Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133312e302f32342d3234203d3e203532393330.roa
File:                     3139302e3138302e3133312e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          lOqT9YnyMJsy8OFS9gH+jK7039Uw4NsiKSrf/3HN8xg=
Subject key identifier:   05:6C:7D:21:4F:83:44:9C:A7:8C:59:26:70:84:14:A1:8D:97:10:80
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       633CCE835AB7D43F2C6D0CA30F9F24A570864D52
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133312e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 17 Jan 2025 16:16:45 +0000
ROA not before:           Fri 17 Jan 2025 16:11:45 +0000
ROA not after:            Fri 16 Jan 2026 16:16:45 +0000
asID:                     52930
IP address blocks:        190.180.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3c:ce:83:5a:b7:d4:3f:2c:6d:0c:a3:0f:9f:24:a5:70:86:4d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Jan 17 16:11:45 2025 GMT
            Not After : Jan 16 16:16:45 2026 GMT
        Subject: CN=056C7D214F83449CA78C5926708414A18D971080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e2:98:e9:12:bc:39:1c:30:78:2d:d2:39:06:
                    a2:63:04:37:7d:a3:ca:1b:3c:4f:e8:74:5b:f9:b4:
                    39:c8:73:0b:b7:af:b2:a1:ba:15:1f:f1:87:4f:1d:
                    13:2d:cc:04:99:ae:f5:62:9e:d4:c3:f6:10:96:81:
                    30:e0:b2:71:1a:04:2c:33:12:bf:97:f6:b5:13:0e:
                    ee:63:0a:9f:f8:da:86:1e:4a:74:90:e4:42:be:a9:
                    e8:7d:ba:02:49:81:08:d4:bc:a2:79:f1:31:0d:18:
                    f5:77:6d:f2:2c:a0:e3:49:dc:75:21:bc:18:30:ba:
                    df:22:9d:8f:9a:cf:1c:19:5c:78:e7:7d:77:4f:d9:
                    9a:02:8e:b5:a1:bd:c9:d9:fb:cd:3c:36:0c:d1:27:
                    0d:4a:1c:ac:f6:09:d2:88:98:44:3f:7b:22:32:9c:
                    a8:11:30:d3:84:32:9d:75:02:1f:46:72:22:35:0a:
                    c7:ea:b5:08:01:38:d6:58:4a:aa:65:f1:6b:52:c9:
                    18:c2:0d:be:0b:5f:0a:63:ff:c6:04:4a:5b:22:7f:
                    1d:b9:3e:da:19:63:5b:d8:96:bc:af:66:7c:29:75:
                    2c:3b:1e:80:90:bb:42:3e:37:a9:4b:72:64:2c:b9:
                    ed:3b:6f:05:ee:6d:13:90:88:8a:7a:11:1c:57:76:
                    b8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6C:7D:21:4F:83:44:9C:A7:8C:59:26:70:84:14:A1:8D:97:10:80
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133312e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:1f:8a:d5:e7:14:e8:01:47:27:d8:f3:2a:fa:56:cb:21:55:
         5e:57:85:a6:b9:05:4e:93:fd:7a:0e:38:3a:0c:ad:8a:e6:38:
         e7:18:b7:36:02:9e:00:ed:39:b1:cd:78:ed:af:27:e0:42:ef:
         c0:04:e6:b4:a5:4d:8c:ef:b9:08:8d:d1:03:c4:ef:0b:b1:8c:
         d5:6b:8c:bb:f1:5f:de:ff:33:74:1e:f0:9e:c4:80:98:21:9e:
         64:e7:c3:f0:95:78:e4:41:40:6e:c6:9c:18:0c:ca:90:08:f7:
         66:a9:2b:09:9e:c9:71:3b:be:e1:3c:5a:78:39:87:ae:01:c6:
         eb:0e:48:bb:9b:d5:e7:7a:c1:b4:e6:0b:59:69:bf:3c:68:76:
         ef:c4:b0:cb:65:d9:ae:86:4e:e5:f6:94:b3:c6:2b:08:9d:fb:
         05:67:dd:03:4a:7c:bc:be:af:91:75:a8:0b:48:23:fe:a6:d6:
         62:92:10:2c:3c:4b:32:3e:93:36:36:f1:ac:cd:39:fd:c8:9c:
         02:96:1d:77:c3:da:88:f3:90:56:5f:d4:70:5a:41:61:32:7b:
         32:14:6c:2a:02:ad:49:84:3c:21:61:46:93:5e:4c:ba:a4:cb:
         cd:ca:af:c2:74:c2:a5:10:6a:cf:bc:18:59:0a:cc:da:ea:d4:
         2e:ed:5f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:17:33 2025 by rpki-client