Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/0/3139302e382e3136302e302f32322d3332203d3e20323730363138.roa
File:                     3139302e382e3136302e302f32322d3332203d3e20323730363138.roa (raw, json)
Hash identifier:          zDvoa9Db5lHg8re6zIblYKZQX21RZ1x1bct7F97NffM=
Subject key identifier:   60:27:2C:52:57:E1:8A:11:80:6A:62:5C:7B:99:E1:E0:AD:29:CD:06
Certificate issuer:       /CN=76549A6DCEE13F7C7189272C32E27CB0740294FE
Certificate serial:       57D02B52A8C1FF4877CE358309531B1AD7B96A90
Authority key identifier: 76:54:9A:6D:CE:E1:3F:7C:71:89:27:2C:32:E2:7C:B0:74:02:94:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76549A6DCEE13F7C7189272C32E27CB0740294FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/0/3139302e382e3136302e302f32322d3332203d3e20323730363138.roa
Signing time:             Sun 29 Dec 2024 02:45:06 +0000
ROA not before:           Sun 29 Dec 2024 02:40:06 +0000
ROA not after:            Sun 28 Dec 2025 02:45:06 +0000
asID:                     270618
IP address blocks:        190.8.160.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d0:2b:52:a8:c1:ff:48:77:ce:35:83:09:53:1b:1a:d7:b9:6a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76549A6DCEE13F7C7189272C32E27CB0740294FE
        Validity
            Not Before: Dec 29 02:40:06 2024 GMT
            Not After : Dec 28 02:45:06 2025 GMT
        Subject: CN=60272C5257E18A11806A625C7B99E1E0AD29CD06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d5:4c:dd:54:52:2a:4a:56:9a:b7:fc:ea:5b:
                    75:e5:29:e7:a7:f4:e4:cc:e1:53:45:9b:d3:3e:0e:
                    30:4a:64:ef:1e:a4:df:5a:14:cb:ee:7d:27:dc:c5:
                    51:47:aa:ca:0f:f4:6c:81:e4:bb:60:7b:8c:a9:e7:
                    a0:99:56:48:9c:f0:f8:95:ba:9e:67:d5:df:17:a7:
                    73:a7:ee:e8:b2:9b:45:5b:9b:22:9d:31:ae:01:24:
                    81:df:54:58:09:7e:0a:32:f5:7e:df:6e:68:56:e1:
                    4d:69:c6:72:5a:be:82:9b:11:18:be:dc:f3:81:80:
                    f5:b9:4b:9e:98:2e:83:c9:a5:37:1b:66:3f:f5:13:
                    5d:12:96:18:f2:ea:f2:77:80:7c:40:5a:41:9d:a6:
                    46:89:95:c1:e1:31:4a:c9:ed:38:3b:bc:ff:72:d1:
                    d1:d8:17:8b:c5:ee:dc:b4:52:50:b7:7f:b0:db:fe:
                    69:22:f2:66:6a:17:9b:95:9c:ca:b1:9c:01:f3:70:
                    97:27:68:2d:c6:32:b4:1d:98:96:11:4e:1f:9f:e7:
                    02:9c:82:4e:e0:71:95:7b:7f:34:e6:30:fb:e4:f9:
                    6f:75:e5:14:de:de:ea:b7:5f:72:d7:87:f3:31:22:
                    ca:82:4b:d2:02:95:7a:aa:dd:65:90:80:bb:38:bc:
                    41:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:27:2C:52:57:E1:8A:11:80:6A:62:5C:7B:99:E1:E0:AD:29:CD:06
            X509v3 Authority Key Identifier:
                keyid:76:54:9A:6D:CE:E1:3F:7C:71:89:27:2C:32:E2:7C:B0:74:02:94:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/0/76549A6DCEE13F7C7189272C32E27CB0740294FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76549A6DCEE13F7C7189272C32E27CB0740294FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/0/3139302e382e3136302e302f32322d3332203d3e20323730363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:e3:be:3d:70:be:85:1e:fa:95:d1:5f:8d:6b:7a:bd:c9:21:
         8a:9b:27:10:02:1f:14:69:ac:40:32:99:e6:b4:57:dc:0c:ea:
         e1:02:f1:18:d9:0c:90:c2:29:e9:62:db:73:d4:09:91:db:22:
         b0:17:6d:0f:de:c9:c5:b9:c3:e9:61:b4:05:8c:d0:b0:15:7c:
         3d:28:5d:cd:23:e7:27:52:2e:9b:81:0e:3d:fb:d1:91:57:5c:
         8e:45:6d:db:8d:81:9d:71:c1:e4:e7:66:1b:f1:9e:e3:23:b1:
         e6:4a:3e:1b:e0:07:b1:14:8c:a8:96:c1:42:73:78:05:3a:c1:
         96:e3:d7:81:29:c1:dc:2b:d4:4d:34:d2:04:58:e7:fa:79:10:
         8c:12:99:4f:23:3b:96:db:64:39:df:79:b0:fe:c5:62:ab:ea:
         36:64:90:82:40:30:e9:fe:be:2a:c5:11:73:ec:99:b0:50:5f:
         f8:3a:11:c3:e6:53:e8:54:0b:d6:9f:0c:d6:95:58:db:49:15:
         45:ac:06:9b:2e:83:81:fe:19:04:8f:83:f6:bb:86:f8:83:68:
         b6:e9:ab:07:cb:50:34:8e:4c:e8:90:cb:5d:0b:38:ca:c8:18:
         de:23:fc:57:13:03:f0:fd:54:e4:34:4d:f1:87:9b:58:d7:66:
         9a:8d:d0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:44:55 2025 by rpki-client