Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/3139302e38392e39302e302f32342d3234203d3e20323730333630.roa
File:                     3139302e38392e39302e302f32342d3234203d3e20323730333630.roa (raw, json)
Hash identifier:          pdDExJgXiDinPsGgHICHyRWT8wjkGRvCewP3HatgwPo=
Subject key identifier:   F4:A4:FE:30:80:E4:3D:CE:3F:ED:EF:57:E4:93:DA:00:76:43:6F:16
Certificate issuer:       /CN=6099A1F2EF8D0923920E7211AC2ED8921B81B66F
Certificate serial:       045EF044037DF05C952A89B8EE4AF15265059E2C
Authority key identifier: 60:99:A1:F2:EF:8D:09:23:92:0E:72:11:AC:2E:D8:92:1B:81:B6:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/3139302e38392e39302e302f32342d3234203d3e20323730333630.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     270360
IP address blocks:        190.89.90.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5e:f0:44:03:7d:f0:5c:95:2a:89:b8:ee:4a:f1:52:65:05:9e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6099A1F2EF8D0923920E7211AC2ED8921B81B66F
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=F4A4FE3080E43DCE3FEDEF57E493DA0076436F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:83:c9:a6:64:d5:31:cd:ce:a5:fc:94:c9:
                    31:ee:37:eb:7b:57:70:2a:a8:61:f3:a5:59:19:62:
                    3c:51:46:a1:f3:aa:fc:dd:c6:95:37:67:63:a9:27:
                    b7:1b:00:91:a1:68:8a:3e:e0:e6:7e:98:5a:0e:7e:
                    c0:3b:72:96:9a:e0:28:b9:28:fc:18:a2:5e:bd:96:
                    1a:47:1b:04:1e:53:2b:08:1c:75:bd:da:1e:2b:a7:
                    b7:13:2d:d5:5e:d9:65:40:f0:71:14:a6:be:53:6b:
                    b8:d1:74:29:4c:63:21:23:92:f3:4b:d5:e2:80:c1:
                    1c:af:1e:df:68:ee:ea:27:94:da:a5:fa:51:02:18:
                    ca:8c:7a:e2:be:4d:69:9f:45:77:ae:a4:e3:e0:10:
                    6b:0e:50:fb:25:fa:93:b3:28:99:9a:5c:d3:07:ea:
                    c1:a7:09:05:d3:21:e4:8b:3d:9d:75:fc:e9:5a:8f:
                    6e:fb:b6:c2:1f:c5:95:cc:ae:38:26:3c:60:b9:dc:
                    30:b2:cf:c1:86:2e:c1:eb:16:03:84:7f:da:e3:83:
                    6d:ca:3d:97:9a:c8:f7:c8:e4:f9:0a:58:6a:af:e1:
                    62:e7:ca:49:58:38:8f:74:7f:6b:a1:13:6e:c8:9d:
                    74:99:56:37:54:b8:54:1f:9c:21:30:7a:bd:b5:f0:
                    b9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A4:FE:30:80:E4:3D:CE:3F:ED:EF:57:E4:93:DA:00:76:43:6F:16
            X509v3 Authority Key Identifier:
                keyid:60:99:A1:F2:EF:8D:09:23:92:0E:72:11:AC:2E:D8:92:1B:81:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/3139302e38392e39302e302f32342d3234203d3e20323730333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:14:0b:24:69:aa:61:05:cf:2b:c6:32:db:96:f8:5e:13:27:
         c9:bf:6b:ba:8d:c7:c1:02:26:a9:d6:15:7f:c7:ac:84:fa:6a:
         d6:27:da:c0:81:04:56:e0:72:82:bd:e1:fd:d9:0c:38:07:fa:
         e8:2e:05:a5:3a:3e:d7:1f:c8:20:58:0b:e4:88:0b:af:4b:79:
         9f:7e:e3:06:52:f8:d1:94:92:b4:1e:08:cb:cb:6b:18:4b:ce:
         dc:cd:25:0e:09:e8:16:3e:69:8a:8d:06:4d:bd:02:0e:3c:53:
         88:72:7c:2d:18:08:fd:47:31:9a:a6:27:d5:6a:c4:44:f1:78:
         6b:1b:fe:e8:79:b6:72:57:cb:fe:19:7b:26:eb:d1:4d:a3:7b:
         f9:96:c6:d0:24:59:1d:ff:da:ec:85:9b:2f:d3:02:f9:c1:b4:
         01:09:3a:89:08:75:06:1a:6e:2a:8d:45:2b:be:a1:56:7e:e0:
         39:ab:c5:1b:b9:27:07:4e:4c:cb:bd:2d:c3:1a:f0:3a:fd:65:
         f1:50:66:3a:46:89:8d:5c:5a:1f:9a:d1:5d:c4:e7:53:87:29:
         db:5e:28:30:a7:55:45:ab:0f:50:fa:11:94:25:ef:c0:40:a5:
         11:38:e9:0e:d8:f4:97:6d:0a:02:1a:09:c3:da:82:df:e2:a3:
         f7:86:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:54:16 2025 by rpki-client