Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e342e302f32322d3232203d3e20323633363633.roa
File:                     3139312e3234312e342e302f32322d3232203d3e20323633363633.roa (raw, json)
Hash identifier:          htaHzwUcJeqG22pEAAQRM2A9rPH0ptHjbA8QRU4VtgY=
Subject key identifier:   1B:D9:99:71:1F:46:45:65:84:03:7D:02:71:D9:25:E1:D3:93:8F:86
Certificate issuer:       /CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
Certificate serial:       7EE297D339E1036E8B70112F2F55E52E1F96D944
Authority key identifier: 2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e342e302f32322d3232203d3e20323633363633.roa
Signing time:             Mon 04 Mar 2024 16:18:24 +0000
ROA not before:           Mon 04 Mar 2024 16:13:24 +0000
ROA not after:            Mon 03 Mar 2025 16:18:24 +0000
asID:                     263663
IP address blocks:        191.241.4.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e2:97:d3:39:e1:03:6e:8b:70:11:2f:2f:55:e5:2e:1f:96:d9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078
        Validity
            Not Before: Mar  4 16:13:24 2024 GMT
            Not After : Mar  3 16:18:24 2025 GMT
        Subject: CN=1BD999711F46456584037D0271D925E1D3938F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7a:cf:c3:13:00:d6:e3:e1:f5:6e:d7:19:4f:
                    74:b1:c0:f7:81:9c:93:2c:8a:7b:4c:4a:c3:9e:ae:
                    e6:2a:a4:9d:52:f6:5c:b1:77:ae:3b:29:95:aa:5f:
                    20:2e:52:17:85:8d:ae:c2:c0:e5:76:6e:71:e2:60:
                    ef:2d:f9:b7:d4:2e:c9:c9:4b:38:6f:c8:62:1d:dc:
                    0b:e9:49:28:ba:b6:96:8d:16:4d:db:f5:15:b2:3e:
                    93:35:5f:6d:4e:2d:69:61:a5:6a:d6:2f:75:72:f4:
                    60:e3:cf:1f:55:1c:ee:ca:75:ca:f1:f9:3f:bd:d8:
                    f4:6d:7c:5a:f4:d0:1c:a9:29:7c:b5:e4:a2:5d:61:
                    c3:7c:2c:f3:69:bd:5e:c8:14:e4:bd:3e:79:fc:c0:
                    88:d1:29:21:23:9c:ba:b8:8c:2e:02:72:fb:ac:0e:
                    36:c7:3b:d2:60:24:52:eb:2b:bc:96:f4:3e:15:60:
                    5f:96:4f:ea:5d:e0:d2:77:e0:20:25:21:56:ea:28:
                    48:1f:78:05:7a:b2:62:76:7c:ff:0f:67:8b:40:2b:
                    ae:f4:c3:4b:69:58:29:5b:35:ee:3c:17:e5:0e:2b:
                    66:11:2b:f2:7f:5b:86:d3:f3:e6:ac:6c:19:95:61:
                    3e:c5:e8:e8:ab:5f:1e:11:1a:a3:c2:f4:a2:94:cf:
                    9d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D9:99:71:1F:46:45:65:84:03:7D:02:71:D9:25:E1:D3:93:8F:86
            X509v3 Authority Key Identifier:
                keyid:2C:6D:F3:4B:DE:2E:49:E9:68:25:9A:5D:BA:C5:4E:CE:3B:15:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C6DF34BDE2E49E968259A5DBAC54ECE3B15A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oVrcem1iPXHJTcEEqq1tbeDTVXTss45xizLh2rPJeuC/0/3139312e3234312e342e302f32322d3232203d3e20323633363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:34:b8:76:ca:6d:2d:dd:1f:60:7c:0c:fc:57:4b:e4:85:cb:
         ee:bb:1e:6c:d7:0b:92:d0:ae:20:1e:ea:0e:f6:70:60:8c:e4:
         e8:7d:62:08:c8:65:f0:43:64:30:03:7a:6d:f8:e9:0e:cb:23:
         ff:c9:02:52:77:13:62:87:12:7d:40:8e:5c:49:03:55:cc:17:
         64:99:a3:3a:85:2b:3b:49:8b:13:d4:7d:18:62:e0:17:16:76:
         da:88:5d:f4:db:5e:28:a1:63:82:9f:9c:09:8d:5f:cb:fc:23:
         cc:88:19:63:02:91:d1:25:91:01:3a:56:26:04:ec:be:35:6e:
         53:40:03:4a:cd:4c:6b:f0:b1:23:4d:89:b9:a5:ec:28:ff:69:
         e2:03:99:2b:e7:de:40:0a:af:aa:1d:c6:1b:8a:e8:83:57:58:
         14:b2:fd:16:36:dc:5d:eb:e4:bc:a7:ea:fc:b7:e0:08:dd:27:
         ae:ee:05:fd:eb:d7:37:85:d0:e4:d8:7e:6e:70:9e:04:75:91:
         0f:a4:4c:a7:06:1f:80:7f:d0:33:44:6d:ae:67:0d:31:53:67:
         d4:de:08:ad:1d:86:bb:c1:c0:d4:24:ac:43:f6:46:69:da:14:
         11:52:3a:88:1b:e3:f9:5e:69:71:ab:d1:b3:a4:aa:53:f1:dc:
         cf:c6:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:26:57 2025 by rpki-client