Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/3138392e3230312e3230382e302f32302d3234203d3e20323633303830.roa
File:                     3138392e3230312e3230382e302f32302d3234203d3e20323633303830.roa (raw, json)
Hash identifier:          MlnpD9S0uGH6dZknLQe5al4IXQshmTTI5/vT+PHSnxo=
Subject key identifier:   49:D6:F0:E0:66:6A:21:CA:16:EE:F8:3B:71:E5:8C:2D:24:30:50:91
Certificate issuer:       /CN=ACD92F0AB73C9E80D85FF4C9A708CFB750E1D464
Certificate serial:       44CC51E2DB4B1E2442C64E643FB6DA997E606CA8
Authority key identifier: AC:D9:2F:0A:B7:3C:9E:80:D8:5F:F4:C9:A7:08:CF:B7:50:E1:D4:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACD92F0AB73C9E80D85FF4C9A708CFB750E1D464.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/3138392e3230312e3230382e302f32302d3234203d3e20323633303830.roa
Signing time:             Mon 07 Oct 2024 15:18:52 +0000
ROA not before:           Mon 07 Oct 2024 15:13:52 +0000
ROA not after:            Mon 06 Oct 2025 15:18:52 +0000
asID:                     263080
IP address blocks:        189.201.208.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:cc:51:e2:db:4b:1e:24:42:c6:4e:64:3f:b6:da:99:7e:60:6c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACD92F0AB73C9E80D85FF4C9A708CFB750E1D464
        Validity
            Not Before: Oct  7 15:13:52 2024 GMT
            Not After : Oct  6 15:18:52 2025 GMT
        Subject: CN=49D6F0E0666A21CA16EEF83B71E58C2D24305091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:29:1c:dc:99:45:e8:0e:2e:a5:7e:ff:ad:9f:
                    de:c1:00:eb:1b:04:9e:9c:3a:0b:79:69:bf:ea:d4:
                    86:6e:d2:9a:ee:ea:70:bb:5b:22:ba:cc:0d:a7:83:
                    e4:11:60:b0:14:a8:dc:01:c2:b8:82:19:17:8d:c4:
                    a8:ab:20:ed:a1:88:83:b4:82:19:ff:57:17:6a:ff:
                    83:89:42:57:bb:87:0d:d0:97:87:36:4d:5d:c0:6f:
                    32:f4:83:d0:51:81:99:0b:30:19:db:26:05:67:05:
                    17:ec:ae:b4:d9:6b:d7:49:f8:f3:aa:d0:10:c8:a6:
                    b7:81:79:bb:f2:34:90:9a:18:fc:88:63:7b:c5:cc:
                    5f:a3:0f:57:34:7a:60:d8:1f:b2:af:6a:94:48:a5:
                    a5:1e:9f:47:a6:1d:bc:7f:f6:39:7d:6d:2a:b7:6c:
                    1e:c0:e9:04:21:28:a8:47:18:b5:82:fc:ee:8a:56:
                    0d:a0:9c:9b:8b:ec:62:86:65:74:99:07:77:22:30:
                    5f:9a:67:72:ae:55:4f:6c:d8:ff:6f:a0:a8:ac:c9:
                    9e:c7:04:26:e2:79:d0:14:ff:98:72:60:d4:94:2a:
                    55:63:e4:29:f4:43:22:b8:5c:a6:6e:4f:8b:91:88:
                    e8:e4:e5:42:2d:82:7b:89:86:10:56:d1:9e:62:8b:
                    3f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D6:F0:E0:66:6A:21:CA:16:EE:F8:3B:71:E5:8C:2D:24:30:50:91
            X509v3 Authority Key Identifier:
                keyid:AC:D9:2F:0A:B7:3C:9E:80:D8:5F:F4:C9:A7:08:CF:B7:50:E1:D4:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/ACD92F0AB73C9E80D85FF4C9A708CFB750E1D464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACD92F0AB73C9E80D85FF4C9A708CFB750E1D464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/3138392e3230312e3230382e302f32302d3234203d3e20323633303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:95:af:d6:56:c6:60:aa:2d:dd:5f:8c:ee:f4:17:0f:75:76:
         7a:50:4e:d1:54:99:50:78:1f:44:71:3d:6e:2d:c1:64:cf:79:
         1f:60:b5:a1:00:ac:cb:06:66:00:cc:cc:ff:3e:7e:2b:9e:71:
         cb:24:bb:b7:a8:5c:f7:37:90:76:a2:f1:8c:56:dc:90:4c:23:
         60:d7:d3:ad:23:44:01:a0:c5:2e:79:f5:88:21:95:c2:64:18:
         f0:05:86:5d:95:b5:22:22:1d:ba:7d:ea:f7:4f:de:ee:a9:32:
         91:c6:ff:6a:84:4f:3e:03:24:8d:cc:65:3a:08:1c:c9:40:b4:
         2f:f1:9d:41:31:ad:70:46:ab:4a:7c:47:98:09:58:a4:a6:6e:
         5b:17:0b:6b:70:7d:76:0a:2b:c7:f9:35:24:e9:5f:b2:0d:e7:
         78:b5:59:72:1a:3c:3b:1f:32:d5:7a:be:5e:ff:bd:97:62:6d:
         06:59:d8:af:e6:56:82:a1:75:63:97:4f:73:48:d4:3e:3d:87:
         73:cf:db:1c:16:e3:8a:21:74:c7:d1:bc:ab:35:15:94:4d:0c:
         4e:f3:18:0a:32:a1:e9:42:e6:94:fe:07:0c:38:46:d8:1e:dc:
         41:cc:1b:b1:a7:b6:ac:fa:24:87:c2:34:73:03:f9:59:50:3e:
         a7:c6:b0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:42 2025 by rpki-client