Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/3139302e38392e38382e302f32322d3232203d3e20323730333630.roa
File:                     3139302e38392e38382e302f32322d3232203d3e20323730333630.roa (raw, json)
Hash identifier:          E0Bg3r2mQQxPec8r0C2LnaDqjWDuXIAcutMUfPfBZ0k=
Subject key identifier:   57:1A:72:6F:F2:B8:F1:70:6C:6E:88:1A:EA:34:EB:E5:9E:22:E1:DE
Certificate issuer:       /CN=6099A1F2EF8D0923920E7211AC2ED8921B81B66F
Certificate serial:       280C0D79F2A8FA30191C8EE31E054B193B76E256
Authority key identifier: 60:99:A1:F2:EF:8D:09:23:92:0E:72:11:AC:2E:D8:92:1B:81:B6:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/3139302e38392e38382e302f32322d3232203d3e20323730333630.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     270360
IP address blocks:        190.89.88.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0c:0d:79:f2:a8:fa:30:19:1c:8e:e3:1e:05:4b:19:3b:76:e2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6099A1F2EF8D0923920E7211AC2ED8921B81B66F
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=571A726FF2B8F1706C6E881AEA34EBE59E22E1DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2c:0c:ec:2e:6f:99:e6:02:ae:33:20:aa:e4:
                    9c:a8:39:bd:93:b4:3a:e3:3b:31:95:61:dc:ed:9c:
                    f7:f3:af:dd:6b:4d:fd:88:fb:13:7a:72:6a:4c:5d:
                    91:83:20:6c:8a:04:a2:84:ff:1d:05:48:98:f4:d8:
                    c0:06:db:cd:dd:15:dc:f3:46:6e:ce:35:3b:10:b5:
                    43:19:1b:bb:cc:87:9c:c6:9f:03:8b:1f:b0:f8:59:
                    46:e4:30:f1:bd:2e:c5:a9:9e:f3:a2:41:96:44:25:
                    b9:88:27:f2:25:7c:85:c5:61:b9:98:43:33:e7:11:
                    09:06:4e:f5:52:41:68:26:77:04:43:3e:6d:2a:ef:
                    9b:a1:12:5b:df:da:1c:a5:7e:81:8a:1b:e9:82:96:
                    56:1b:c4:aa:19:c0:f1:c4:cb:0b:88:fb:ee:06:53:
                    eb:6b:5e:5d:37:60:a0:50:17:95:0d:2b:27:b6:5a:
                    45:33:fc:e7:46:df:92:4f:66:a4:ee:3f:c1:b3:bf:
                    1a:3b:a4:53:11:78:80:98:15:05:7d:8a:a8:2a:0f:
                    6e:86:81:cf:ce:75:b1:27:f5:c9:a6:87:a0:b0:82:
                    37:da:14:a9:ce:46:af:3c:6d:33:87:02:36:5c:a6:
                    3e:15:11:14:76:60:4b:1c:d0:f7:d6:da:d1:ce:ca:
                    b1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1A:72:6F:F2:B8:F1:70:6C:6E:88:1A:EA:34:EB:E5:9E:22:E1:DE
            X509v3 Authority Key Identifier:
                keyid:60:99:A1:F2:EF:8D:09:23:92:0E:72:11:AC:2E:D8:92:1B:81:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/3139302e38392e38382e302f32322d3232203d3e20323730333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:17:97:73:bc:9a:46:2f:2c:c9:25:00:28:b1:8d:c8:16:9b:
         3d:45:05:33:93:1d:c0:07:dc:72:a3:c1:31:c0:fe:ae:36:db:
         b3:56:bd:5b:4f:c3:2e:98:44:0c:35:f8:fb:95:ea:95:31:40:
         90:ef:ee:73:c5:b0:49:3e:0e:7f:77:02:6e:7e:9e:22:e4:b9:
         91:23:a0:c8:b6:43:5a:55:a6:75:b6:23:13:da:7e:42:f1:ad:
         27:0f:23:5d:b7:1c:db:bc:e1:fe:2b:9f:48:9a:92:d0:3e:47:
         e9:86:37:81:e7:37:92:00:de:3e:f0:7e:bc:4c:a8:3c:11:2e:
         1b:56:74:89:7f:67:18:ed:82:67:a2:01:9e:73:2e:c0:a6:d6:
         b1:c6:8b:67:a8:b1:7b:51:f3:ea:c4:de:d7:28:1d:69:6b:23:
         ed:7f:52:69:f4:8d:da:9e:70:14:c5:fe:dd:83:17:f2:a8:77:
         f7:4f:50:03:a9:d0:9f:6f:86:fd:4d:d0:65:42:c8:41:54:ea:
         11:bc:29:cf:4b:d3:13:4e:43:93:8c:58:a2:43:01:47:5c:33:
         f2:01:1a:7e:10:b1:c0:a7:43:1c:33:e5:6f:dd:39:f7:c8:2d:
         3e:7d:fe:7e:2c:61:a9:5f:01:61:3e:3f:9a:67:f7:4f:fd:a9:
         db:ea:b7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:50:18 2025 by rpki-client