Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3139312e3234302e3136302e302f32322d3332203d3e203532373030.roa
File:                     3139312e3234302e3136302e302f32322d3332203d3e203532373030.roa (raw, json)
Hash identifier:          fTJXfOAjjMNb0OaRZiAQCpvGKD9cGj5D9lSzTs2+N6I=
Subject key identifier:   19:8F:84:25:34:F4:EF:9F:44:20:F3:5E:FC:BD:3F:11:09:B2:6E:A4
Certificate issuer:       /CN=0E4B51597ECDFBEB0B0915C36C3BB09A1B20A7C2
Certificate serial:       4B6ED21FEFF4CCF5A3E9AB3BFD4267F2A7262658
Authority key identifier: 0E:4B:51:59:7E:CD:FB:EB:0B:09:15:C3:6C:3B:B0:9A:1B:20:A7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E4B51597ECDFBEB0B0915C36C3BB09A1B20A7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3139312e3234302e3136302e302f32322d3332203d3e203532373030.roa
Signing time:             Mon 03 Jun 2024 22:15:32 +0000
ROA not before:           Mon 03 Jun 2024 22:10:32 +0000
ROA not after:            Mon 02 Jun 2025 22:15:32 +0000
asID:                     52700
IP address blocks:        191.240.160.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6e:d2:1f:ef:f4:cc:f5:a3:e9:ab:3b:fd:42:67:f2:a7:26:26:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4B51597ECDFBEB0B0915C36C3BB09A1B20A7C2
        Validity
            Not Before: Jun  3 22:10:32 2024 GMT
            Not After : Jun  2 22:15:32 2025 GMT
        Subject: CN=198F842534F4EF9F4420F35EFCBD3F1109B26EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ed:e0:46:5f:3d:d7:76:3d:cd:36:bb:33:3e:
                    75:92:16:19:a4:66:3a:0a:82:88:e5:21:ca:e1:cf:
                    a5:a6:50:c8:d0:33:3a:20:87:e6:62:db:03:6b:44:
                    8e:6c:6b:33:c4:fc:6c:ee:84:0d:49:ba:35:ab:3b:
                    79:11:de:60:7f:55:b1:15:f7:11:bc:49:7b:bd:57:
                    5e:d7:09:85:28:22:ad:f1:82:6d:96:9f:fc:99:0c:
                    aa:17:77:f8:41:af:4d:b3:67:cd:d6:7d:10:24:f5:
                    92:e9:58:84:fd:e7:69:9b:12:8b:76:39:33:b4:53:
                    7d:e1:c8:fe:39:72:2b:ee:b6:04:a6:ed:79:bd:7d:
                    d2:3c:9f:3a:8c:ac:5c:21:65:92:bf:ce:09:f1:01:
                    86:97:7f:1e:e1:13:0e:41:85:f6:65:c6:63:8b:29:
                    b0:0e:41:29:4f:c2:21:1d:15:4e:95:54:0e:8c:2c:
                    15:87:69:b3:91:27:e2:cc:c9:79:c0:f9:18:72:17:
                    6d:2d:16:33:c0:60:f4:09:c6:05:42:9d:00:6e:ea:
                    08:c2:33:41:6b:6d:c1:90:53:15:48:48:b8:1b:e5:
                    40:78:2f:cf:f8:22:9d:2f:a5:8d:41:58:e9:1a:d3:
                    6c:0b:e7:59:3f:ce:cd:d1:88:bc:d9:4a:06:f8:0c:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8F:84:25:34:F4:EF:9F:44:20:F3:5E:FC:BD:3F:11:09:B2:6E:A4
            X509v3 Authority Key Identifier:
                keyid:0E:4B:51:59:7E:CD:FB:EB:0B:09:15:C3:6C:3B:B0:9A:1B:20:A7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/0E4B51597ECDFBEB0B0915C36C3BB09A1B20A7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E4B51597ECDFBEB0B0915C36C3BB09A1B20A7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3139312e3234302e3136302e302f32322d3332203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:d6:84:f2:9a:0e:1d:0b:2c:f4:a3:d4:b8:54:9e:13:54:49:
         23:b1:cd:81:f4:ca:26:af:c2:34:66:a1:20:a9:b7:0b:a7:b1:
         ff:af:a9:81:de:f9:45:11:ad:4d:52:c2:b1:d4:7f:9c:30:ba:
         cd:0f:49:02:a8:9d:97:f2:65:26:2c:dc:fe:82:a3:f8:ed:b5:
         33:9d:7e:19:d1:0c:e9:eb:2b:89:06:4a:03:b3:de:cf:96:0b:
         ce:88:e0:1a:c4:eb:ba:3e:16:ba:b0:47:2f:d9:65:d8:86:e8:
         6c:75:9e:a7:16:08:1b:7d:bc:04:58:c9:1a:54:27:88:b0:c6:
         9d:b3:c3:d3:48:37:e2:a6:2a:44:19:c0:c4:16:63:96:bb:d7:
         db:39:1d:91:7a:f5:54:3d:94:87:59:60:ca:af:ac:ab:41:46:
         62:66:ff:97:04:d8:3d:12:07:11:1c:c3:10:d3:b1:34:44:c9:
         73:0a:2a:e7:5d:0a:ce:be:cd:bd:68:89:61:04:f4:b3:65:cd:
         89:d4:62:b0:2b:32:28:4c:5b:db:13:d0:c1:18:8c:f8:0a:d8:
         88:02:30:83:d6:74:e2:38:83:e2:60:0c:e8:89:38:2b:04:6f:
         e4:03:a8:df:69:3c:69:36:9f:53:8f:b5:23:e2:8d:b0:d1:57:
         7b:be:e1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:30 2025 by rpki-client