Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e302e302f32322d3232203d3e20323633363633.roa
File:                     3139312e3234312e302e302f32322d3232203d3e20323633363633.roa (raw, json)
Hash identifier:          6kpbWs5pLuZspKx+uLf4Aw9xzA83/uuFPM4b3ra5e/M=
Subject key identifier:   38:69:25:E0:FA:3A:E9:54:F2:30:F1:83:B2:3C:A7:0F:5C:B7:04:94
Certificate issuer:       /CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
Certificate serial:       45648AC6D568261CA2F8904DFCD612BE05A68937
Authority key identifier: 2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e302e302f32322d3232203d3e20323633363633.roa
Signing time:             Mon 04 Mar 2024 16:17:58 +0000
ROA not before:           Mon 04 Mar 2024 16:12:58 +0000
ROA not after:            Mon 03 Mar 2025 16:17:58 +0000
asID:                     263663
IP address blocks:        191.241.0.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:64:8a:c6:d5:68:26:1c:a2:f8:90:4d:fc:d6:12:be:05:a6:89:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
        Validity
            Not Before: Mar  4 16:12:58 2024 GMT
            Not After : Mar  3 16:17:58 2025 GMT
        Subject: CN=386925E0FA3AE954F230F183B23CA70F5CB70494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:41:b2:ac:1f:c3:6d:a9:f4:49:06:da:7c:
                    e9:9a:34:86:cb:ca:5e:94:2c:22:9e:db:7c:56:ba:
                    e3:2b:ee:2d:44:aa:86:6d:30:67:fd:45:6e:04:d1:
                    ae:c4:d2:4e:ed:94:fc:c7:c3:06:35:dc:53:1d:9b:
                    bf:25:aa:14:40:d8:fa:d4:2b:d5:e1:69:35:16:1b:
                    e2:4e:d2:39:11:18:f9:99:2b:ce:2e:0b:d0:66:99:
                    a5:d5:b9:b8:10:a2:23:18:c2:49:89:76:46:d3:55:
                    4a:cd:20:7a:22:b4:45:29:4e:1e:ca:a2:79:bb:a8:
                    7a:fb:d0:be:d1:54:f2:e4:8b:32:47:fb:ec:08:ea:
                    4a:24:90:9c:de:99:a9:b1:08:5d:c4:c5:88:28:4f:
                    9b:5a:ea:52:12:ee:b2:1b:53:68:d1:21:2f:8b:64:
                    d0:9f:9f:49:17:56:81:34:d8:8f:ee:94:b7:53:76:
                    27:3d:5e:37:29:2c:de:36:12:cd:6a:ac:ec:7d:ef:
                    e2:61:e1:6d:b9:2a:53:a6:de:17:a0:f8:84:08:01:
                    7c:7d:93:00:24:68:57:c4:53:5b:32:79:89:40:62:
                    58:83:60:31:6a:77:05:3a:63:76:a6:32:10:5c:be:
                    62:cb:ca:cd:98:09:38:10:a8:13:e8:55:36:a9:50:
                    52:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:69:25:E0:FA:3A:E9:54:F2:30:F1:83:B2:3C:A7:0F:5C:B7:04:94
            X509v3 Authority Key Identifier:
                keyid:2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e302e302f32322d3232203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:56:07:aa:3b:f2:01:1c:e9:01:4c:31:db:25:f5:30:a2:aa:
         19:80:0c:37:49:1b:71:ce:74:9e:56:4f:d0:8b:99:4d:c1:0d:
         84:62:b3:40:40:07:be:91:3b:49:84:58:cc:20:38:27:ff:2b:
         00:d4:0d:50:0f:51:79:b6:85:bb:66:2d:f6:c0:77:5d:8a:57:
         f4:4d:3d:e8:57:f7:46:48:38:b6:95:70:1c:f3:50:c4:19:4e:
         5c:c8:f3:4e:b1:b2:1a:02:e0:95:78:40:76:36:91:87:b9:d0:
         e2:79:91:cf:45:16:cf:8e:01:35:fa:dd:4c:7d:52:53:f6:c5:
         92:fa:23:4c:ff:6a:6f:85:a7:a0:59:76:15:8a:64:0b:c0:d4:
         d2:7b:f3:0f:9a:1f:0a:15:8c:dc:b4:19:2d:52:bd:44:4c:e3:
         ba:6a:96:16:ab:92:72:07:11:26:9a:9f:04:53:98:60:84:4a:
         aa:ea:f9:62:77:9c:b3:15:b3:20:1d:e9:28:a4:61:d9:3b:03:
         ea:c1:f6:99:d0:b5:29:be:3c:61:5f:70:a0:8b:5b:5f:ea:7c:
         41:4e:1b:b9:ba:79:74:c2:69:16:25:f5:ea:50:71:e2:98:40:
         a5:cc:3b:a5:5a:d7:ba:29:dd:f1:0b:d0:5b:1c:44:04:7c:12:
         9a:dd:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:33:31 2025 by rpki-client