Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3139302e3138302e3132382e302f32342d3234203d3e203532393330.roa
File:                     3139302e3138302e3132382e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          +QU7v/1fzUoDLt3carJ5w3chEKee61b9lV9KqKI70NI=
Subject key identifier:   59:EF:B4:B7:F3:45:71:6F:C2:6B:A7:3B:12:12:71:3C:EB:90:16:E0
Certificate issuer:       /CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
Certificate serial:       6FDD5AA97AED9B3608E8B2BF5A7DE00B659DF0B4
Authority key identifier: AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3139302e3138302e3132382e302f32342d3234203d3e203532393330.roa
Signing time:             Sat 06 Apr 2024 17:29:42 +0000
ROA not before:           Sat 06 Apr 2024 17:24:42 +0000
ROA not after:            Sat 05 Apr 2025 17:29:42 +0000
asID:                     52930
IP address blocks:        190.180.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:dd:5a:a9:7a:ed:9b:36:08:e8:b2:bf:5a:7d:e0:0b:65:9d:f0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
        Validity
            Not Before: Apr  6 17:24:42 2024 GMT
            Not After : Apr  5 17:29:42 2025 GMT
        Subject: CN=59EFB4B7F345716FC26BA73B1212713CEB9016E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f0:0a:f1:b4:19:a1:92:72:e2:59:f2:57:1b:
                    6e:b9:87:83:f5:bd:0b:3f:d6:11:03:43:d4:58:a3:
                    e3:59:fc:91:51:70:0a:cf:2f:46:66:c4:76:49:1b:
                    7c:89:ad:81:17:b6:ae:68:08:4a:8b:1f:d1:ff:1f:
                    78:02:14:97:91:fc:b0:f1:6c:cf:7a:ef:e1:c7:95:
                    5d:c3:15:eb:19:65:85:1c:70:8f:e6:fc:8c:fe:78:
                    e6:94:95:2b:17:0e:3d:7f:4c:bb:79:57:c6:d4:11:
                    02:26:61:ef:0f:f3:f7:0d:87:ab:3b:6f:68:51:12:
                    ae:31:c9:1a:56:e2:be:1d:74:2c:54:07:1b:39:18:
                    67:c4:30:14:83:f2:dc:ce:ff:b0:27:40:d5:7c:40:
                    cc:b9:ed:09:43:7b:e4:5d:7d:7b:ee:9e:0a:ef:b0:
                    6e:02:95:26:9d:07:f7:06:4f:9e:ae:da:94:cc:d8:
                    4f:e3:a2:ec:72:dd:97:da:27:58:6a:0c:58:cd:7d:
                    39:36:b1:6e:44:eb:95:86:c5:60:76:28:04:0b:68:
                    83:80:84:c7:a2:75:1b:6e:d7:02:35:7e:5f:cc:b4:
                    ab:76:b8:16:2f:96:e3:95:28:88:be:83:13:50:98:
                    22:86:6a:3d:ac:57:82:c6:62:f8:ff:64:20:be:0b:
                    cb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EF:B4:B7:F3:45:71:6F:C2:6B:A7:3B:12:12:71:3C:EB:90:16:E0
            X509v3 Authority Key Identifier:
                keyid:AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/AE58493D362ABCD98C2752F6BC5F4335A17F721D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3139302e3138302e3132382e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:40:fd:30:bb:5a:e3:f6:0b:43:0a:63:9b:87:35:32:52:6d:
         8c:e4:be:3f:30:b2:ff:bf:63:32:31:bc:f2:d1:ac:31:fb:a0:
         8a:09:2f:e3:14:db:93:3e:cf:6b:4b:ab:66:63:96:e0:9d:65:
         b0:9c:36:49:ff:18:03:1d:45:8a:28:1d:3c:30:da:c8:1b:7c:
         50:c7:3d:ff:90:4c:26:6b:98:9f:b7:51:c6:4b:11:f2:b0:f6:
         34:5b:03:4b:c1:e4:49:ea:c9:2f:8e:16:84:d0:c9:eb:54:04:
         4c:ba:cf:2a:55:a6:b4:e1:4e:15:58:6f:97:6d:d2:00:5c:c6:
         8d:31:cd:45:3f:22:07:d1:7a:ed:b1:53:35:c6:0d:61:9b:83:
         fd:ba:2a:0a:61:0f:b9:ef:32:1e:52:57:0f:e2:8d:0f:37:e2:
         9d:4d:a6:a4:dc:46:4d:b4:df:4d:a0:4d:35:ee:ea:a1:9d:67:
         c6:89:43:a8:5d:3c:22:94:78:c6:fc:8e:b7:0a:f3:2e:9e:b4:
         3b:18:4f:3f:03:27:13:29:46:27:5e:47:ec:f2:a1:7c:15:2c:
         a7:01:85:4e:66:7f:3f:09:ba:b5:09:61:dc:68:95:5c:a9:6b:
         b6:0e:78:11:7d:09:d0:5c:e2:de:3b:73:21:38:ad:9b:d5:79:
         df:67:5b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:11 2025 by rpki-client