Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/3139312e352e3231362e302f32322d3234203d3e20323632343539.roa
File:                     3139312e352e3231362e302f32322d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          F9Lp+XNVQWf5pJo9OoWQrJ0AiFSiSL9dH51KA3/Ytkc=
Subject key identifier:   CE:DA:9C:84:25:4E:C9:85:A5:0B:17:95:4D:3B:09:31:EB:80:71:C9
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       0D0BE7C4A2C572A668C90BA120E547B0057124D4
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/3139312e352e3231362e302f32322d3234203d3e20323632343539.roa
Signing time:             Fri 23 Jun 2023 13:00:23 +0000
ROA not before:           Fri 23 Jun 2023 12:55:23 +0000
ROA not after:            Fri 21 Jun 2024 13:00:23 +0000
asID:                     262459
IP address blocks:        191.5.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0b:e7:c4:a2:c5:72:a6:68:c9:0b:a1:20:e5:47:b0:05:71:24:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jun 23 12:55:23 2023 GMT
            Not After : Jun 21 13:00:23 2024 GMT
        Subject: CN=CEDA9C84254EC985A50B17954D3B0931EB8071C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:58:9e:1f:e5:8a:72:8c:5e:ee:4b:c9:35:60:
                    af:2b:c2:70:62:1e:77:2f:76:1f:db:ba:5c:c0:d5:
                    9b:5e:f3:48:6e:aa:80:c1:b8:9e:88:f4:cc:0c:77:
                    2d:a8:12:99:52:12:d9:61:3b:f7:b6:0e:3e:c0:e8:
                    ba:39:1a:4f:18:b4:6a:d9:b0:60:e8:e3:b0:5b:45:
                    4c:fa:ad:fc:09:95:c9:ca:50:40:ed:a2:07:e3:e0:
                    fc:43:82:76:7b:e6:af:45:11:e6:7f:de:08:32:39:
                    4f:5d:ef:f2:6c:94:e6:d0:8f:09:0a:0b:bc:bc:cf:
                    e9:6f:a9:c0:56:7f:c4:a7:f8:ff:dc:1e:e9:bd:4c:
                    1b:de:c4:68:5e:f3:9d:20:29:ef:e3:41:f6:1e:99:
                    1c:97:63:97:98:f4:a6:4b:f3:01:c0:f9:d4:30:f1:
                    4c:d1:9a:e5:6e:4e:ac:28:7f:88:8b:93:9c:73:60:
                    e7:ab:96:88:ad:73:fb:87:b4:4b:60:40:97:a1:85:
                    c9:48:cd:ac:c2:0e:3c:d0:0b:3d:71:95:96:0a:aa:
                    a1:90:dd:7d:41:53:9c:5c:b2:31:a3:48:c9:1a:b5:
                    35:f7:22:e8:83:56:06:df:29:2a:e8:a5:83:cc:a6:
                    e3:7c:51:ca:8c:3b:11:ff:53:36:0b:15:98:ed:91:
                    03:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DA:9C:84:25:4E:C9:85:A5:0B:17:95:4D:3B:09:31:EB:80:71:C9
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/3139312e352e3231362e302f32322d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:8a:4b:2c:29:21:db:4c:e3:10:d2:31:b2:cd:92:44:3b:6d:
         98:4a:ff:84:f0:e8:2f:db:ae:91:46:ec:2e:68:74:a1:cd:d4:
         4f:6a:cd:0a:42:30:64:b2:59:19:cc:62:0a:4a:79:f2:e4:eb:
         a4:7c:7a:45:d1:b1:18:13:ed:97:92:e6:93:f4:9c:15:e6:bd:
         e3:cc:01:7d:4b:7c:6c:0f:32:ed:b0:05:21:70:ee:53:5c:a9:
         4f:c6:0e:5d:07:61:c1:3f:83:0c:83:ba:62:05:30:55:51:43:
         6c:d2:29:a5:7e:d5:24:7b:83:e9:06:3c:c4:10:96:f0:1c:4e:
         a0:8e:c9:11:9e:5c:72:5c:0e:1d:a0:4a:8d:71:57:72:2d:da:
         67:cd:6e:ab:61:d7:88:43:d1:2f:22:ad:61:89:f4:81:9a:92:
         c1:37:44:9a:7f:3b:90:6e:67:a3:cb:2c:98:56:f5:72:d5:e8:
         4d:14:63:5b:87:68:ae:48:c1:7a:b4:f0:05:f5:17:8d:53:2e:
         c4:29:f1:6c:c5:cc:00:86:e5:9c:45:bc:ab:07:a3:84:8b:2a:
         09:14:cb:b0:7a:de:e0:2a:72:d5:9f:90:d2:4d:4c:dd:48:83:
         7e:2b:b7:d7:52:ba:a8:d8:cd:6d:8c:33:66:45:ec:72:36:35:
         e9:12:3d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:32 2025 by rpki-client