Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233362e302f32332d3233203d3e20323633353433.roa
File:                     3139312e352e3233362e302f32332d3233203d3e20323633353433.roa (raw, json)
Hash identifier:          nph6vjSVXdECp+AafTS8px43rxBY5TGvTw/cMSEj97M=
Subject key identifier:   05:3F:48:59:31:B9:4D:CB:2A:6D:10:A3:C2:58:5F:15:7B:B9:AF:FE
Certificate issuer:       /CN=FC264A56450200CCB89788286F7FBCE41CDAA658
Certificate serial:       2C6DDB7EF4B35D2D755EFE5FC86D9A513FBF32AD
Authority key identifier: FC:26:4A:56:45:02:00:CC:B8:97:88:28:6F:7F:BC:E4:1C:DA:A6:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC264A56450200CCB89788286F7FBCE41CDAA658.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233362e302f32332d3233203d3e20323633353433.roa
Signing time:             Mon 10 Jul 2023 12:40:42 +0000
ROA not before:           Mon 10 Jul 2023 12:35:42 +0000
ROA not after:            Mon 08 Jul 2024 12:40:42 +0000
asID:                     263543
IP address blocks:        191.5.236.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6d:db:7e:f4:b3:5d:2d:75:5e:fe:5f:c8:6d:9a:51:3f:bf:32:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC264A56450200CCB89788286F7FBCE41CDAA658
        Validity
            Not Before: Jul 10 12:35:42 2023 GMT
            Not After : Jul  8 12:40:42 2024 GMT
        Subject: CN=053F485931B94DCB2A6D10A3C2585F157BB9AFFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:ff:98:b9:c0:5c:4a:48:74:1f:9f:ff:e7:
                    d4:9c:42:e6:13:24:66:c2:36:4e:24:c3:04:d0:4c:
                    f1:89:90:d0:c1:57:40:f0:dc:79:a4:69:1e:e0:1a:
                    9d:14:ac:50:fb:61:e6:16:f5:fc:6f:31:02:b2:22:
                    8e:15:d2:7f:97:44:fe:23:45:6e:b1:4d:fd:67:3e:
                    47:d3:d1:22:b2:57:b3:91:81:59:b1:40:f9:ea:48:
                    2d:96:27:85:c1:ad:b9:bb:e0:b0:6d:83:81:78:ae:
                    af:34:71:4d:6a:41:89:d8:2c:bc:b1:8d:ca:07:35:
                    c9:8d:a7:e3:e8:6b:7b:39:18:61:09:6a:78:c7:6f:
                    c4:83:0c:8b:c4:62:b5:72:bd:a7:fa:89:fc:12:3d:
                    6b:46:d8:e2:b1:60:b6:8e:31:a6:e8:71:28:fc:0b:
                    8d:02:a8:d6:d1:48:4d:ab:52:1f:61:78:bd:62:44:
                    62:f1:0a:b8:17:e5:04:ce:de:f9:28:86:1d:e4:6b:
                    00:b6:b4:58:a9:25:1f:4b:e6:3f:6d:49:05:c2:12:
                    ea:b3:4c:d8:db:6a:1a:02:63:7c:9a:3d:0f:57:1e:
                    79:cb:11:a9:11:67:fb:a7:7b:b9:82:c3:f9:41:cd:
                    18:f1:0c:7d:ad:13:e4:94:6b:c0:41:9f:53:42:76:
                    a8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3F:48:59:31:B9:4D:CB:2A:6D:10:A3:C2:58:5F:15:7B:B9:AF:FE
            X509v3 Authority Key Identifier:
                keyid:FC:26:4A:56:45:02:00:CC:B8:97:88:28:6F:7F:BC:E4:1C:DA:A6:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/FC264A56450200CCB89788286F7FBCE41CDAA658.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC264A56450200CCB89788286F7FBCE41CDAA658.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3139312e352e3233362e302f32332d3233203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:81:e1:a7:bc:02:62:67:c1:6f:d7:76:99:48:50:af:b5:a8:
         9c:05:2a:f4:63:c8:c6:91:14:ef:f4:56:6b:38:cc:ec:72:9c:
         73:75:78:e1:71:3c:60:71:c9:82:a5:7b:5d:b5:dc:08:d9:42:
         36:98:ce:80:70:7d:a2:c6:16:c5:b7:25:e7:33:97:14:b5:50:
         06:b4:49:0e:08:57:5d:e0:09:e4:b3:96:b6:0c:d2:48:dd:ad:
         11:ab:82:24:42:c7:2a:ba:a1:ba:8f:14:29:f8:23:c5:e9:c7:
         f6:36:63:ed:e8:27:dd:31:a3:6d:61:53:f2:11:57:41:c0:0c:
         38:6f:f5:4c:49:35:58:99:5c:a9:3b:af:1d:9f:f5:d2:9c:ea:
         14:2c:73:89:65:c8:60:67:37:1a:8d:dc:21:7f:a3:1e:70:9c:
         cb:46:3e:3e:42:e3:48:cf:04:b5:03:e4:08:e9:42:71:ac:5e:
         82:21:7b:d2:55:2e:ce:32:e5:bc:f4:8f:50:65:5a:ca:a3:6b:
         0f:cb:6d:53:31:c7:3a:c8:22:9d:c6:47:db:e0:49:f5:cb:1b:
         39:8f:88:f3:45:6e:bf:dc:0a:42:a0:21:06:e6:b4:77:cd:dd:
         93:28:7d:b8:f6:85:c9:a0:92:fd:23:ac:95:9b:5d:88:76:11:
         92:a4:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:01 2025 by rpki-client