Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/3139312e362e33322e302f32302d3234203d3e20313938393439.roa
File:                     3139312e362e33322e302f32302d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          +haZXV9gu6P4JwxXrSswv2DXCntNK/lnzVnzViopEGE=
Subject key identifier:   12:47:4D:B9:87:1A:38:64:78:DD:EA:7B:49:3F:70:C0:58:5A:82:60
Certificate issuer:       /CN=DC4760B481E70FA8E13E470458ED532F02330CBE
Certificate serial:       2E50811C9DA5DBDA5E3087FBA398F6F3B3C565F7
Authority key identifier: DC:47:60:B4:81:E7:0F:A8:E1:3E:47:04:58:ED:53:2F:02:33:0C:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/3139312e362e33322e302f32302d3234203d3e20313938393439.roa
Signing time:             Thu 20 Feb 2025 12:08:03 +0000
ROA not before:           Thu 20 Feb 2025 12:03:03 +0000
ROA not after:            Thu 19 Feb 2026 12:08:03 +0000
asID:                     198949
IP address blocks:        191.6.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:50:81:1c:9d:a5:db:da:5e:30:87:fb:a3:98:f6:f3:b3:c5:65:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC4760B481E70FA8E13E470458ED532F02330CBE
        Validity
            Not Before: Feb 20 12:03:03 2025 GMT
            Not After : Feb 19 12:08:03 2026 GMT
        Subject: CN=12474DB9871A386478DDEA7B493F70C0585A8260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ef:49:98:46:66:a3:32:7a:7c:fe:02:55:0f:
                    7c:79:00:82:3b:eb:c6:d2:5d:92:b1:d2:1f:fb:f2:
                    f2:a5:8e:e9:20:aa:a3:8d:4a:57:c6:3f:0c:01:d1:
                    90:d7:8d:f8:79:1c:e4:f0:c3:2b:bc:d2:a3:bc:7d:
                    20:43:c1:d4:91:6d:7c:83:c0:69:81:5f:12:c7:c9:
                    7b:a4:36:1f:8d:ca:f8:db:f5:4d:0f:e9:9f:a4:59:
                    aa:ab:bc:7f:f3:df:ee:d2:c7:f1:23:af:e9:87:62:
                    c4:b4:91:fc:27:23:10:a0:68:ad:75:b2:a0:a0:9f:
                    75:f5:ab:aa:96:af:39:72:44:6c:b8:cf:f8:07:8e:
                    cd:9e:b0:f6:38:41:34:c2:31:d0:cb:ca:20:14:82:
                    a4:1a:dc:13:a4:c9:c0:35:b6:06:5d:87:29:47:e7:
                    60:22:dc:46:d8:40:53:b9:29:d5:7e:be:92:d2:52:
                    a4:f5:00:d5:6d:15:bb:6a:d1:90:d9:92:76:eb:e5:
                    09:8a:9b:e7:58:bd:8b:bb:1b:50:fa:7c:36:c7:16:
                    a8:54:54:7a:24:0f:e5:4e:f7:f5:97:57:78:fd:7a:
                    34:09:cb:25:08:ab:ca:9a:e0:2a:2e:df:55:bd:1e:
                    b9:d6:5f:7e:f2:ec:52:c7:c0:e6:1b:49:42:c4:82:
                    4f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:47:4D:B9:87:1A:38:64:78:DD:EA:7B:49:3F:70:C0:58:5A:82:60
            X509v3 Authority Key Identifier:
                keyid:DC:47:60:B4:81:E7:0F:A8:E1:3E:47:04:58:ED:53:2F:02:33:0C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/3139312e362e33322e302f32302d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b5:8f:f2:7d:b7:76:05:a9:47:8c:53:b9:01:e9:e9:bc:22:8d:
         3e:c4:7c:75:89:9b:a5:0c:72:97:f4:1f:94:3b:2c:09:e6:4a:
         0a:96:bc:ea:5a:6a:44:41:3f:95:2a:06:aa:54:a9:57:bb:09:
         d1:81:c6:a6:fa:e8:9d:a0:49:7b:93:fe:6b:32:a9:e3:f0:2c:
         bd:42:cf:67:da:93:3d:d5:b7:c7:d6:f5:9c:69:62:92:d1:ea:
         fb:32:3b:e4:e5:e0:be:fb:ae:8c:a3:fa:50:a2:f6:95:b3:54:
         d3:f9:b8:96:47:71:85:9f:cb:e2:bf:4c:13:aa:48:d7:82:f7:
         76:25:7d:1a:98:d5:f8:c1:f2:f9:1a:0b:4f:b1:94:c3:94:ad:
         b4:87:ff:e2:99:2c:a1:bd:b5:04:96:4c:24:92:03:db:d0:21:
         57:a2:22:0a:28:7c:07:b7:23:eb:f4:8c:28:1c:77:92:de:8c:
         b4:26:56:4e:1e:2f:e9:af:43:c8:46:da:41:2d:cd:05:16:ab:
         fb:5e:4a:ad:4f:25:59:42:74:a3:b7:d9:d7:f8:f7:7e:a2:41:
         79:3a:11:aa:47:bf:3f:fb:6f:c5:e0:bb:7f:ee:fb:21:3f:d5:
         7a:61:67:18:d2:d1:55:59:63:e6:8d:26:51:ca:3f:36:0f:ef:
         5f:73:54:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:15:40 2025 by rpki-client