Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32362e302f32332d3233203d3e20323633353234.roa
File:                     3139312e3235332e32362e302f32332d3233203d3e20323633353234.roa (raw, json)
Hash identifier:          aRFrl3tEnrg56oBCnE7Q6rHG3xyht3oF6CCY75cWbGw=
Subject key identifier:   EC:FA:19:89:70:3F:8E:D8:1A:6F:70:9D:61:65:EA:69:B0:F1:AF:98
Certificate issuer:       /CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
Certificate serial:       7A3D7DB36308F8513CACDE6D787DFAEB9084849E
Authority key identifier: 5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32362e302f32332d3233203d3e20323633353234.roa
Signing time:             Mon 12 Feb 2024 17:14:31 +0000
ROA not before:           Mon 12 Feb 2024 17:09:31 +0000
ROA not after:            Mon 10 Feb 2025 17:14:31 +0000
asID:                     263524
IP address blocks:        191.253.26.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3d:7d:b3:63:08:f8:51:3c:ac:de:6d:78:7d:fa:eb:90:84:84:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Validity
            Not Before: Feb 12 17:09:31 2024 GMT
            Not After : Feb 10 17:14:31 2025 GMT
        Subject: CN=ECFA1989703F8ED81A6F709D6165EA69B0F1AF98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:21:c7:de:24:d0:e2:7f:ce:55:37:f0:f9:
                    c2:6c:86:52:7a:7f:e4:e6:5f:87:6c:a8:56:dd:56:
                    b5:45:ee:28:09:66:5d:ff:da:15:93:9e:83:9b:7e:
                    8f:76:03:0b:b2:04:0b:77:2b:9b:10:c2:08:0e:2a:
                    7f:e4:14:93:9d:e4:4c:92:c0:2d:d9:a6:67:64:be:
                    1e:ab:9f:bb:cf:82:16:e0:45:ba:52:51:79:44:8b:
                    80:29:ac:41:9f:de:fe:a0:44:ba:6f:4d:e5:55:d5:
                    9f:b6:46:d7:fc:3a:5c:77:c1:87:fa:f0:9c:eb:84:
                    ef:49:8b:c5:05:5f:0c:9d:2c:06:3f:b6:5e:ef:89:
                    ee:0a:7d:29:36:f0:49:42:6b:56:c3:0a:d0:46:d9:
                    c1:5b:e2:e1:c8:a0:f7:38:4b:4c:14:0a:3c:4d:cd:
                    45:f2:07:d6:82:97:bb:de:30:5f:85:75:37:57:0e:
                    e3:fd:72:12:25:2e:a6:a4:ce:db:83:25:6d:64:f1:
                    dd:71:3d:d8:db:8b:3a:92:e2:0f:16:13:5e:ae:2a:
                    5a:e6:ab:b2:ec:0d:06:73:09:26:7a:25:df:9d:10:
                    e9:8c:77:45:cb:4e:4a:d8:5b:63:c6:0d:4d:8a:9e:
                    d0:56:2f:db:59:5e:1b:a1:2a:8f:c7:0b:88:c9:ae:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FA:19:89:70:3F:8E:D8:1A:6F:70:9D:61:65:EA:69:B0:F1:AF:98
            X509v3 Authority Key Identifier:
                keyid:5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/3139312e3235332e32362e302f32332d3233203d3e20323633353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:b0:b8:2b:9c:4b:2a:05:99:59:ce:de:eb:26:b7:7f:a0:b0:
         8f:0d:60:3d:1b:f3:bb:51:db:61:d0:9d:40:6b:5e:57:6b:c7:
         e3:83:7d:83:79:e0:23:f7:da:37:b8:b6:c7:ba:25:de:93:73:
         02:16:b1:c9:53:dc:ea:c7:9b:5d:ff:f8:06:97:cc:f0:91:f4:
         58:df:14:cc:cf:8f:33:d8:75:ef:a8:7f:77:c0:f3:d1:5e:fb:
         31:02:9c:ea:77:b0:41:80:f2:86:9a:69:cb:a8:48:72:8c:a5:
         03:6a:52:65:72:a8:c8:8a:9e:c4:0f:76:fb:4f:10:95:8b:fe:
         42:fe:95:49:7b:33:c8:e7:c1:80:7f:d0:a1:8a:2a:fb:f4:df:
         a8:e4:4b:23:d2:b3:4f:7a:ea:76:fa:7b:fc:5f:eb:21:48:db:
         93:ea:a8:5d:39:66:00:43:24:cd:6a:86:0d:c6:6f:68:18:40:
         2d:24:d7:16:f1:76:77:00:ef:54:cd:9b:fa:8d:b3:e8:bb:60:
         e3:e2:93:69:ae:a0:42:3e:56:5c:b1:44:ad:30:6e:51:cc:02:
         47:b1:b4:ad:00:32:c8:e0:b7:58:6d:d8:ce:00:74:ae:e8:2c:
         b0:a6:3d:6b:28:db:08:14:5c:d5:53:3d:eb:06:36:1d:36:a8:
         6f:b2:de:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:28 2025 by rpki-client