Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/3139312e33372e3234302e302f32312d3234203d3e20323632343831.roa
File:                     3139312e33372e3234302e302f32312d3234203d3e20323632343831.roa (raw, json)
Hash identifier:          bGM0nrhODMm+tBg+RxD4zCDsUinJWyXaLeSV+PKU6ak=
Subject key identifier:   51:16:B6:33:6E:4A:24:E0:88:10:26:42:7B:28:E5:9A:D4:3C:C5:DB
Certificate issuer:       /CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
Certificate serial:       718760B8C9EE44ACA4C60D8A765D560D95662B41
Authority key identifier: E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/3139312e33372e3234302e302f32312d3234203d3e20323632343831.roa
Signing time:             Thu 19 Aug 2021 19:20:00 +0000
ROA not before:           Thu 19 Aug 2021 19:15:00 +0000
ROA not after:            Thu 18 Aug 2022 19:20:00 +0000
asID:                     262481
IP address blocks:        191.37.240.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:87:60:b8:c9:ee:44:ac:a4:c6:0d:8a:76:5d:56:0d:95:66:2b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
        Validity
            Not Before: Aug 19 19:15:00 2021 GMT
            Not After : Aug 18 19:20:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c2:02:94:60:2d:f4:14:55:44:13:6a:c8:d1:
                    b5:f7:5d:75:87:8c:1b:b1:3a:c7:f3:ab:e7:82:b6:
                    3b:8a:83:7f:ae:f9:03:9a:5b:df:4e:90:6c:b6:24:
                    ce:34:87:ff:a3:45:67:80:e3:be:7d:d7:5f:35:78:
                    32:dc:f9:6e:46:15:83:db:97:c5:fc:cc:1d:71:9f:
                    ff:51:46:e3:d8:f8:16:d8:76:27:95:fb:3a:29:ed:
                    5b:c2:13:d3:51:7a:5c:15:f6:13:e0:13:ad:68:0a:
                    02:59:fb:5c:05:f9:f2:4c:99:61:95:8d:2f:ed:44:
                    be:e7:fe:cf:e5:52:0a:4d:11:ba:ce:35:e6:2e:67:
                    79:66:1f:0b:bc:5f:3c:df:9b:0d:2b:db:7a:71:eb:
                    fc:f1:be:c1:fb:49:6d:14:f2:c5:be:0d:bf:ea:95:
                    37:df:93:bc:f2:56:c4:ae:12:5d:02:ec:bf:19:5a:
                    97:3c:4b:6a:d5:0c:52:d1:13:97:37:1f:15:ed:8c:
                    83:58:02:d9:c0:15:37:42:f1:70:0d:cf:cc:32:05:
                    26:a9:8d:41:48:e6:fc:ef:45:3b:d2:38:3e:fe:53:
                    be:28:31:1a:0c:8d:4e:8e:a4:31:b6:8b:a9:b5:69:
                    39:8c:fe:a5:ef:34:8c:30:53:aa:e5:0e:e1:81:ca:
                    af:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:16:B6:33:6E:4A:24:E0:88:10:26:42:7B:28:E5:9A:D4:3C:C5:DB
            X509v3 Authority Key Identifier:
                keyid:E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/3139312e33372e3234302e302f32312d3234203d3e20323632343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:6f:df:3d:b2:55:c7:ea:0a:8d:2a:93:2f:f5:d3:28:3c:5c:
         20:a1:de:60:ae:e2:c9:ef:59:f8:9d:89:87:57:24:69:8f:7f:
         dc:64:b4:25:2d:ca:01:bf:29:57:be:11:b1:08:13:8f:d7:79:
         03:1e:6f:70:df:44:ab:9f:46:2d:68:9d:1f:33:86:97:0c:85:
         86:b3:10:d6:f4:96:1a:13:ee:2f:4c:81:ca:f4:2b:28:5a:0b:
         df:d6:bd:33:ab:cd:fc:52:03:48:fd:e2:61:80:47:41:7c:93:
         a0:91:ed:7e:20:31:66:23:65:d8:e2:46:fd:a0:ad:bd:b8:47:
         90:07:cb:8c:4a:91:ed:01:a1:e5:1d:7c:4a:4b:a3:4a:35:61:
         a3:78:6e:6b:f0:70:d4:3b:e1:fc:a9:b7:a0:24:b5:79:0e:86:
         9f:0d:36:cb:74:e5:ee:f4:fd:67:7d:59:de:66:ab:73:7a:e8:
         72:61:01:9f:be:9c:64:34:02:7d:39:83:12:83:b1:07:fa:01:
         ba:78:0d:30:4e:1b:21:ad:9c:d0:e0:7d:37:b3:ac:cf:f6:5c:
         7d:a1:42:ff:ec:9c:8b:11:f2:ad:cc:58:86:94:9e:4a:d7:d0:
         89:87:d8:3b:87:cc:82:0c:af:0d:cc:f2:56:d7:87:b7:93:1c:
         74:b8:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:31:34 2025 by rpki-client