Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/3139302e38392e3134372e302f32342d3234203d3e20323730333639.roa
File:                     3139302e38392e3134372e302f32342d3234203d3e20323730333639.roa (raw, json)
Hash identifier:          pN/dtvkvfTpI4w9grkt9+CkvaFOltTjp1Je1XVBeCYE=
Subject key identifier:   CC:39:7D:2B:BE:F5:05:4E:CF:62:AB:E8:A2:A5:99:0A:6F:74:75:42
Certificate issuer:       /CN=46F5DA41263DF1C6CFF408FA7E3A13206F9F8DD1
Certificate serial:       2B1946E5B9FC8E68D50CA1D215E622A690783A00
Authority key identifier: 46:F5:DA:41:26:3D:F1:C6:CF:F4:08:FA:7E:3A:13:20:6F:9F:8D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46F5DA41263DF1C6CFF408FA7E3A13206F9F8DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/3139302e38392e3134372e302f32342d3234203d3e20323730333639.roa
Signing time:             Sat 20 Aug 2022 15:10:59 +0000
ROA not before:           Sat 20 Aug 2022 15:05:59 +0000
ROA not after:            Sat 19 Aug 2023 15:10:59 +0000
asID:                     270369
IP address blocks:        190.89.147.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:19:46:e5:b9:fc:8e:68:d5:0c:a1:d2:15:e6:22:a6:90:78:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46F5DA41263DF1C6CFF408FA7E3A13206F9F8DD1
        Validity
            Not Before: Aug 20 15:05:59 2022 GMT
            Not After : Aug 19 15:10:59 2023 GMT
        Subject: CN=CC397D2BBEF5054ECF62ABE8A2A5990A6F747542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c1:2e:1b:e0:21:21:42:4b:15:00:1a:77:06:
                    30:5f:42:43:97:5a:94:c4:08:75:cb:8b:4d:b1:92:
                    5c:72:13:0d:74:d6:53:ec:94:6a:2b:63:be:a4:e2:
                    b8:bb:28:be:2f:a6:6e:7b:b2:5b:6d:b1:87:bd:36:
                    01:4e:5d:13:08:d4:66:e3:06:0f:a6:5c:0b:82:3a:
                    1c:27:1f:d2:a4:d8:51:4b:98:f9:1b:cc:c4:f0:62:
                    43:88:77:ab:30:26:74:5b:57:d4:72:52:37:3f:29:
                    3a:86:fa:6b:c4:52:65:10:14:4c:a5:32:ca:72:b3:
                    00:76:5f:8b:61:7b:b3:73:68:87:3c:d0:9d:f4:16:
                    97:a6:bc:55:7a:14:64:bf:1d:e6:eb:69:95:d3:ec:
                    2f:65:41:ed:ef:2c:17:8f:cf:19:16:b7:a7:35:7c:
                    7b:d6:4d:9b:97:0b:c5:49:f4:e7:ba:54:79:57:a0:
                    ed:79:01:70:5f:0e:de:e4:2f:97:53:2b:23:fc:8d:
                    9e:3d:40:3d:a2:a3:fd:64:12:8c:d6:0d:b9:ab:bd:
                    54:37:75:4e:09:0d:d1:ae:48:5b:c9:2a:bd:45:82:
                    4e:93:43:2b:34:68:3f:ac:f9:63:cd:f9:67:75:67:
                    30:76:a9:73:41:0a:0b:94:e0:ae:cc:70:2d:73:71:
                    85:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:39:7D:2B:BE:F5:05:4E:CF:62:AB:E8:A2:A5:99:0A:6F:74:75:42
            X509v3 Authority Key Identifier:
                keyid:46:F5:DA:41:26:3D:F1:C6:CF:F4:08:FA:7E:3A:13:20:6F:9F:8D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/46F5DA41263DF1C6CFF408FA7E3A13206F9F8DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46F5DA41263DF1C6CFF408FA7E3A13206F9F8DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5W8LNYzfVHTX1qM1WLCMXPZtBhYr1RFVxPkjNrndw5w/0/3139302e38392e3134372e302f32342d3234203d3e20323730333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:94:1a:ab:7d:0a:3c:65:cf:3f:a4:4f:4e:ac:1b:79:9a:e6:
         f1:c3:fb:34:fe:b9:56:97:65:77:7f:c6:cb:f8:33:bd:e7:d4:
         1c:5a:6d:86:19:eb:f9:13:5d:cb:d2:23:8c:fd:2d:b9:41:67:
         40:64:2b:2d:a8:2e:c5:c5:eb:1d:ec:7d:00:ce:c0:2c:64:b6:
         89:59:46:3d:2d:08:a0:e8:36:6a:d5:ff:5e:d5:71:01:55:0c:
         71:9d:7c:3f:f8:d2:ec:51:8b:58:8e:a3:69:1f:d1:8e:a1:f2:
         40:56:b0:bd:1d:33:b8:0f:3b:8b:a9:e9:28:c2:9c:70:7a:06:
         77:7c:6a:07:04:36:8b:2a:2e:a3:93:fa:8b:59:df:40:97:16:
         23:28:9d:aa:65:42:ab:ac:a8:d3:a1:4c:47:87:85:b9:b6:00:
         a7:98:ad:15:2a:37:75:71:de:35:2a:24:41:ef:0d:06:ac:0f:
         94:c5:ee:e9:cd:95:6c:6a:4a:e5:6f:d1:45:41:20:51:1f:6f:
         a8:be:fd:a9:5f:4f:07:e6:60:e4:99:60:67:87:6d:25:90:28:
         d1:f7:eb:0e:04:b8:44:34:90:df:35:12:85:a2:9d:eb:2b:dd:
         a0:af:25:b4:aa:fe:56:df:2f:4d:e6:b1:cb:75:bc:ca:3e:58:
         56:0d:62:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:19:09 2025 by rpki-client