Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e302e302f32302d3234203d3e20323633363633.roa
File:                     3139312e3234312e302e302f32302d3234203d3e20323633363633.roa (raw, json)
Hash identifier:          UxaLl6hgNXTg1SYWfQpX5sKFR5Q81iI7TvmouO2S5qg=
Subject key identifier:   F9:EB:F1:E3:E8:F2:AE:8D:31:B3:69:BB:96:90:10:77:79:48:00:7C
Certificate issuer:       /CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
Certificate serial:       68DF5711CC7A5D07BF23CCCC49A37D101482F8BF
Authority key identifier: 2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e302e302f32302d3234203d3e20323633363633.roa
Signing time:             Fri 08 Mar 2024 14:52:02 +0000
ROA not before:           Fri 08 Mar 2024 14:47:02 +0000
ROA not after:            Fri 07 Mar 2025 14:52:02 +0000
asID:                     263663
IP address blocks:        191.241.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:df:57:11:cc:7a:5d:07:bf:23:cc:cc:49:a3:7d:10:14:82:f8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
        Validity
            Not Before: Mar  8 14:47:02 2024 GMT
            Not After : Mar  7 14:52:02 2025 GMT
        Subject: CN=F9EBF1E3E8F2AE8D31B369BB969010777948007C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:70:dd:8c:17:79:4e:89:68:cd:e3:73:32:fc:
                    7e:f3:01:06:4d:d3:fe:fd:e2:f1:66:d8:2a:86:47:
                    15:75:e4:55:1e:9a:4d:6f:3b:eb:61:51:16:d6:34:
                    e6:de:5a:24:8e:8c:64:0e:88:cc:56:74:2a:b7:2c:
                    e4:68:70:12:ed:ce:52:c0:b8:a8:45:eb:90:64:ca:
                    56:55:97:6d:8a:37:be:74:b2:05:13:8a:2c:84:ae:
                    80:c0:c0:b6:0a:94:1a:72:6d:15:17:22:ad:be:90:
                    ff:33:73:ec:a8:99:c4:98:48:37:31:72:86:56:6f:
                    ae:49:a9:af:84:39:cc:ef:61:e7:bb:9a:2b:4d:3d:
                    e2:79:7d:82:5a:b6:60:e9:98:8f:9c:0b:86:e3:fb:
                    d5:39:8c:2f:6f:a4:83:78:95:db:5e:ac:2b:e8:38:
                    39:5b:2d:28:ab:82:e9:d0:49:e3:9d:f5:39:73:d8:
                    33:c3:e4:45:f5:c4:9b:e9:ef:c6:fd:fa:7c:d3:da:
                    56:dc:62:06:ec:de:76:af:68:5e:2f:f6:84:1d:7f:
                    5f:33:b4:d5:93:36:c3:43:f7:68:30:63:19:da:9f:
                    9b:51:25:c8:a4:25:77:96:b3:ed:6c:77:1c:54:9c:
                    f6:af:9d:e2:03:58:9e:70:a5:8e:e9:6f:c7:f8:8d:
                    79:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EB:F1:E3:E8:F2:AE:8D:31:B3:69:BB:96:90:10:77:79:48:00:7C
            X509v3 Authority Key Identifier:
                keyid:2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e302e302f32302d3234203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:63:c5:98:91:75:90:11:9b:69:d6:49:cc:ab:57:14:c7:c0:
         84:e9:88:04:12:a3:d9:ed:db:f0:1d:2c:2b:07:8a:9e:e1:ce:
         92:26:6c:97:44:08:df:6c:2c:06:94:da:da:c3:f6:d3:12:ad:
         ed:05:bf:5e:a5:a0:82:39:4b:4e:6c:ab:d4:80:97:35:4b:9c:
         e7:c4:7a:f7:db:ce:73:d5:f9:c2:66:81:0e:4a:e8:b7:06:60:
         8e:04:36:18:35:74:8d:ca:b7:2c:84:a0:55:dc:3f:ee:a9:35:
         db:dd:a5:2b:62:41:0f:9f:32:1f:69:a5:98:0a:42:4e:e2:98:
         67:7f:b1:15:31:a2:f4:6c:15:65:e5:32:d7:cc:fb:2e:dc:a3:
         e5:33:32:5c:e9:7c:ea:51:6a:24:e7:ed:b7:d9:01:41:c4:f0:
         42:ab:51:76:1f:ad:1e:e0:a3:b6:d9:7e:07:fa:0f:4b:26:0e:
         9e:45:93:5a:1b:a1:c4:92:c2:8e:55:9e:b7:ff:8d:5d:e4:2f:
         ac:51:0e:48:58:e5:29:12:ab:ed:fb:70:56:d6:ee:d0:b0:fe:
         7f:ba:eb:8b:03:35:e9:ed:ef:77:72:44:59:26:e9:9f:19:da:
         cf:3b:26:ed:4e:5b:99:24:17:a5:ff:91:22:fc:3f:23:ad:6e:
         52:25:ba:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:14 2025 by rpki-client