Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/3139322e3134302e31322e302f32322d3234203d3e20323636313630.roa
File:                     3139322e3134302e31322e302f32322d3234203d3e20323636313630.roa (raw, json)
Hash identifier:          bToBByce3xu/CwH58NupiL5zpnqNQJd0dZOCzehFb0Y=
Subject key identifier:   68:DA:F6:C0:09:67:BD:CA:76:06:92:F6:A8:BD:17:64:6D:19:29:9B
Certificate issuer:       /CN=199EA49ADE0A6B3DEA97BB5F6F6F91016332317F
Certificate serial:       03A557151BEE350C7A794DDB998630E4EECA7293
Authority key identifier: 19:9E:A4:9A:DE:0A:6B:3D:EA:97:BB:5F:6F:6F:91:01:63:32:31:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199EA49ADE0A6B3DEA97BB5F6F6F91016332317F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/3139322e3134302e31322e302f32322d3234203d3e20323636313630.roa
Signing time:             Tue 03 Dec 2024 18:49:10 +0000
ROA not before:           Tue 03 Dec 2024 18:44:10 +0000
ROA not after:            Tue 02 Dec 2025 18:49:10 +0000
asID:                     266160
IP address blocks:        192.140.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a5:57:15:1b:ee:35:0c:7a:79:4d:db:99:86:30:e4:ee:ca:72:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199EA49ADE0A6B3DEA97BB5F6F6F91016332317F
        Validity
            Not Before: Dec  3 18:44:10 2024 GMT
            Not After : Dec  2 18:49:10 2025 GMT
        Subject: CN=68DAF6C00967BDCA760692F6A8BD17646D19299B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:32:04:af:4b:ac:06:c6:02:f6:d0:35:6a:
                    32:8c:69:2a:09:c9:15:4e:7e:7c:3e:11:a8:a5:ae:
                    f2:7a:10:8a:45:64:41:84:8e:ab:b0:1c:9c:52:a8:
                    14:4b:45:99:15:f5:50:2b:23:07:01:c1:56:65:71:
                    45:3a:15:db:66:11:b7:ed:63:a3:1a:07:bc:4b:b2:
                    04:b8:5b:c0:81:d2:b5:e1:d3:30:28:46:81:ed:9b:
                    c6:d4:23:27:d7:f1:ce:e4:8d:0a:55:76:71:3a:e8:
                    cf:2f:50:62:c9:c7:b6:b4:44:0c:a2:dc:64:bb:91:
                    73:f8:8a:af:47:96:e7:5f:09:37:43:db:eb:e1:53:
                    d6:f1:21:7b:85:d8:50:dd:67:4d:01:bb:53:25:b4:
                    1e:10:c2:7c:65:dc:41:8e:3f:87:3e:ce:52:0f:c8:
                    35:16:bf:32:1a:e3:29:5a:4d:ec:dc:aa:bf:a6:59:
                    89:2c:82:1f:20:bd:52:82:00:56:e3:0a:d2:c0:c5:
                    5b:f1:6b:f8:30:73:e1:dc:1d:0b:d2:97:be:d3:ce:
                    73:63:a3:01:bf:d6:19:4c:ff:4b:48:78:32:33:41:
                    a2:2e:f3:98:a9:a1:e6:5a:45:ad:25:40:f2:4b:bd:
                    e4:b4:95:56:aa:5d:67:2a:a3:74:05:11:1d:5d:a0:
                    02:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DA:F6:C0:09:67:BD:CA:76:06:92:F6:A8:BD:17:64:6D:19:29:9B
            X509v3 Authority Key Identifier:
                keyid:19:9E:A4:9A:DE:0A:6B:3D:EA:97:BB:5F:6F:6F:91:01:63:32:31:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/199EA49ADE0A6B3DEA97BB5F6F6F91016332317F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199EA49ADE0A6B3DEA97BB5F6F6F91016332317F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/3139322e3134302e31322e302f32322d3234203d3e20323636313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:48:af:2c:b5:5a:3c:cf:74:9b:22:bc:f7:8d:d5:8b:09:d0:
         14:3f:14:4f:be:6d:65:24:1f:24:85:51:0f:db:51:3c:e2:bf:
         eb:6a:cf:6f:11:9e:e4:da:9e:72:42:e8:19:54:4c:a7:3e:4c:
         ac:7a:87:fc:42:2a:4e:57:67:3d:2d:61:5e:06:a9:68:48:41:
         2e:79:df:6c:cb:d3:98:bb:71:e6:29:0a:25:6c:bf:82:39:13:
         61:67:a4:a2:73:e9:91:8e:09:9d:c7:fa:ed:46:e4:c7:06:07:
         00:92:fb:7c:a5:47:63:0e:70:cc:44:12:5b:88:16:4c:12:16:
         ac:36:05:9e:4a:fd:f6:bd:b5:50:f4:e4:d9:2b:fa:46:54:3e:
         b3:c6:2a:e4:f1:3a:ac:f7:88:1f:85:37:ad:a8:71:89:4a:20:
         be:9d:fd:48:0a:93:08:76:e2:ab:ea:c3:59:98:ed:05:04:ad:
         61:e3:97:52:9b:f3:6f:d4:f8:ac:d6:94:f8:ed:1f:4a:1a:ee:
         64:ca:27:30:f9:20:b6:8e:69:30:1c:bf:c0:3f:de:46:14:c0:
         cc:73:e2:fc:8f:88:33:c0:db:c2:43:50:9f:f8:73:78:14:2d:
         d7:67:45:7d:3c:76:c9:61:ff:a1:1b:65:93:fe:50:c9:38:09:
         86:48:b9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:17:39 2025 by rpki-client