Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32342d3234203d3e20323634323330.roa
File:                     3139302e3130392e38382e302f32342d3234203d3e20323634323330.roa (raw, json)
Hash identifier:          GrPWihe/QGDgPuEPwllTMxcE+aXREzXNU7tE9HqFEWs=
Subject key identifier:   37:68:4C:18:9D:79:C1:2E:92:66:A0:BD:64:C5:A2:9F:EB:5F:27:56
Certificate issuer:       /CN=D59C2B03CF0FCD4B0D3005B321204334D08669AF
Certificate serial:       2035228EF5D1A5B49A66265D24BBF757DF97E556
Authority key identifier: D5:9C:2B:03:CF:0F:CD:4B:0D:30:05:B3:21:20:43:34:D0:86:69:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D59C2B03CF0FCD4B0D3005B321204334D08669AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32342d3234203d3e20323634323330.roa
Signing time:             Mon 28 Oct 2024 21:20:38 +0000
ROA not before:           Mon 28 Oct 2024 21:15:38 +0000
ROA not after:            Mon 27 Oct 2025 21:20:38 +0000
asID:                     264230
IP address blocks:        190.109.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:35:22:8e:f5:d1:a5:b4:9a:66:26:5d:24:bb:f7:57:df:97:e5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D59C2B03CF0FCD4B0D3005B321204334D08669AF
        Validity
            Not Before: Oct 28 21:15:38 2024 GMT
            Not After : Oct 27 21:20:38 2025 GMT
        Subject: CN=37684C189D79C12E9266A0BD64C5A29FEB5F2756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:bc:1b:85:b4:e3:cd:4e:48:5c:3c:00:a8:
                    72:e8:db:3c:c3:c9:9d:64:7b:94:a9:56:a2:6b:37:
                    e7:47:47:5b:0e:bb:bd:12:fc:59:60:1d:90:e9:35:
                    4b:19:08:98:8c:22:09:e1:fd:d0:6e:e5:77:6f:74:
                    d9:da:81:b2:81:18:50:73:48:54:94:b0:70:ca:20:
                    24:19:80:2c:5e:f4:9e:1f:4f:08:ea:57:6c:bc:7f:
                    6f:1b:57:bc:a3:7a:fb:98:ed:de:35:5e:dd:c8:52:
                    5e:7d:2b:62:ab:ed:98:37:2f:68:a7:0b:63:27:df:
                    f4:33:d1:ff:c9:f0:2c:c9:60:42:64:28:12:07:df:
                    b7:ff:21:1d:bd:7c:00:ae:7d:6d:a3:2f:e3:f7:a5:
                    c7:db:9f:fc:c4:71:34:2e:44:f3:25:6b:cc:11:75:
                    b3:ae:34:e2:3a:20:03:cd:2e:bb:3b:0c:c8:36:7d:
                    15:f9:a0:69:a8:77:8c:66:10:e7:79:63:44:3a:65:
                    c0:62:54:91:0e:22:ef:5b:2b:51:78:28:37:e3:91:
                    de:7c:6a:0e:05:fb:20:d0:ff:aa:dd:16:4b:7e:9b:
                    28:d8:83:ea:a8:0f:32:ef:7b:44:0c:a8:7b:a7:bc:
                    fa:34:9f:e8:84:eb:0f:f0:e4:52:dc:c8:a1:1f:9f:
                    13:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:68:4C:18:9D:79:C1:2E:92:66:A0:BD:64:C5:A2:9F:EB:5F:27:56
            X509v3 Authority Key Identifier:
                keyid:D5:9C:2B:03:CF:0F:CD:4B:0D:30:05:B3:21:20:43:34:D0:86:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/D59C2B03CF0FCD4B0D3005B321204334D08669AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D59C2B03CF0FCD4B0D3005B321204334D08669AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32342d3234203d3e20323634323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:f4:67:d3:6f:ca:15:1c:a1:a6:e8:46:6d:5e:ec:27:d7:d2:
         1b:27:da:26:23:6c:45:36:cd:48:ef:ef:8a:e5:7a:5e:6d:cf:
         a1:04:45:72:4e:54:90:35:8d:b3:8f:ff:48:94:93:51:ca:40:
         52:3e:db:7c:46:0d:da:4b:1f:6a:67:62:d4:61:c1:fb:06:48:
         0a:f3:8a:74:53:de:4a:49:31:30:42:e0:2e:06:60:af:4f:64:
         94:c3:47:1b:08:ef:06:05:ca:1f:db:18:54:82:34:a3:64:97:
         3f:60:4e:b2:78:19:51:35:ab:4b:ab:6e:51:e3:f5:fc:c1:f8:
         8a:9d:c3:ec:a9:58:9e:b5:99:d6:7d:ba:7d:f4:a2:2d:e3:63:
         bf:f4:10:c0:48:01:0c:d4:b5:5b:6e:1f:ed:92:44:da:d8:83:
         52:4a:4b:c2:dd:57:b5:46:d1:79:2a:3c:af:8d:51:8b:59:af:
         70:54:b8:f2:a2:a4:86:80:a9:c3:4f:4f:56:72:51:b6:75:28:
         d8:dc:af:9b:0b:58:93:f2:72:e2:48:6e:07:10:69:45:03:b0:
         cd:95:bf:82:d2:eb:4f:61:df:f3:06:af:2b:80:52:47:8c:ad:
         f8:3c:8b:4d:cb:a5:bb:f0:31:5c:32:f7:87:e0:c8:7d:b3:1d:
         02:dc:31:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:38 2025 by rpki-client