Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e31312e302f32342d3234203d3e20323633363633.roa
File:                     3139312e3234312e31312e302f32342d3234203d3e20323633363633.roa (raw, json)
Hash identifier:          wNo3766EdGKXxEaJBRKttr2mVaPCO78cqlR/oE9GgdA=
Subject key identifier:   C9:4E:22:A2:CB:BB:D5:CB:60:78:16:FE:5B:E0:2C:DA:94:B3:ED:5A
Certificate issuer:       /CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
Certificate serial:       2554C0B23EA76E1BC0A7BBF7F42F4D372E512006
Authority key identifier: 2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e31312e302f32342d3234203d3e20323633363633.roa
Signing time:             Mon 04 Mar 2024 16:19:13 +0000
ROA not before:           Mon 04 Mar 2024 16:14:13 +0000
ROA not after:            Mon 03 Mar 2025 16:19:13 +0000
asID:                     263663
IP address blocks:        191.241.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:54:c0:b2:3e:a7:6e:1b:c0:a7:bb:f7:f4:2f:4d:37:2e:51:20:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
        Validity
            Not Before: Mar  4 16:14:13 2024 GMT
            Not After : Mar  3 16:19:13 2025 GMT
        Subject: CN=C94E22A2CBBBD5CB607816FE5BE02CDA94B3ED5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:89:bb:a9:22:08:3d:5b:65:72:5f:a1:66:
                    cd:49:da:22:37:f0:1e:0c:91:6b:e6:0c:b5:43:e5:
                    fd:fb:34:29:70:1b:f3:f6:58:a8:e2:3a:2f:39:0e:
                    08:56:0f:93:40:c5:76:3f:1a:94:21:c3:ce:da:65:
                    d5:65:60:6b:fe:c0:4c:4f:28:c9:ad:bf:5f:35:70:
                    e2:1b:00:6d:f9:6c:15:27:00:2c:03:42:b1:f8:ee:
                    83:14:48:9d:ad:be:db:6a:d0:4a:e8:e4:26:ef:8a:
                    ec:bc:36:0a:c0:40:c5:09:40:41:6c:cc:ab:3e:e4:
                    67:5b:04:b0:1f:8d:26:c8:64:41:dc:b9:87:14:cd:
                    93:d8:30:4a:a6:f3:db:2b:2d:01:8c:96:8d:22:c9:
                    f7:d4:01:b2:42:77:dc:7b:c7:a5:9c:dc:f3:38:c1:
                    89:e6:83:17:a0:d8:1c:c1:2a:e0:ff:56:df:db:6b:
                    d0:1d:37:a4:be:94:c1:70:01:12:28:92:2c:57:fe:
                    7e:59:91:eb:16:e2:0b:31:a9:0c:6b:fb:47:8f:4a:
                    d7:2e:f8:dc:da:ff:7e:f0:80:40:2e:da:c5:6e:65:
                    0b:62:28:ae:b6:d4:76:22:4a:6e:94:b3:41:6e:7f:
                    35:21:31:e2:af:e9:7b:43:a0:d1:f8:73:0d:de:99:
                    79:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4E:22:A2:CB:BB:D5:CB:60:78:16:FE:5B:E0:2C:DA:94:B3:ED:5A
            X509v3 Authority Key Identifier:
                keyid:2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e31312e302f32342d3234203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:8c:57:43:90:f0:d8:22:7d:e2:b0:58:cd:9e:9b:ca:ba:ae:
         66:90:73:19:52:48:96:df:5d:18:7a:55:58:a9:1f:6e:60:40:
         df:7e:3e:df:5e:ca:bc:ed:47:10:71:aa:d8:9d:e2:49:5d:0e:
         29:73:e9:7b:ba:33:cc:12:af:cb:c2:c5:36:b7:38:95:fb:62:
         93:c3:f1:88:ad:96:9f:78:b7:3a:36:38:71:00:36:29:67:85:
         5b:87:99:a0:a3:15:c5:a3:4b:de:50:c9:b9:4d:15:f3:fe:0d:
         8a:6a:48:04:57:d5:4d:c4:16:90:61:e3:6f:af:2d:54:60:2e:
         df:e0:0e:7c:04:9a:17:8a:19:a0:57:42:5f:50:62:f1:b3:72:
         5d:2e:58:5b:eb:77:0e:39:ae:02:0d:b9:ce:a2:62:6e:d3:53:
         a0:95:7f:eb:9c:96:01:96:f1:2e:9e:e4:d6:09:20:5f:93:93:
         c6:e2:43:cb:ed:eb:2c:fe:09:f3:bb:57:26:2b:0e:eb:1e:97:
         58:10:91:4a:ea:a8:ea:91:a8:99:d5:e5:29:50:f7:90:b0:e8:
         c9:2b:a9:e9:7e:82:07:ff:58:23:31:77:96:ec:11:bd:d9:ff:
         be:1c:71:98:8a:0d:31:92:03:da:d2:67:b8:00:a4:91:17:6e:
         e6:f7:44:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:45:17 2025 by rpki-client