Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e302e302f32302d3232203d3e20323633363633.roa
File:                     3139312e3234312e302e302f32302d3232203d3e20323633363633.roa (raw, json)
Hash identifier:          Km2SBqe2sdPIG5XEaD0wfWAtarTBGGsDiK7bzX4s3Ck=
Subject key identifier:   5E:09:83:8D:E8:D2:09:77:12:0B:A8:B4:B8:5E:1C:8B:D9:84:59:01
Certificate issuer:       /CN=9CC5CFF7E9D168495B51D83F3C355F10409474FF
Certificate serial:       1CE66041B1455D656CD3B09E7B2774A45E443E4A
Authority key identifier: 9C:C5:CF:F7:E9:D1:68:49:5B:51:D8:3F:3C:35:5F:10:40:94:74:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e302e302f32302d3232203d3e20323633363633.roa
Signing time:             Fri 22 Mar 2024 15:03:51 +0000
ROA not before:           Fri 22 Mar 2024 14:58:51 +0000
ROA not after:            Fri 21 Mar 2025 15:03:51 +0000
asID:                     263663
IP address blocks:        191.241.0.0/20 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e6:60:41:b1:45:5d:65:6c:d3:b0:9e:7b:27:74:a4:5e:44:3e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC5CFF7E9D168495B51D83F3C355F10409474FF
        Validity
            Not Before: Mar 22 14:58:51 2024 GMT
            Not After : Mar 21 15:03:51 2025 GMT
        Subject: CN=5E09838DE8D20977120BA8B4B85E1C8BD9845901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fd:64:9e:63:b1:f8:3f:8f:f6:45:80:d7:53:
                    9f:86:69:ef:52:9d:06:2c:8a:e0:16:6f:fb:40:15:
                    f5:30:b4:54:1f:d1:22:fb:ca:a7:e9:07:33:fc:a2:
                    2a:a3:57:cd:39:a7:24:8c:d2:d5:20:51:47:de:26:
                    25:83:95:1d:83:bf:29:9e:37:b3:c1:a1:bd:8e:be:
                    fa:85:b0:26:7e:13:75:c4:e5:b3:e4:43:5a:ac:e5:
                    f8:c5:a2:3a:c1:5a:be:23:6c:6e:e6:fb:d9:0f:af:
                    49:2b:d1:e0:35:68:85:56:1e:9d:14:b4:2e:a0:57:
                    41:7e:16:2a:12:44:25:08:1a:7b:0d:ce:62:a0:67:
                    35:1a:f9:79:7c:9b:02:a1:8d:39:be:b5:0e:bb:e8:
                    d1:79:64:07:53:5e:b5:86:6c:b4:17:d9:36:4f:e0:
                    b8:f2:2e:c4:55:21:47:f8:43:07:45:ff:5a:c3:51:
                    cd:7c:4a:6c:35:c0:ca:d1:82:72:66:c7:c7:79:cb:
                    af:86:13:6e:da:8c:5d:35:94:09:95:d4:d6:75:e0:
                    43:af:dd:21:76:9c:19:19:ae:8a:b8:29:38:a2:fd:
                    04:d1:61:d2:f8:7d:c4:e4:a0:5d:cc:91:27:57:96:
                    26:21:e0:78:8a:79:a3:63:d2:b4:50:45:21:61:c9:
                    57:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:09:83:8D:E8:D2:09:77:12:0B:A8:B4:B8:5E:1C:8B:D9:84:59:01
            X509v3 Authority Key Identifier:
                keyid:9C:C5:CF:F7:E9:D1:68:49:5B:51:D8:3F:3C:35:5F:10:40:94:74:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC5CFF7E9D168495B51D83F3C355F10409474FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e302e302f32302d3232203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:29:c0:64:39:12:ed:e3:ff:e1:53:06:8a:a0:a6:82:89:02:
         97:37:8d:4c:d5:31:c4:8b:4d:e3:27:4a:66:3e:c4:d5:18:d8:
         4a:fe:74:ad:27:ca:f4:a2:d8:5b:76:3e:2f:b2:c0:a2:1a:19:
         de:9f:65:bc:ed:d5:46:6a:35:cc:30:4a:85:c7:e5:9c:62:47:
         b7:5b:b1:8d:84:45:69:69:f1:9b:27:8e:0f:a1:b5:10:b1:61:
         a2:71:6d:8e:36:76:b8:eb:72:88:cd:3c:47:76:aa:53:a5:c8:
         20:de:a1:4c:39:06:e3:18:b6:10:0d:54:7d:d6:34:55:66:00:
         db:55:89:c2:a3:5f:d3:9e:ce:92:5e:2e:b0:ac:38:c8:35:83:
         da:d0:fa:cf:b9:b7:7d:c6:77:24:1d:69:9c:14:e0:17:a4:e0:
         2f:8b:ad:3f:7c:5a:94:38:6f:f6:b6:72:1c:17:c6:38:c1:40:
         87:8d:60:d3:2d:8f:7f:67:75:72:d2:1c:5a:3d:0a:da:6a:ed:
         5a:18:56:02:98:eb:28:a1:e2:60:d9:3a:9b:bf:47:01:83:0e:
         fa:a6:4b:2e:69:9b:52:47:91:d1:8f:9d:b4:4e:53:2e:a7:57:
         da:f7:11:28:80:d6:3a:ee:80:8d:ae:07:22:03:d3:49:38:28:
         fa:ee:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:57 2025 by rpki-client