Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/0/3139302e38392e31322e302f32322d3234203d3e20323730333437.roa
File:                     3139302e38392e31322e302f32322d3234203d3e20323730333437.roa (raw, json)
Hash identifier:          mRWLQngMx6/fNfQQ7YbHm3Ux75+CP8MoBFFaF3wxl0M=
Subject key identifier:   0F:8A:38:6A:5E:62:E6:3A:D2:D0:2F:10:41:FD:5B:B9:B8:8A:A1:42
Certificate issuer:       /CN=786B5546151D25951A0101333307AA41E9175AFB
Certificate serial:       2E87F7BD819ECB5736DE848E44727A6E4B87627A
Authority key identifier: 78:6B:55:46:15:1D:25:95:1A:01:01:33:33:07:AA:41:E9:17:5A:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/786B5546151D25951A0101333307AA41E9175AFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/0/3139302e38392e31322e302f32322d3234203d3e20323730333437.roa
Signing time:             Fri 10 Mar 2023 19:06:48 +0000
ROA not before:           Fri 10 Mar 2023 19:01:48 +0000
ROA not after:            Fri 08 Mar 2024 19:06:48 +0000
asID:                     270347
IP address blocks:        190.89.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:87:f7:bd:81:9e:cb:57:36:de:84:8e:44:72:7a:6e:4b:87:62:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786B5546151D25951A0101333307AA41E9175AFB
        Validity
            Not Before: Mar 10 19:01:48 2023 GMT
            Not After : Mar  8 19:06:48 2024 GMT
        Subject: CN=0F8A386A5E62E63AD2D02F1041FD5BB9B88AA142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:e2:df:ea:68:c7:c0:6f:f0:42:27:71:30:
                    ff:31:e3:ac:5c:1f:5b:36:66:4e:02:8a:49:0e:94:
                    ea:9b:ff:f2:37:27:6f:83:9c:15:90:6f:d8:ca:2e:
                    fa:fe:fb:2e:f4:c4:2e:af:58:a7:16:dd:e9:0c:60:
                    a2:96:39:fb:19:f9:13:cd:b9:64:db:3f:4c:7b:27:
                    f1:57:a1:4c:77:40:99:e0:a5:5b:42:75:d0:56:bb:
                    fc:ec:7b:ad:8a:6a:50:7b:45:79:2b:5b:be:51:68:
                    98:86:2d:a9:ad:9e:ce:87:ef:da:93:90:f2:8d:a7:
                    ea:cf:c3:0a:96:01:06:49:81:33:39:db:4a:cf:99:
                    a3:38:2f:fd:bb:c2:ec:1f:f3:f4:06:99:99:7c:0c:
                    24:91:57:ce:c6:e3:0e:e4:65:8d:65:4c:b4:ad:76:
                    23:89:a2:a7:3c:fc:37:26:c2:92:04:31:6a:d2:12:
                    3c:c1:92:6b:a4:8f:43:a5:f1:f5:24:3c:b1:c7:c5:
                    66:48:ab:57:8b:58:73:2b:81:39:42:16:91:8c:c1:
                    24:fa:3a:22:96:8d:f2:6f:61:11:df:43:6e:2b:d5:
                    52:a6:ec:0f:83:e9:d9:21:63:1a:6e:fe:7e:86:91:
                    cb:fe:b6:5c:83:1d:3a:7f:dd:41:9f:89:57:a8:95:
                    8a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8A:38:6A:5E:62:E6:3A:D2:D0:2F:10:41:FD:5B:B9:B8:8A:A1:42
            X509v3 Authority Key Identifier:
                keyid:78:6B:55:46:15:1D:25:95:1A:01:01:33:33:07:AA:41:E9:17:5A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/0/786B5546151D25951A0101333307AA41E9175AFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/786B5546151D25951A0101333307AA41E9175AFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/0/3139302e38392e31322e302f32322d3234203d3e20323730333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:05:97:41:2e:4d:d6:a5:d3:da:26:7b:e1:4c:56:c1:14:5b:
         61:5d:c2:cc:ec:e1:20:db:46:c0:69:64:8c:b0:b1:82:1b:bf:
         14:63:dd:3c:69:14:11:ee:79:41:fb:dd:ba:35:f7:f9:e6:96:
         36:0d:04:6e:58:e6:46:49:8a:7e:9e:09:de:27:37:c9:2a:98:
         10:b3:88:0c:17:4c:8f:b2:ff:f3:24:45:bd:dc:59:06:ce:5c:
         95:a3:85:cd:c3:6a:8d:ab:3b:6f:9e:8b:d8:08:6b:6b:58:ca:
         da:59:57:b7:1b:25:02:86:90:45:8b:1f:ea:45:a0:68:0f:8f:
         38:5c:aa:17:66:eb:2a:2e:4a:52:9a:eb:9a:4c:22:0e:22:13:
         f3:2d:b6:77:29:5c:fc:f9:2e:00:9d:3e:d5:2f:56:c3:f7:42:
         eb:d3:64:a7:dc:a0:3a:1e:2d:0f:98:8b:28:5b:af:3b:e2:00:
         0d:b6:50:13:78:d0:6c:ac:7b:2c:53:10:e4:a4:72:50:db:8a:
         11:0a:94:0e:c9:80:41:37:43:18:54:e6:8b:8d:f7:c6:5e:9e:
         9a:42:d6:13:bc:fa:bd:e9:0a:d6:27:9f:34:3a:5b:05:ac:b7:
         72:72:d7:af:ca:36:1f:34:74:22:9a:90:6a:3f:4d:8d:7d:62:
         d0:9f:37:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:33:19 2025 by rpki-client