Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3136392e302f32342d3234203d3e20323632333736.roa
File:                     3134332e3235352e3136392e302f32342d3234203d3e20323632333736.roa (raw, json)
Hash identifier:          81xsqJCOc4x8l1QO1oF9RJRM0XWyy5YAWJXHEtrl+3E=
Subject key identifier:   4E:FA:AE:69:3E:71:B1:6A:F0:92:6E:2E:D2:90:64:FF:57:6E:D2:C1
Certificate issuer:       /CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Certificate serial:       2AE09EC41A392A81E853CDC8903A5AD253B79E60
Authority key identifier: C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3136392e302f32342d3234203d3e20323632333736.roa
Signing time:             Tue 02 Jul 2024 14:03:37 +0000
ROA not before:           Tue 02 Jul 2024 13:58:37 +0000
ROA not after:            Tue 01 Jul 2025 14:03:37 +0000
asID:                     262376
IP address blocks:        143.255.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e0:9e:c4:1a:39:2a:81:e8:53:cd:c8:90:3a:5a:d2:53:b7:9e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
        Validity
            Not Before: Jul  2 13:58:37 2024 GMT
            Not After : Jul  1 14:03:37 2025 GMT
        Subject: CN=4EFAAE693E71B16AF0926E2ED29064FF576ED2C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e2:90:4d:18:59:8f:5a:8b:33:d4:88:af:99:
                    c4:19:9e:ab:78:25:84:5d:e2:bc:18:5e:5d:a9:70:
                    08:7f:86:0a:50:f0:07:10:1c:b7:a5:81:06:01:75:
                    a8:19:f5:72:59:4f:90:de:98:4b:28:05:17:d6:2d:
                    42:41:a9:26:3d:f7:2b:d6:e8:60:9a:1a:0a:58:92:
                    2e:21:dc:60:c4:a3:d5:34:12:2e:98:ec:45:56:db:
                    d2:ad:68:f5:b3:ea:62:6f:98:72:a4:c8:c5:dc:0c:
                    a0:ea:37:f3:07:71:53:13:76:1c:b9:d6:27:b2:1d:
                    93:bb:11:83:06:dd:13:9e:4c:b4:f6:0b:7d:d9:de:
                    0b:3e:43:5f:cc:5c:1c:d9:38:51:1a:aa:77:f4:af:
                    4f:b0:63:d6:40:76:6a:64:77:f2:dd:6b:86:bb:eb:
                    41:cb:b9:c8:b5:8a:39:87:65:cf:5b:80:2d:b9:bc:
                    bf:0d:18:3a:6b:a6:ce:d1:69:14:90:f8:53:b7:19:
                    ad:6f:aa:51:dd:de:ee:9f:e9:d5:8a:00:22:c8:33:
                    fc:67:19:e2:83:ad:94:37:33:11:32:b3:c4:a3:b7:
                    a7:42:6b:6d:a8:6e:61:66:93:33:d9:23:ac:db:98:
                    e5:9c:04:c6:f4:f7:d7:6d:7d:5f:05:b6:42:91:9c:
                    47:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FA:AE:69:3E:71:B1:6A:F0:92:6E:2E:D2:90:64:FF:57:6E:D2:C1
            X509v3 Authority Key Identifier:
                keyid:C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3136392e302f32342d3234203d3e20323632333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:b0:1a:89:cb:f1:53:82:d6:81:f5:2e:7f:a1:15:c7:38:f8:
         9b:78:3f:3f:9b:55:3d:d1:a9:1b:21:09:1c:34:d8:e1:d8:b3:
         93:c6:57:f6:74:4f:70:28:a3:4b:19:e8:e9:92:99:56:e8:6f:
         c8:92:5d:a1:ab:f1:7e:39:1c:17:54:f6:2f:44:5f:57:f0:d1:
         27:1b:f4:7f:c1:46:94:f8:3b:1f:75:1b:a4:58:da:54:79:4c:
         f4:90:54:ac:88:c4:af:48:11:6f:aa:2e:c4:fe:ad:91:24:58:
         1d:85:64:8e:63:57:50:5f:02:f7:f6:ad:55:37:0a:93:ad:35:
         59:5c:3f:fd:53:4e:36:8e:f9:7d:aa:dc:24:c3:da:d6:94:9e:
         f4:e8:9b:48:15:60:58:38:d4:71:85:ab:c7:d7:cf:2d:13:7a:
         42:c1:af:c2:8a:e4:93:78:9c:bd:f4:60:00:9c:45:78:ae:fd:
         a3:ea:90:06:89:f5:8c:a0:f6:4c:1c:02:41:ba:51:7b:1c:14:
         ac:c1:32:a8:9d:4d:40:51:c1:cd:49:89:fb:ab:43:5a:63:64:
         6e:12:f0:c1:a4:ed:8c:8c:4f:11:94:d0:cf:c0:b3:5e:91:ad:
         d4:7e:23:39:a3:fc:ab:97:90:17:bc:8b:76:6b:e4:aa:fa:54:
         b1:00:97:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:53:43 2025 by rpki-client