Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3134332e3230322e3232392e302f32342d3234203d3e20323634353839.roa
File:                     3134332e3230322e3232392e302f32342d3234203d3e20323634353839.roa (raw, json)
Hash identifier:          gtF4Sm2l2DUDaxWs85Uoqwdi9IHCl0qP5uJQWE/AbcM=
Subject key identifier:   1C:F6:3A:6A:DC:E6:2A:66:91:9D:C6:36:77:0D:45:E2:97:8E:EA:52
Certificate issuer:       /CN=9AB232D2E2328522F328939E61A9457DA0361AF1
Certificate serial:       183850090A01F5A82DADFC44A9593AF0A0D78DC7
Authority key identifier: 9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3134332e3230322e3232392e302f32342d3234203d3e20323634353839.roa
Signing time:             Fri 23 Jun 2023 19:06:42 +0000
ROA not before:           Fri 23 Jun 2023 19:01:42 +0000
ROA not after:            Fri 21 Jun 2024 19:06:42 +0000
asID:                     264589
IP address blocks:        143.202.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:38:50:09:0a:01:f5:a8:2d:ad:fc:44:a9:59:3a:f0:a0:d7:8d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AB232D2E2328522F328939E61A9457DA0361AF1
        Validity
            Not Before: Jun 23 19:01:42 2023 GMT
            Not After : Jun 21 19:06:42 2024 GMT
        Subject: CN=1CF63A6ADCE62A66919DC636770D45E2978EEA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:38:68:47:1e:9d:9f:12:0d:49:ed:85:98:12:
                    bc:98:9c:03:6f:53:21:2e:73:55:38:a2:74:70:c7:
                    0f:ff:7c:34:c4:53:4b:cf:55:7e:c2:c9:fd:d5:2c:
                    35:cf:3b:5b:d7:42:65:24:8a:43:c6:d6:99:b8:74:
                    db:c2:9a:a2:00:ae:08:d1:e7:6d:d3:eb:fc:38:55:
                    b8:44:54:f3:90:17:22:d6:cf:92:0d:25:7b:46:1b:
                    db:39:22:98:5a:f7:28:90:f9:0a:d3:ac:40:bb:8f:
                    6b:0a:b1:13:a7:ae:59:2a:75:47:7b:8e:55:4d:79:
                    39:01:b1:4e:e9:c6:3b:dd:f3:92:30:03:86:47:ed:
                    c5:07:5f:b9:00:e9:61:53:21:e5:7e:0a:4e:cc:45:
                    4b:ca:06:40:a1:39:4b:f5:a5:10:e1:25:21:b8:79:
                    3b:b0:44:08:b1:32:a2:77:81:8e:d4:74:f8:a1:8a:
                    a5:ab:16:af:d1:42:04:c5:ea:81:02:66:cf:86:03:
                    fe:bd:5d:65:f7:e8:bd:87:22:27:f7:b6:5c:83:4f:
                    eb:24:a6:92:8b:3a:07:7f:16:a8:3e:01:4c:d3:d9:
                    d7:f5:85:2b:cf:5c:31:80:07:a7:d6:03:26:f8:64:
                    eb:9b:41:90:1d:2a:f8:1c:bc:90:3e:92:77:f1:c4:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F6:3A:6A:DC:E6:2A:66:91:9D:C6:36:77:0D:45:E2:97:8E:EA:52
            X509v3 Authority Key Identifier:
                keyid:9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/9AB232D2E2328522F328939E61A9457DA0361AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3134332e3230322e3232392e302f32342d3234203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:12:56:0b:6a:5f:64:99:55:a4:27:db:50:c2:a9:ab:36:16:
         f9:05:30:ff:41:41:2d:9a:bf:ac:4b:09:bf:b3:4f:af:cc:38:
         fd:56:61:06:49:de:1c:6d:c4:f2:f0:cd:f4:0a:b7:36:db:58:
         ac:01:8c:cf:74:68:a4:c2:4b:e1:ce:60:a6:6e:1a:f6:70:39:
         78:03:26:45:f1:9c:e5:de:22:43:f6:24:bb:5f:4c:ce:09:c7:
         af:69:c5:20:1f:01:49:f4:9e:51:01:ab:b0:d9:9b:f6:67:92:
         15:9b:f8:b8:4c:56:1d:e0:50:39:52:8f:07:ad:75:99:ce:67:
         87:0a:7d:2d:19:c0:e6:db:e2:7a:a4:4d:a2:cc:72:74:bf:a9:
         ec:6a:f7:d7:ac:27:03:af:f6:75:e1:9a:9f:ed:af:35:76:8a:
         fc:e9:cc:6a:20:83:16:ec:64:77:75:8c:f6:94:f7:70:12:25:
         69:2e:53:a8:67:46:55:80:3b:f3:cd:ed:c7:b2:59:4d:ee:6b:
         06:00:72:99:bc:96:3d:36:a4:f1:11:ba:d8:bc:5c:42:f9:df:
         19:2e:4a:07:5e:e7:82:77:18:e8:96:5a:99:c0:06:75:8a:c7:
         ee:6d:02:ae:63:15:4c:b1:7f:6a:88:93:35:18:a5:9c:0a:a3:
         76:08:40:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:52:57 2025 by rpki-client