Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e322e302f32342d3234203d3e20323633363633.roa
File:                     3139312e3234312e322e302f32342d3234203d3e20323633363633.roa (raw, json)
Hash identifier:          DvpOwoHGuXpxTlFT+w+3cF7z2JOH2dlw1hAvzZT3Mh0=
Subject key identifier:   1C:9F:70:33:FD:17:30:4D:90:1B:C7:9D:17:07:42:B4:D6:6E:DE:8B
Certificate issuer:       /CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
Certificate serial:       7673B87C4765FB802A65BE49927009F7924F081E
Authority key identifier: 2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e322e302f32342d3234203d3e20323633363633.roa
Signing time:             Mon 04 Mar 2024 16:18:11 +0000
ROA not before:           Mon 04 Mar 2024 16:13:11 +0000
ROA not after:            Mon 03 Mar 2025 16:18:11 +0000
asID:                     263663
IP address blocks:        191.241.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:73:b8:7c:47:65:fb:80:2a:65:be:49:92:70:09:f7:92:4f:08:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
        Validity
            Not Before: Mar  4 16:13:11 2024 GMT
            Not After : Mar  3 16:18:11 2025 GMT
        Subject: CN=1C9F7033FD17304D901BC79D170742B4D66EDE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:10:69:9d:d9:c4:8b:50:16:2f:9e:a0:9c:
                    ee:5d:5c:79:be:08:bd:84:b5:a4:ff:7d:3c:fe:10:
                    1f:d0:9f:c7:c9:6d:6e:f6:2a:3b:84:e9:8b:a5:ac:
                    59:9f:cf:b4:57:60:a5:07:4a:23:a3:13:6c:2a:de:
                    fe:bd:73:21:e1:11:19:c2:50:51:69:f4:10:1d:62:
                    ca:b1:54:f6:d2:b5:b1:ef:e4:f4:14:ee:57:32:40:
                    f6:64:33:0a:d5:f6:a8:ad:31:b3:9d:d3:08:3b:ab:
                    be:ae:e9:46:c8:ba:f2:3b:68:9f:0e:12:71:30:7a:
                    6a:b7:ab:3f:61:c6:9a:07:e0:d6:ec:c5:f4:b2:4a:
                    8d:11:1c:08:67:33:17:8c:3b:4f:95:da:1c:5b:fe:
                    08:d2:da:27:59:7a:93:ec:e1:d8:d2:da:5e:c6:68:
                    0b:bc:5d:32:04:c7:fe:a1:5a:f0:23:dd:45:99:c1:
                    48:a1:6f:86:94:54:21:e0:1a:94:f5:d9:0a:36:c4:
                    89:c2:6c:6b:53:ae:3a:98:5f:d8:7f:ef:1e:76:64:
                    31:58:ab:71:5c:9d:e2:03:44:9e:05:6f:02:32:cb:
                    7e:95:5d:4d:18:c0:62:2c:28:52:18:5e:c1:48:56:
                    cd:5f:8a:98:86:6c:12:f2:0f:60:e1:8e:fa:f4:16:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9F:70:33:FD:17:30:4D:90:1B:C7:9D:17:07:42:B4:D6:6E:DE:8B
            X509v3 Authority Key Identifier:
                keyid:2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e322e302f32342d3234203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:97:27:c7:00:fe:34:43:3d:5e:05:bf:f0:68:ff:13:fa:53:
         fc:7e:08:6d:0d:9b:7d:68:8d:e5:b5:eb:ae:d9:86:48:8d:ba:
         63:7f:14:ed:95:18:7c:94:16:34:8e:94:62:3d:ea:c1:02:23:
         13:5f:ff:bc:ea:dd:86:ca:d0:4e:77:56:e7:56:f1:78:47:49:
         91:dc:3c:d4:54:55:da:16:18:30:dd:cb:f6:36:5b:8b:f7:c6:
         ec:c4:d7:73:1f:13:3b:fe:81:cc:6f:93:5b:08:e4:f2:67:e9:
         9d:b5:b5:6c:e2:88:13:02:67:c7:3f:ca:56:ad:dd:40:64:31:
         62:7e:35:a6:59:fa:ee:30:65:61:25:e8:84:d5:d2:c8:08:58:
         fe:89:ed:c3:c1:3a:58:93:b3:3e:04:97:6b:44:88:79:02:f1:
         49:03:66:e9:ce:58:00:28:d1:50:40:4f:de:99:87:5a:b0:85:
         3c:82:b9:16:e1:0f:fb:3e:88:e3:04:2c:d7:62:89:9b:8c:fa:
         0f:17:40:bc:26:b9:e0:64:5b:63:7a:76:d2:42:7c:34:9a:0b:
         b1:6f:09:c2:d8:d3:5c:47:45:64:0c:90:cb:81:9f:94:0d:53:
         d9:33:87:29:5c:46:86:ba:89:d0:a9:d1:b7:ff:34:89:df:b7:
         91:99:ad:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:44 2025 by rpki-client