Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/3139312e362e33322e302f32302d3332203d3e20323632323838.roa
File:                     3139312e362e33322e302f32302d3332203d3e20323632323838.roa (raw, json)
Hash identifier:          us9ZguvM4l3pmy1t19x6kKXWcy4dhDEn1zT9piJyy9M=
Subject key identifier:   4D:2D:72:C2:E2:37:62:A9:1C:90:08:0C:10:4B:79:23:9A:61:7F:AA
Certificate issuer:       /CN=DC4760B481E70FA8E13E470458ED532F02330CBE
Certificate serial:       5D100AE3300580C8FBE54C625144F76F3A62FFBD
Authority key identifier: DC:47:60:B4:81:E7:0F:A8:E1:3E:47:04:58:ED:53:2F:02:33:0C:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/3139312e362e33322e302f32302d3332203d3e20323632323838.roa
Signing time:             Fri 07 Mar 2025 05:55:57 +0000
ROA not before:           Fri 07 Mar 2025 05:50:57 +0000
ROA not after:            Fri 06 Mar 2026 05:55:57 +0000
asID:                     262288
IP address blocks:        191.6.32.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:10:0a:e3:30:05:80:c8:fb:e5:4c:62:51:44:f7:6f:3a:62:ff:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC4760B481E70FA8E13E470458ED532F02330CBE
        Validity
            Not Before: Mar  7 05:50:57 2025 GMT
            Not After : Mar  6 05:55:57 2026 GMT
        Subject: CN=4D2D72C2E23762A91C90080C104B79239A617FAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b4:48:a8:70:fc:70:dd:1c:c8:ab:22:63:1b:
                    0c:b0:cc:3c:9e:ff:cf:7b:b3:09:07:94:f3:15:76:
                    c5:d5:a4:bf:c6:e7:38:4a:16:d5:56:4d:e7:2c:15:
                    5a:d7:f4:9b:0b:40:c0:53:14:1f:f4:79:ff:48:b6:
                    ef:b6:95:6b:b6:24:b1:00:92:3b:06:9d:c7:bb:03:
                    b3:94:ae:4f:3c:73:c3:3e:c4:69:08:26:a2:6b:00:
                    b8:e8:99:9a:1c:2b:6d:d1:d4:14:67:4d:e5:65:63:
                    fa:ac:6f:ab:5f:4f:d7:d0:37:48:ec:01:4f:c3:b4:
                    3d:67:1a:be:99:6b:f9:65:aa:99:71:40:35:89:8e:
                    b6:f3:26:de:b5:42:36:72:42:51:f5:07:06:e7:80:
                    66:03:8d:9d:49:48:c9:fa:0e:c7:6d:60:0b:64:0b:
                    02:70:7c:86:9d:ec:d6:42:b1:b0:cb:ce:07:0d:2b:
                    58:5f:8d:3f:bc:01:0c:ef:e2:9a:b7:9b:c3:51:c6:
                    60:2a:8e:e3:f2:e2:ba:28:3a:15:f0:b3:12:50:6f:
                    a1:02:1f:a2:75:98:b3:ce:d7:0f:4c:ad:9d:bf:ad:
                    36:a1:e6:9c:73:64:17:58:73:fb:2f:eb:62:48:ac:
                    d6:62:61:da:15:ba:82:25:d9:7f:4b:fe:b5:ea:c5:
                    5e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2D:72:C2:E2:37:62:A9:1C:90:08:0C:10:4B:79:23:9A:61:7F:AA
            X509v3 Authority Key Identifier:
                keyid:DC:47:60:B4:81:E7:0F:A8:E1:3E:47:04:58:ED:53:2F:02:33:0C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/DC4760B481E70FA8E13E470458ED532F02330CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4760B481E70FA8E13E470458ED532F02330CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/1/3139312e362e33322e302f32302d3332203d3e20323632323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:dd:00:47:c0:85:83:b9:3e:4b:39:1e:d6:15:e0:f9:78:fe:
         00:83:63:87:db:52:e9:2a:03:9f:48:7f:e3:db:4e:08:da:1c:
         d1:d3:10:f6:ec:06:53:45:6f:47:e1:74:0d:4a:b1:aa:fd:2b:
         03:cf:ff:ad:41:79:84:50:fe:cf:2e:5c:74:2d:99:f7:e5:b7:
         29:44:74:ac:b2:31:f1:97:da:ed:c8:e6:ff:d8:8f:52:17:a2:
         42:0e:bd:97:87:40:72:b2:c1:cd:76:3b:72:db:54:ef:89:7c:
         8d:b7:d5:9d:9b:de:a9:7a:6d:fa:1c:2e:1a:54:ab:89:91:0d:
         3e:4a:8a:72:51:d6:d9:db:74:54:b9:95:d7:57:fb:7d:06:c0:
         30:fe:35:cf:90:b4:b2:8b:28:29:de:25:fb:42:16:a5:5d:3a:
         0f:90:a1:35:e6:af:86:af:18:7c:78:99:71:9c:47:ea:20:c0:
         ff:b1:35:d8:d8:0f:95:35:8a:91:0f:c6:c4:6c:80:4a:67:90:
         dc:11:45:c1:48:d1:c9:13:72:8f:43:bd:52:06:4c:d1:ab:6d:
         f8:62:bf:9b:65:77:e4:d0:77:f7:eb:b2:32:fc:37:b7:02:3d:
         72:90:0d:72:76:82:36:f3:26:9a:6c:95:04:cf:f7:e6:a6:20:
         8c:d3:a3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:00:35 2025 by rpki-client