Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e31322e302f32322d3232203d3e20323633363633.roa
File:                     3139312e3234312e31322e302f32322d3232203d3e20323633363633.roa (raw, json)
Hash identifier:          IFQwJECrG/zReAYj1Hrf3j7pg02mzvoUsvr7ixL/qaY=
Subject key identifier:   B2:C2:18:12:8C:13:AB:1E:CE:A4:39:6C:4B:9F:51:5C:74:FC:8E:B2
Certificate issuer:       /CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
Certificate serial:       4EEBFE0B44A0C393C045527F303DDD9B1898A8C6
Authority key identifier: 2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e31322e302f32322d3232203d3e20323633363633.roa
Signing time:             Mon 04 Mar 2024 16:19:21 +0000
ROA not before:           Mon 04 Mar 2024 16:14:21 +0000
ROA not after:            Mon 03 Mar 2025 16:19:21 +0000
asID:                     263663
IP address blocks:        191.241.12.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:eb:fe:0b:44:a0:c3:93:c0:45:52:7f:30:3d:dd:9b:18:98:a8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
        Validity
            Not Before: Mar  4 16:14:21 2024 GMT
            Not After : Mar  3 16:19:21 2025 GMT
        Subject: CN=B2C218128C13AB1ECEA4396C4B9F515C74FC8EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:df:53:04:60:8d:92:be:ed:7b:fc:bb:6e:27:
                    50:96:2c:9a:cf:ed:a7:84:f7:c9:c6:c5:03:78:66:
                    6f:5f:75:7b:19:18:be:39:f7:6c:f0:cc:7b:88:9d:
                    88:31:85:bb:6c:26:f7:73:09:f8:e2:52:08:25:a5:
                    27:a5:54:68:08:bc:2b:9e:8a:a3:35:f8:e8:b2:fb:
                    2d:26:80:fd:2d:1b:b3:6a:f0:07:1a:0d:cd:a3:bf:
                    e0:d4:2d:62:ff:9a:45:18:d9:34:1d:a4:22:bc:c4:
                    f3:c4:63:9f:ba:ca:d6:71:92:c8:cf:2f:19:89:de:
                    8a:75:13:66:77:4b:18:5d:85:46:8b:a0:87:72:7b:
                    ed:80:59:f0:97:9d:a8:93:65:28:e6:33:8c:2d:da:
                    19:45:a2:09:31:b8:44:41:d3:d3:1a:96:4e:6d:5d:
                    8b:60:01:ed:f6:c6:c0:0f:80:9a:40:6c:f4:c5:a0:
                    30:9d:66:84:ab:f1:e8:c2:e5:62:35:02:51:6a:d6:
                    2d:6d:71:00:d8:aa:10:94:02:88:db:dc:8f:ed:63:
                    8e:20:52:6e:94:ac:72:9e:d0:4f:4a:e7:01:64:76:
                    8e:7d:d9:5b:4b:cf:3f:7b:1a:32:d3:f7:6f:25:52:
                    57:6d:ec:fd:81:6a:f2:d5:9f:a0:b1:dc:7e:af:09:
                    8b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C2:18:12:8C:13:AB:1E:CE:A4:39:6C:4B:9F:51:5C:74:FC:8E:B2
            X509v3 Authority Key Identifier:
                keyid:2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e31322e302f32322d3232203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:ed:f8:d2:1e:96:48:3b:8a:cd:f7:5a:5f:93:73:31:96:45:
         ac:ea:00:fc:b4:8a:51:01:58:1d:2b:cb:31:2a:07:8a:bc:04:
         f0:ce:a6:a8:a3:f8:2a:0f:69:74:bd:fd:84:6a:a1:ec:e8:95:
         a0:d2:fc:e0:c6:4c:2b:e5:3f:70:a0:f1:01:d1:6b:7c:26:5f:
         4a:a3:09:d1:04:c9:d5:fd:2b:94:6f:df:57:96:39:b9:16:39:
         a4:81:49:c1:74:50:4c:24:09:6e:4b:f9:34:62:1f:e2:de:20:
         26:36:3b:ab:8b:e2:d1:19:31:32:8e:a5:db:a6:a9:22:a9:24:
         24:de:f6:66:04:ae:68:fb:45:25:f4:dc:92:28:75:f8:ee:5c:
         33:2c:5a:2c:e9:ea:2f:13:f5:c8:0e:24:87:44:2d:0d:f0:58:
         ca:44:0d:2e:b3:ef:f0:28:3c:5d:fd:6a:54:db:f8:f9:f3:47:
         ed:cc:82:e1:25:19:d4:c2:b8:ea:45:d6:36:41:1a:a7:45:51:
         1b:49:6d:68:d5:77:06:8e:e6:fa:ec:d8:88:69:b6:dd:1f:0a:
         4f:86:e2:d6:45:5a:20:68:82:fd:a8:24:00:d3:e4:a6:6a:a5:
         ca:88:ae:c4:39:5b:84:9d:ac:d4:56:0f:f5:44:78:21:1a:9f:
         78:07:45:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:36 2025 by rpki-client