Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133372e302f32342d3234203d3e20323730353730.roa
File:                     3230312e34392e3133372e302f32342d3234203d3e20323730353730.roa (raw, json)
Hash identifier:          ZBHbv3DfbhCzyPOw46Q+XEVh0sm2qmORXjtSd0QptPM=
Subject key identifier:   DB:FA:62:10:75:9C:2F:43:F8:1C:5D:C6:5A:3E:98:42:A4:F9:07:74
Certificate issuer:       /CN=A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC
Certificate serial:       197B7AC450C637ABE2605234A959F51277EC77C9
Authority key identifier: A3:C9:C0:71:6D:9C:7E:79:1D:CE:72:34:CA:4C:2D:FD:11:B8:76:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133372e302f32342d3234203d3e20323730353730.roa
Signing time:             Tue 23 May 2023 17:19:44 +0000
ROA not before:           Tue 23 May 2023 17:14:44 +0000
ROA not after:            Tue 21 May 2024 17:19:44 +0000
asID:                     270570
IP address blocks:        201.49.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7b:7a:c4:50:c6:37:ab:e2:60:52:34:a9:59:f5:12:77:ec:77:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC
        Validity
            Not Before: May 23 17:14:44 2023 GMT
            Not After : May 21 17:19:44 2024 GMT
        Subject: CN=DBFA6210759C2F43F81C5DC65A3E9842A4F90774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:91:8e:59:51:bf:fd:63:bc:0c:b2:49:53:52:
                    f1:f3:78:78:de:90:c6:57:9b:88:e1:aa:f4:c2:95:
                    a8:a6:2c:8f:94:14:35:5c:ce:b4:22:d6:d9:0b:1f:
                    2c:0f:36:5e:2e:0c:f0:1e:23:0f:90:d9:67:70:72:
                    da:41:d6:44:61:43:da:a8:da:a0:6a:6b:65:f8:f7:
                    c6:df:22:b4:1d:70:51:1b:4b:4f:8b:23:c1:de:96:
                    11:e1:54:e7:c3:28:59:3c:4e:13:1d:a8:0d:0f:0c:
                    9b:e5:b3:65:38:1d:6f:48:c9:19:49:47:f0:88:a7:
                    f3:3f:72:d6:72:fe:56:42:cd:9e:e7:74:92:ce:fb:
                    a2:15:c2:ff:f5:40:01:71:4d:e4:02:6d:8c:e4:3d:
                    e2:98:cb:65:a1:55:40:45:0d:95:32:6d:26:ed:00:
                    3e:6d:12:8a:f4:f6:df:c3:bf:db:9f:c5:70:57:c8:
                    c2:7f:b2:c3:7d:b1:5d:78:92:ea:94:46:2a:96:e8:
                    d4:ac:ef:a9:3b:82:fb:90:68:89:4f:60:39:a2:1a:
                    bc:40:7c:1d:3d:06:57:f7:08:5d:fb:fb:0d:e0:3b:
                    18:11:f2:78:e4:af:e9:72:66:f8:63:7e:48:f1:d5:
                    97:03:d5:66:35:c0:2e:bf:ef:61:49:d6:03:b2:50:
                    8f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FA:62:10:75:9C:2F:43:F8:1C:5D:C6:5A:3E:98:42:A4:F9:07:74
            X509v3 Authority Key Identifier:
                keyid:A3:C9:C0:71:6D:9C:7E:79:1D:CE:72:34:CA:4C:2D:FD:11:B8:76:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/3230312e34392e3133372e302f32342d3234203d3e20323730353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:f3:9d:38:09:c1:75:36:67:52:bf:ee:cc:87:67:e9:a8:60:
         a0:5a:fc:41:09:c8:08:19:92:d8:6c:7c:52:a5:c5:ef:8d:bd:
         23:17:8a:c0:7d:32:c9:dc:3d:06:0e:df:f3:e7:12:95:18:0a:
         96:28:23:d5:76:85:2a:a9:9d:18:73:02:5e:5f:53:93:ef:b7:
         4e:c8:7b:b8:18:86:46:a7:1d:e1:b8:66:e2:51:ff:2e:f9:3c:
         70:5b:66:28:a2:d5:a0:e1:40:4b:08:1e:29:10:64:ca:4b:56:
         28:d0:b7:ad:41:9a:1e:8c:73:0d:d6:0f:53:91:28:4e:9f:71:
         ba:fb:b4:4d:b9:37:07:b9:ae:e2:0a:a8:16:d4:0c:16:2a:2d:
         8a:4e:e9:c8:7c:23:a1:65:39:23:dd:12:39:31:a7:a1:24:c8:
         d8:52:5c:02:c6:e5:7a:d2:2f:91:53:66:c9:21:2e:55:32:48:
         7d:d6:f4:cd:9a:3a:35:71:fd:29:0a:f2:4c:50:e3:f9:6b:4b:
         a4:81:97:c1:c5:8f:8e:84:6f:00:39:9f:c6:d5:f0:1b:fa:fe:
         51:33:4f:17:9e:a8:53:2d:32:60:14:b0:93:42:bb:ae:20:ba:
         2c:ed:4c:53:7d:68:92:de:fa:99:82:e8:ad:36:35:9a:0d:ee:
         b6:38:14:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:29 2025 by rpki-client