Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133342e302f32342d3234203d3e203532393330.roa
File:                     3139302e3138302e3133342e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          Ze7Cvp4piO2vSArGKaEfe/89wy5RQvx/TI9OKq+wtZ0=
Subject key identifier:   38:24:A6:2D:BA:05:D5:BA:86:2B:C5:ED:EC:5B:C1:47:E8:2A:CC:AA
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       73CFCC868D31D80825DDD4C7205559DEDBA61B03
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133342e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 17 Jan 2025 16:16:51 +0000
ROA not before:           Fri 17 Jan 2025 16:11:51 +0000
ROA not after:            Fri 16 Jan 2026 16:16:51 +0000
asID:                     52930
IP address blocks:        190.180.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cf:cc:86:8d:31:d8:08:25:dd:d4:c7:20:55:59:de:db:a6:1b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Jan 17 16:11:51 2025 GMT
            Not After : Jan 16 16:16:51 2026 GMT
        Subject: CN=3824A62DBA05D5BA862BC5EDEC5BC147E82ACCAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bf:aa:80:84:df:3f:db:e9:b9:7f:e4:ac:44:
                    46:47:03:ed:cc:25:e6:f6:7a:ce:3d:b8:97:17:64:
                    26:87:7c:8a:ae:73:ef:2d:90:92:8e:52:92:a3:45:
                    74:fe:44:d1:e3:a8:28:cb:4e:09:d5:bc:71:87:8e:
                    25:de:8f:34:13:1e:ae:dc:99:84:b2:88:ef:45:0a:
                    ab:18:e0:c0:82:82:c5:0c:7b:be:f9:d7:8b:5b:78:
                    b7:e9:e5:7d:d9:2e:d3:53:64:3a:8b:a0:90:79:ae:
                    08:e3:fb:2c:8e:58:c7:7f:0b:5a:77:8e:09:83:f9:
                    de:5a:a6:36:ca:57:1a:04:5c:92:f4:5b:f3:91:28:
                    0a:4a:8c:61:9e:2b:ed:00:a5:01:e7:72:d8:c9:98:
                    98:c8:cd:e5:a9:44:28:13:86:f0:d4:31:66:01:7e:
                    c6:04:aa:ae:99:28:07:6a:41:d8:ad:24:25:7c:ed:
                    ad:7a:2a:c8:a0:6b:ac:f4:5d:df:8b:bb:c4:2c:d2:
                    92:c2:4a:2c:77:20:49:9d:2c:ae:92:15:65:c9:f6:
                    d5:38:84:4d:61:13:44:1a:44:05:e4:85:97:37:3f:
                    fe:03:b6:76:82:a9:54:3b:fb:b7:d9:a2:3f:01:fb:
                    8a:bd:db:46:09:5d:63:cd:40:f9:18:79:7d:c1:71:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:24:A6:2D:BA:05:D5:BA:86:2B:C5:ED:EC:5B:C1:47:E8:2A:CC:AA
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133342e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:27:db:53:23:39:74:85:68:db:dd:bf:68:c7:da:93:e8:17:
         b4:b8:f8:f6:f6:ab:3c:95:34:f3:66:5d:b9:01:5d:f3:fa:ad:
         3d:56:e4:d0:f9:77:2b:bb:9d:4d:4a:09:26:c7:ae:11:74:da:
         b0:ab:a1:a5:00:de:d5:42:6c:6b:b8:c9:8b:d8:42:f1:dd:1f:
         ad:95:6a:a2:68:59:68:39:f8:dc:25:a2:7f:1c:2d:69:90:dc:
         bb:2a:18:17:ed:50:9d:fa:7e:ee:0c:60:6a:2a:d8:ad:e2:77:
         29:2a:88:d2:09:59:e9:a6:33:e0:9a:f1:cf:a1:7a:28:37:5d:
         a0:6a:0d:7b:c3:26:ee:d8:42:38:f8:bd:d6:88:52:5b:ca:e1:
         f5:8d:ce:da:c9:a2:06:79:3b:21:47:36:b0:ce:55:b9:cd:38:
         80:e1:6d:06:b9:a0:01:12:04:ba:ff:37:bf:04:21:2d:c4:f6:
         ba:f5:72:97:b3:83:61:03:d1:e4:d8:ca:ac:17:03:cc:9c:f5:
         79:54:59:a8:9b:e1:db:0a:3a:86:0c:1b:6b:e5:0f:19:8e:c2:
         ed:44:47:d9:3d:12:38:50:cf:6a:96:a8:02:4e:fe:bb:38:3a:
         cb:70:2d:3f:21:22:6a:02:f6:f2:29:eb:e5:d3:ed:70:7b:bd:
         c0:67:05:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:52:56 2025 by rpki-client