Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa
File:                     3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa (raw, json)
Hash identifier:          TbNPD/c8PvnYLm1yx6uJcS+GxeAeBDi17b+PHTWvOeM=
Subject key identifier:   3C:1E:71:96:72:1E:5C:73:97:A9:0E:4D:8C:8B:43:B1:53:BB:A6:DF
Certificate issuer:       /CN=EA46E031507BB728382EEA5D7D4637258A8ECC2A
Certificate serial:       3D1C97C22A2E4E5F928D536AF36C4E5F6E0AADA9
Authority key identifier: EA:46:E0:31:50:7B:B7:28:38:2E:EA:5D:7D:46:37:25:8A:8E:CC:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA46E031507BB728382EEA5D7D4637258A8ECC2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa
Signing time:             Mon 23 Dec 2024 03:03:43 +0000
ROA not before:           Mon 23 Dec 2024 02:58:43 +0000
ROA not after:            Mon 22 Dec 2025 03:03:43 +0000
asID:                     270915
IP address blocks:        201.140.216.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1c:97:c2:2a:2e:4e:5f:92:8d:53:6a:f3:6c:4e:5f:6e:0a:ad:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA46E031507BB728382EEA5D7D4637258A8ECC2A
        Validity
            Not Before: Dec 23 02:58:43 2024 GMT
            Not After : Dec 22 03:03:43 2025 GMT
        Subject: CN=3C1E7196721E5C7397A90E4D8C8B43B153BBA6DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:da:0a:d2:68:6a:b3:9f:d7:0a:c6:17:7c:
                    0d:b9:13:b5:31:18:8d:48:a2:c3:92:18:1d:86:60:
                    91:56:12:f9:7b:26:4c:2f:4d:29:16:79:ff:4a:0c:
                    23:4e:8a:12:d6:74:a9:9f:f9:c1:5c:22:9c:e9:18:
                    2a:76:06:03:0d:c1:f1:85:93:1d:27:3e:e3:5b:57:
                    d0:b0:23:f8:ff:e2:0a:0e:81:a5:90:f2:fc:9a:26:
                    cb:56:03:4a:ac:15:aa:c1:f6:ad:70:9c:c3:01:c1:
                    95:98:4b:72:e3:fe:72:40:10:47:ee:de:e9:bb:0c:
                    62:37:c5:33:60:18:93:0c:e5:8e:3b:35:a1:cc:76:
                    8b:0d:b9:93:5e:4e:7c:87:10:12:38:e5:a7:ee:0b:
                    d4:b2:f9:4e:8a:02:b9:d0:0e:4f:26:0c:85:c6:b1:
                    ed:7b:e5:3d:50:ad:37:82:d1:ba:8a:6d:72:88:e3:
                    2f:13:37:75:18:1b:9f:b9:03:d3:f9:c4:49:26:a6:
                    b7:ec:06:e3:b2:56:82:07:ba:ff:c5:ea:7a:44:66:
                    69:ef:0c:41:68:32:fd:bb:a0:b2:88:a4:97:35:5d:
                    9b:ac:91:e8:f9:36:55:df:a2:fd:64:70:ba:41:da:
                    6d:6a:53:1f:6b:82:54:e2:d9:2f:7d:e7:3c:3a:f7:
                    50:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1E:71:96:72:1E:5C:73:97:A9:0E:4D:8C:8B:43:B1:53:BB:A6:DF
            X509v3 Authority Key Identifier:
                keyid:EA:46:E0:31:50:7B:B7:28:38:2E:EA:5D:7D:46:37:25:8A:8E:CC:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/EA46E031507BB728382EEA5D7D4637258A8ECC2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA46E031507BB728382EEA5D7D4637258A8ECC2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:51:7e:6b:2b:66:21:ab:0e:c3:80:5f:48:4e:80:33:39:82:
         6f:25:ab:7b:cf:79:e0:bf:cc:f9:ed:b8:bf:14:c2:8d:aa:a3:
         9c:a0:8a:63:e1:d2:e3:17:36:40:fe:c8:a7:f6:ab:02:ea:ba:
         42:20:9f:ae:2c:d8:7a:f4:b6:e3:57:e6:bc:6e:c2:d3:3e:c3:
         39:a8:81:84:74:be:99:01:a9:10:24:ad:fc:c7:49:7f:bf:0a:
         9b:3e:97:c1:66:b0:6b:95:a6:b1:e7:11:0c:7c:4b:6c:23:6d:
         cb:32:ee:9a:ce:ca:2e:0f:2f:2c:be:a7:ce:13:51:c7:35:95:
         4f:56:24:33:69:26:22:f0:4d:44:78:ec:85:1c:71:bd:7f:c4:
         0e:9f:e8:04:09:15:24:34:9c:a9:5f:d2:00:9a:bc:e6:a0:fb:
         8d:ca:da:83:dd:bc:88:05:20:b9:09:b9:a4:a8:ed:39:30:27:
         9b:72:eb:1a:a8:0f:db:d0:65:95:a5:9b:7f:7f:60:61:9b:05:
         e9:0b:6b:36:f1:3a:d3:e0:bb:fe:6b:ea:d1:85:39:5b:94:58:
         21:a3:d5:4e:e9:08:7a:f7:ac:86:74:3f:3e:87:d9:99:63:88:
         e1:1e:f6:d1:ab:cd:a0:82:5e:77:68:d6:dc:43:6c:42:99:1a:
         78:b4:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:29 2025 by rpki-client