Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33342e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e33342e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          d4UNrzaUQDjbnfu/S7jf4hP3yL/bPYdKEW9oBxoEE94=
Subject key identifier:   B9:0F:BA:77:19:04:F5:E4:1B:8B:BA:69:EE:11:AC:D1:33:3B:78:C5
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       3B619452EF018F0DD77007DD18630248A067095A
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33342e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 06 Mar 2025 18:28:49 +0000
ROA not before:           Thu 06 Mar 2025 18:23:49 +0000
ROA not after:            Thu 05 Mar 2026 18:28:49 +0000
asID:                     263347
IP address blocks:        191.37.34.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:61:94:52:ef:01:8f:0d:d7:70:07:dd:18:63:02:48:a0:67:09:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Mar  6 18:23:49 2025 GMT
            Not After : Mar  5 18:28:49 2026 GMT
        Subject: CN=B90FBA771904F5E41B8BBA69EE11ACD1333B78C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:61:f3:53:61:d1:4d:00:22:6d:1f:74:22:
                    69:38:06:4e:55:e7:c2:ac:ad:e0:fa:14:10:8b:ad:
                    34:50:a2:18:fd:d6:98:b8:60:80:ab:b0:95:70:7e:
                    d3:a4:28:07:6f:95:97:45:cd:4a:73:93:c2:b5:11:
                    b3:b6:b3:5b:42:e7:89:d4:b8:a7:98:dd:fa:cf:e0:
                    81:fa:fe:91:f3:1e:4e:85:0b:10:45:77:2e:9a:65:
                    96:9e:43:74:33:46:e9:a4:09:89:ba:ed:3c:20:6b:
                    52:62:28:d8:f4:ab:26:5e:25:bc:98:3c:14:2b:c5:
                    0c:84:a4:4e:ec:af:7e:3a:0f:be:33:2f:34:82:8e:
                    1e:4e:41:ca:2c:58:e1:15:15:7e:84:82:b8:cd:12:
                    50:6e:2e:13:d3:51:e5:49:b3:58:17:31:25:8d:30:
                    0d:62:d7:59:ce:ea:b1:83:40:b4:21:aa:5f:48:0e:
                    5b:87:27:c8:3d:41:94:73:db:60:15:ab:71:17:d5:
                    79:a4:e3:8a:2b:1c:28:d7:ae:1f:a6:7e:f8:26:69:
                    4f:cd:e9:c1:30:65:50:f9:68:7e:f6:f9:5a:ad:70:
                    2b:5a:c2:1a:d6:cc:14:dc:d5:bf:49:6a:a6:eb:1b:
                    86:84:88:11:39:f7:07:32:69:0d:75:9c:ec:5f:43:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0F:BA:77:19:04:F5:E4:1B:8B:BA:69:EE:11:AC:D1:33:3B:78:C5
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33342e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:44:57:4b:07:b3:94:b8:75:14:ad:70:12:06:ea:94:8c:81:
         88:1f:d7:ad:0e:ee:97:2d:ab:f3:e7:c4:b7:a4:c9:f9:54:5c:
         ab:1a:cc:8e:d6:ef:83:1c:6b:77:cb:96:e4:e4:82:13:b1:e8:
         ba:d4:3c:05:11:b8:aa:87:b6:22:7d:5d:1d:cf:fc:37:91:6e:
         56:9a:27:34:55:2e:42:e5:ff:b3:4f:1f:d2:1d:f9:2f:31:16:
         48:44:d3:9b:84:a4:86:bc:1d:8d:6b:fb:56:05:a6:ea:06:3d:
         23:f6:5b:21:51:fc:d5:61:91:3e:98:40:60:2c:24:fa:b3:22:
         de:7c:a7:73:dc:38:0e:32:90:d7:d3:e2:6e:df:c2:67:6f:8a:
         2d:17:13:c4:93:c8:c5:6e:58:a9:67:81:88:ff:10:81:4f:37:
         9b:8b:ba:63:bc:2e:a4:b0:70:06:ad:d4:45:3b:31:73:41:7a:
         25:64:4d:73:94:ed:6b:23:b6:4a:6c:ee:72:06:37:93:42:2b:
         44:b9:71:a3:a0:c2:8b:e3:d7:67:81:0c:bd:52:f7:b7:3b:e5:
         72:4b:b7:6c:a8:da:4c:09:fd:a8:75:13:66:89:40:77:7e:8e:
         e8:d2:9a:27:9f:ce:93:4d:d8:2b:10:ca:2b:84:d9:6d:e9:f0:
         41:df:d3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:34:49 2025 by rpki-client