Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133392e302f32342d3234203d3e203532383732.roa
File:                     3136382e3139372e3133392e302f32342d3234203d3e203532383732.roa (raw, json)
Hash identifier:          GGYUhlP42Mz+dG39Paq0lwnQVHRAqOBs70j3E/DzaGo=
Subject key identifier:   30:9C:1B:B9:ED:5A:2D:68:78:07:00:84:82:A7:D0:17:3D:FB:FA:A6
Certificate issuer:       /CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
Certificate serial:       0CAE9F34036E197BB9F8D543B596811AA9D50ECC
Authority key identifier: BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133392e302f32342d3234203d3e203532383732.roa
Signing time:             Mon 13 Nov 2023 18:49:44 +0000
ROA not before:           Mon 13 Nov 2023 18:44:44 +0000
ROA not after:            Mon 11 Nov 2024 18:49:44 +0000
asID:                     52872
IP address blocks:        168.197.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ae:9f:34:03:6e:19:7b:b9:f8:d5:43:b5:96:81:1a:a9:d5:0e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFD60F81B153DBF24A19964DD2996A1F74DE57F7
        Validity
            Not Before: Nov 13 18:44:44 2023 GMT
            Not After : Nov 11 18:49:44 2024 GMT
        Subject: CN=309C1BB9ED5A2D687807008482A7D0173DFBFAA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4f:8a:b7:d2:cf:cf:2a:45:a5:01:4d:dd:c1:
                    b5:01:30:2e:72:0a:1a:bd:7a:c9:9a:ab:16:b4:11:
                    18:26:ef:9e:e5:79:92:83:6b:3a:e9:27:26:dd:49:
                    8e:de:8f:4d:0a:48:8a:5a:85:db:b9:c0:e5:a4:78:
                    ff:fe:29:ea:f0:99:bd:3f:a2:60:42:0d:35:14:9a:
                    c8:f4:19:6b:91:f1:ee:7b:86:59:c8:43:67:68:c2:
                    98:6c:9d:af:19:c3:4e:39:28:44:c1:04:da:d4:eb:
                    78:4c:f2:b0:dd:35:4f:0c:8c:98:65:41:94:89:a8:
                    19:e3:6d:dc:5e:cf:37:b6:4f:d7:2c:55:ff:22:6e:
                    9c:64:35:c9:3b:c6:f6:e6:14:08:2e:ea:e3:b2:40:
                    af:36:6d:fa:ae:b7:c1:43:e4:cc:2e:71:6d:49:20:
                    7b:7c:60:73:10:22:b6:d3:09:a7:62:3b:a1:77:56:
                    a5:e6:c9:69:18:5d:20:fe:ac:30:10:6f:c6:ee:86:
                    dd:bb:2f:9b:4d:01:00:47:55:e4:b9:32:05:94:af:
                    d4:cf:0f:5d:ba:40:10:52:d6:07:0a:c1:0d:55:ef:
                    b8:d2:e3:02:a6:d7:e9:17:41:c2:af:92:73:33:5b:
                    cf:a3:d9:47:5c:bb:d8:d0:00:72:ce:e3:d9:b1:30:
                    f7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9C:1B:B9:ED:5A:2D:68:78:07:00:84:82:A7:D0:17:3D:FB:FA:A6
            X509v3 Authority Key Identifier:
                keyid:BF:D6:0F:81:B1:53:DB:F2:4A:19:96:4D:D2:99:6A:1F:74:DE:57:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFD60F81B153DBF24A19964DD2996A1F74DE57F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133392e302f32342d3234203d3e203532383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:66:2b:1d:22:e1:bc:21:85:c9:65:ff:43:1c:2d:43:e0:37:
         85:5d:98:a7:6b:c4:a8:64:ab:81:af:f3:ee:0a:cc:da:95:4c:
         3e:be:7c:82:29:af:6d:a8:62:06:50:cd:44:0a:f3:1e:38:36:
         4c:0b:33:a3:04:bb:1b:45:65:47:3b:f6:64:55:dc:ca:e1:19:
         e0:d8:98:f9:a6:24:b9:7a:f1:14:15:97:c9:53:7e:73:94:31:
         84:54:99:f6:52:8f:f6:d9:0f:25:b1:2e:1f:26:c7:fb:5f:34:
         30:4b:8c:7b:dd:7b:ca:d8:38:df:1a:5f:0d:fd:1e:0f:93:84:
         20:97:c7:8e:64:63:25:d9:35:0d:a0:f2:af:a1:e0:dc:25:6e:
         82:57:27:c9:5b:dc:50:c5:b1:af:88:6a:55:fa:a8:d1:97:59:
         62:9f:89:dd:24:5d:1e:af:e6:63:78:cb:40:b5:10:d5:65:8d:
         d8:6b:8f:d4:ea:7d:43:09:6e:c2:6a:77:c2:12:18:ce:a4:38:
         24:ba:42:13:f1:56:07:58:a1:cd:68:25:49:6d:14:f1:a3:e6:
         c7:97:0b:06:93:5e:5d:93:a4:99:60:01:4f:84:76:ee:72:1a:
         98:33:b8:cc:87:f1:82:a4:ce:dd:e8:0a:94:58:30:57:a6:6c:
         1a:fc:b0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:29 2025 by rpki-client