Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3139302e3138302e3133302e302f32342d3234203d3e203532393330.roa
File:                     3139302e3138302e3133302e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          RBdJtUSFPYreWgwNDliSQG4pTEX6/D29TOw7FqhPCWE=
Subject key identifier:   2C:F6:C0:B4:2D:3A:99:50:72:7F:31:94:B7:89:E8:BE:60:77:EF:63
Certificate issuer:       /CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
Certificate serial:       2AF107BA40816A72423E10B180504E95D427B3B6
Authority key identifier: AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3139302e3138302e3133302e302f32342d3234203d3e203532393330.roa
Signing time:             Sat 06 Apr 2024 17:29:55 +0000
ROA not before:           Sat 06 Apr 2024 17:24:55 +0000
ROA not after:            Sat 05 Apr 2025 17:29:55 +0000
asID:                     52930
IP address blocks:        190.180.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f1:07:ba:40:81:6a:72:42:3e:10:b1:80:50:4e:95:d4:27:b3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
        Validity
            Not Before: Apr  6 17:24:55 2024 GMT
            Not After : Apr  5 17:29:55 2025 GMT
        Subject: CN=2CF6C0B42D3A9950727F3194B789E8BE6077EF63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:03:92:2c:6d:c0:49:e7:cc:08:f2:90:09:
                    dd:83:fb:47:a1:df:7b:54:43:db:45:5e:06:4d:68:
                    ba:c8:40:31:17:2e:e2:30:39:47:62:78:ac:7c:cf:
                    37:7d:ab:7b:61:72:ab:62:60:cc:85:2d:28:31:57:
                    7f:d9:dc:7a:cc:f5:73:40:c0:8c:10:9a:1a:42:24:
                    1b:a5:64:07:84:54:7c:69:01:98:1e:ac:e0:42:9d:
                    48:f3:72:1f:01:20:52:28:c3:e3:09:8e:c3:f7:43:
                    fb:0f:72:77:f4:bb:41:b7:6f:2b:75:a3:b1:76:1e:
                    9f:1e:1b:2e:a9:ec:c8:4e:f7:fc:2c:0d:34:d2:28:
                    56:ea:b1:6b:ba:3c:45:c1:f7:b8:80:42:12:d2:81:
                    20:be:04:80:bb:a4:23:23:b8:44:98:94:75:a4:ec:
                    58:a7:d7:3e:55:7f:2e:dd:d9:10:cc:6d:2f:cf:9f:
                    c1:93:cd:86:27:ec:ac:21:0b:86:1c:8b:04:73:a9:
                    ac:6e:6f:7d:1b:4e:69:e0:38:3a:60:99:b1:a0:6d:
                    af:d2:1a:22:0e:6e:ae:00:9f:57:4d:2a:8e:70:55:
                    2e:2e:c0:a2:e2:79:eb:c8:86:80:7c:4e:fa:b2:b2:
                    95:e2:64:76:4d:f5:25:42:60:a9:8c:54:0d:d4:12:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F6:C0:B4:2D:3A:99:50:72:7F:31:94:B7:89:E8:BE:60:77:EF:63
            X509v3 Authority Key Identifier:
                keyid:AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/AE58493D362ABCD98C2752F6BC5F4335A17F721D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3139302e3138302e3133302e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:cd:97:09:47:6a:29:86:ed:40:c3:34:8c:15:99:91:ef:7f:
         61:48:4d:9c:a8:5b:b2:a6:f7:fe:ae:80:6b:72:3d:0f:bc:13:
         c1:ec:84:b6:50:c5:13:c3:b0:c9:99:03:28:be:af:fe:81:94:
         70:95:16:a1:c1:1d:be:8c:c8:12:8a:30:dc:65:60:f3:bb:5f:
         97:22:ec:cb:cd:b3:ee:01:59:79:0f:aa:0f:96:0b:13:c8:7f:
         ab:fd:7f:ce:06:13:1b:e8:02:2a:03:26:d6:06:c9:0f:2c:67:
         ca:81:92:b6:93:17:dc:b2:98:17:a8:84:e3:60:4c:76:e5:aa:
         12:22:dd:ed:d2:2b:17:d5:27:fc:a1:85:19:75:a4:95:d4:09:
         2c:93:b1:c3:96:cf:21:1c:6a:22:32:c1:11:01:8b:be:60:40:
         fd:d4:c7:16:49:07:3e:39:3c:a2:d3:aa:89:4b:15:62:a1:35:
         28:77:bb:2a:b5:e1:6a:85:4e:fb:1e:dc:d8:03:fc:ae:31:bf:
         d5:ef:e2:89:94:56:4e:9a:73:33:b4:3b:98:7e:aa:63:95:40:
         3d:e1:dc:22:1b:50:f0:5f:af:b7:71:8f:9f:42:cf:47:b0:13:
         a6:69:7a:75:51:41:4b:e1:80:ce:7b:91:e8:a4:32:72:f8:b1:
         3c:48:37:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:38:31 2025 by rpki-client