Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138322e302f32342d3234203d3e20323731343636.roa
File:                     3230312e34392e3138322e302f32342d3234203d3e20323731343636.roa (raw, json)
Hash identifier:          e2lMeIx/fgg+ZIM/373GtY3lZvzuyUwb79dQHqYcSxY=
Subject key identifier:   19:78:70:7A:5A:38:B5:46:40:80:AB:C3:06:0E:5F:24:6A:95:1F:63
Certificate issuer:       /CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
Certificate serial:       0CDC012A5622458300C3966F879C6B2C49403D2C
Authority key identifier: 00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138322e302f32342d3234203d3e20323731343636.roa
Signing time:             Wed 28 Feb 2024 20:15:50 +0000
ROA not before:           Wed 28 Feb 2024 20:10:50 +0000
ROA not after:            Wed 26 Feb 2025 20:15:50 +0000
asID:                     271466
IP address blocks:        201.49.182.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:dc:01:2a:56:22:45:83:00:c3:96:6f:87:9c:6b:2c:49:40:3d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
        Validity
            Not Before: Feb 28 20:10:50 2024 GMT
            Not After : Feb 26 20:15:50 2025 GMT
        Subject: CN=1978707A5A38B5464080ABC3060E5F246A951F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2e:f3:d4:2f:40:58:e9:a3:aa:15:53:3c:ce:
                    96:99:d0:16:68:b2:40:2a:ab:f6:95:fc:84:47:7d:
                    ad:45:9e:50:3c:64:ae:71:3d:e0:17:85:56:7f:21:
                    e5:89:10:1d:d8:f9:9c:55:35:76:14:aa:34:c5:19:
                    d5:7d:38:af:6d:34:b4:ad:68:a2:2e:e3:81:53:cd:
                    18:f1:0f:31:a2:39:1d:36:07:e8:d0:5e:21:6d:55:
                    f3:f6:a4:74:c1:f7:9a:be:c0:5c:39:6e:c0:74:a8:
                    8a:4e:5c:1c:3b:4f:fd:da:37:ee:4e:3b:b5:4b:10:
                    ed:f0:7d:7b:dd:a9:2b:b9:f1:35:87:de:0b:02:1b:
                    de:ff:ff:93:e1:12:91:4c:e7:66:e8:23:54:5e:de:
                    80:b0:8c:fd:89:94:5e:2e:c9:f2:cf:f4:05:57:f0:
                    19:f6:81:de:fe:41:22:52:d1:b7:b6:03:5f:87:c8:
                    4a:dc:9c:2b:b6:54:7c:a5:b4:92:0c:bb:9c:e6:1e:
                    c7:e4:69:b2:da:77:a5:ee:bf:ae:4b:e7:e4:4d:a1:
                    ca:f0:f3:c8:e6:a4:a5:97:63:b4:ed:4b:b8:a1:7a:
                    c1:1d:e5:48:9a:84:00:02:0e:f9:a5:77:ef:e9:18:
                    ec:0a:24:8d:c4:e8:56:70:8e:d2:73:09:e2:79:08:
                    ac:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:78:70:7A:5A:38:B5:46:40:80:AB:C3:06:0E:5F:24:6A:95:1F:63
            X509v3 Authority Key Identifier:
                keyid:00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138322e302f32342d3234203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:a8:20:18:18:cb:2f:57:49:91:be:c5:03:47:62:eb:95:3f:
         74:06:9d:bc:74:ee:7a:80:ad:97:53:ad:3d:66:8c:bf:dc:c3:
         af:81:21:b1:3a:c5:e8:75:ef:51:d4:fc:1a:0a:0d:68:9b:f7:
         05:b9:05:64:8d:e9:bd:b2:73:58:ad:bb:7e:00:d8:77:d8:74:
         d0:0f:69:e5:db:49:82:1f:72:cf:03:ea:e7:e1:3f:a6:86:7e:
         83:3e:a2:38:24:ff:5b:b3:ab:5f:48:7f:88:2b:ee:b7:59:96:
         87:06:76:50:f3:84:bc:06:28:8a:0e:21:eb:81:e3:6c:51:04:
         bd:82:15:02:1d:3e:ef:9a:e4:d3:ac:c6:63:4f:6e:a1:0d:d8:
         9e:f7:c7:e5:f7:99:c2:e0:85:3a:bd:f6:13:f0:c8:09:30:16:
         dd:2f:a3:84:cf:b0:07:3f:a3:87:23:6f:00:08:24:e7:8d:35:
         1d:79:5b:dc:34:9f:31:b6:c9:31:19:24:a2:69:aa:2f:3d:d1:
         44:72:12:22:f6:26:db:ec:0a:3a:7a:69:ef:79:68:3a:e3:d9:
         46:89:ef:d0:c9:69:c5:fe:0d:a9:0a:74:54:23:01:52:b3:9c:
         e8:81:6c:70:73:c8:1f:e5:06:6b:6b:14:4d:e1:b1:ef:ab:9a:
         b5:1b:55:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:25 2025 by rpki-client