
                    9c:e2:9d:42:b8:16:c7:6f:f1:9f:aa:f8:21:4c:bc:
                    91:10:23:1b:b1:9d:a5:12:b6:87:a8:75:0f:58:48:
                    95:a0:5e:9f:3c:84:18:0a:ee:e6:a1:e3:7e:e8:f6:
                    ae:92:9e:ea:53:93:d0:af:bb:1c:56:c4:dd:17:6b:
                    44:29:d6:85:d8:ce:7f:39:9a:56:6f:7a:5b:4a:b5:
                    e6:97:cb:de:bc:fb:3e:b4:34:80:e8:d3:3e:bc:57:
                    1a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EE:54:A8:63:0D:44:91:E4:50:80:C8:36:A7:87:24:F5:D9:1F:6A
            X509v3 Authority Key Identifier:
                keyid:46:F5:DA:41:26:3D:F1:C6:CF:F4:08:FA:7E:3A:13:20:6F:9F:8D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/46F5DA41263DF1C6CFF408FA7E3A13206F9F8DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46F5DA41263DF1C6CFF408FA7E3A13206F9F8DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/3139302e38392e3134352e302f32342d3234203d3e20323730333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:7e:50:42:86:a6:4f:96:c0:a1:f5:fd:0a:0c:99:7e:97:37:
         cc:a2:c6:0a:cb:7f:83:74:d5:3a:1b:e9:15:e8:02:9e:8e:41:
         6a:bb:cf:e4:21:08:0d:29:23:02:85:f9:45:fb:81:37:26:ac:
         0f:cf:5e:44:b0:a8:c9:3f:c9:59:7c:98:2b:a9:5d:96:63:3a:
         9e:a8:6f:38:90:94:c8:ac:fe:6e:d9:fb:05:49:f6:7a:a4:65:
         ec:30:25:44:06:6d:e9:e4:12:b0:26:94:2d:66:2c:19:b0:6b:
         58:0b:58:a8:b7:2a:1f:af:8c:72:04:a8:80:a4:6d:f3:61:be:
         83:02:66:c7:49:39:b6:03:9a:cd:bd:6f:c0:22:bd:34:c7:cb:
         58:47:1b:da:2f:38:bc:f2:b9:3b:93:31:16:c9:4e:6c:01:81:
         dc:ab:56:2e:63:86:00:4e:a2:68:ab:15:b4:87:51:b8:8a:30:
         48:ae:a1:5a:2b:8c:92:bb:91:96:92:68:50:43:c6:4b:0b:5a:
         d2:3d:67:6e:27:72:eb:60:39:91:4c:76:12:bc:05:f3:44:a7:
         19:1b:c1:a7:26:26:24:5a:9c:dc:ab:89:10:aa:ca:6b:b2:42:
         ec:3a:73:ce:79:4a:82:d0:ea:93:b2:f4:85:f1:f6:72:16:f4:
         01:61:e1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:53:17 2025 by rpki-client