Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3138312e3139322e39302e302f32332d3233203d3e20323633353230.roa
File:                     3138312e3139322e39302e302f32332d3233203d3e20323633353230.roa (raw, json)
Hash identifier:          GSaXppUVxQcXerOCbsrf4DCU0c4Zd5lPT9Y3tGnJB6Q=
Subject key identifier:   DB:0C:80:6C:F5:60:47:F2:2E:DC:40:9C:9E:59:A9:16:A9:52:9F:C0
Certificate issuer:       /CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
Certificate serial:       6650F2E3246991F659F5C13FDDADFEF2F79EEDFB
Authority key identifier: DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3138312e3139322e39302e302f32332d3233203d3e20323633353230.roa
Signing time:             Thu 15 Aug 2024 18:40:32 +0000
ROA not before:           Thu 15 Aug 2024 18:35:32 +0000
ROA not after:            Thu 14 Aug 2025 18:40:32 +0000
asID:                     263520
IP address blocks:        181.192.90.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:50:f2:e3:24:69:91:f6:59:f5:c1:3f:dd:ad:fe:f2:f7:9e:ed:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
        Validity
            Not Before: Aug 15 18:35:32 2024 GMT
            Not After : Aug 14 18:40:32 2025 GMT
        Subject: CN=DB0C806CF56047F22EDC409C9E59A916A9529FC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:48:fb:ea:9b:03:1f:39:4f:fe:3d:2d:12:
                    b0:c6:e5:e1:b4:98:41:fa:49:d2:53:ff:85:e4:07:
                    1b:1a:e5:6d:f8:cb:5f:fe:ef:c2:e6:3f:0f:25:22:
                    ca:66:3e:c7:41:76:58:7a:f4:8b:a5:17:d2:6c:bc:
                    93:83:fe:2e:a2:8b:98:bd:75:6e:37:14:1e:5e:33:
                    ff:c7:4f:7f:3e:ba:9e:d3:82:5b:5d:6f:17:b4:c4:
                    af:ea:a0:f8:c4:1a:6a:a1:c7:9f:9f:7e:84:01:e4:
                    fb:2e:01:93:f7:c9:74:d3:40:01:1c:d7:79:8b:cf:
                    cd:8c:c5:59:2c:45:d6:7c:d9:70:8e:45:a7:2d:41:
                    e8:c9:b8:67:3f:1a:e2:36:91:e3:dd:2e:37:51:4d:
                    7e:b3:0e:7b:31:38:70:25:09:ba:9f:46:37:93:7f:
                    2d:d7:1f:a1:f8:85:15:8b:40:ee:30:2c:97:db:82:
                    64:44:15:5f:cb:d2:fc:4a:d4:86:31:86:ab:a4:a5:
                    d0:63:3b:b9:04:b8:76:ab:e3:db:b7:e3:f1:31:1b:
                    b8:55:09:b4:20:21:df:a8:e2:f2:0b:4c:97:d9:ff:
                    5c:be:4e:c4:b0:79:ae:5f:61:3d:3f:42:8e:6f:1b:
                    64:22:45:75:58:09:3b:fe:9b:92:31:6c:66:38:ac:
                    a0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0C:80:6C:F5:60:47:F2:2E:DC:40:9C:9E:59:A9:16:A9:52:9F:C0
            X509v3 Authority Key Identifier:
                keyid:DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3138312e3139322e39302e302f32332d3233203d3e20323633353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:4f:c6:7a:70:6b:c9:a7:ec:01:ae:ee:20:c1:8b:6d:96:56:
         dd:e6:5a:9d:60:7c:4d:ba:d0:cf:c4:ea:16:59:b9:fb:f9:54:
         60:50:ce:3d:17:7a:b6:34:2f:0f:90:f0:2a:e9:29:17:fc:82:
         d9:35:68:07:62:93:d4:29:79:90:19:5a:51:01:2e:48:6d:a3:
         18:f6:72:d3:a9:b2:e2:31:cb:97:2a:13:c0:1d:c1:72:82:2a:
         93:41:b8:7a:9e:d5:6b:5e:70:5e:47:17:7e:41:8c:41:90:bb:
         60:2b:fd:bf:0b:5c:33:28:98:55:6d:f2:9f:e0:39:3d:6b:18:
         76:66:25:78:d6:bd:0f:65:c1:70:dc:38:7f:75:40:24:3a:2f:
         04:27:0d:44:05:31:91:2f:8c:bf:7d:5c:39:d6:9a:6b:3e:50:
         de:be:4f:d1:66:a1:30:27:0d:29:ce:d2:b3:d5:cc:37:be:ad:
         41:78:31:92:da:19:2c:29:d9:2e:41:9a:fb:bb:f9:c2:b4:25:
         fd:81:0c:1f:36:ab:b2:ef:3c:76:3e:86:24:7a:2f:b6:b0:86:
         be:c3:94:90:18:8f:25:c4:c7:34:c7:81:c5:91:e5:5b:88:fc:
         a5:3f:75:1f:d5:8a:94:e1:95:32:e1:cf:a1:b2:ce:87:20:bb:
         d5:a8:0c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:30 2025 by rpki-client