Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34382e302f32302d3230203d3e20323633333437.roa
File:                     3139312e33372e34382e302f32302d3230203d3e20323633333437.roa (raw, json)
Hash identifier:          QaV7KhXIPMgswK54OYUiKO6H/+zsWnFA7lmMNxSTRy0=
Subject key identifier:   31:B5:1B:F7:6C:71:3C:1F:D6:FC:51:98:F9:C5:1C:13:CD:D0:AA:09
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       2FE35207E6DB893F77DAB8910CC0E2BA29EC9BF4
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34382e302f32302d3230203d3e20323633333437.roa
Signing time:             Thu 06 Mar 2025 18:28:48 +0000
ROA not before:           Thu 06 Mar 2025 18:23:48 +0000
ROA not after:            Thu 05 Mar 2026 18:28:48 +0000
asID:                     263347
IP address blocks:        191.37.48.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e3:52:07:e6:db:89:3f:77:da:b8:91:0c:c0:e2:ba:29:ec:9b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Mar  6 18:23:48 2025 GMT
            Not After : Mar  5 18:28:48 2026 GMT
        Subject: CN=31B51BF76C713C1FD6FC5198F9C51C13CDD0AA09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:cd:df:88:0c:19:56:ab:c5:0c:63:4f:21:
                    28:97:99:4e:b5:71:11:6d:a7:3f:ce:89:95:a9:46:
                    f0:15:50:e0:fc:6d:96:7a:d2:d2:7b:af:ef:b8:98:
                    87:88:6e:d7:cc:94:94:c7:6e:34:2d:d1:21:c3:6c:
                    6c:01:6e:cd:b3:31:f1:3b:62:bf:5a:4b:90:10:3f:
                    f3:78:28:61:2d:ed:df:e9:e9:97:5b:94:a0:4e:a2:
                    cd:52:15:b6:a5:76:e1:f3:1d:c8:3b:2e:13:2e:67:
                    e2:26:f5:71:d6:cf:26:a7:0c:bf:e5:6a:61:b6:3b:
                    db:96:7c:0b:62:61:07:fe:b4:b9:af:63:ee:23:31:
                    f6:3e:98:f0:c7:d2:5e:8f:55:31:fe:41:04:70:d8:
                    8f:31:f9:85:85:34:c6:a3:9c:23:09:81:f0:62:86:
                    d0:b4:56:9e:e8:1f:db:79:a6:0d:ca:55:be:56:f7:
                    42:b5:8c:4b:83:c9:18:46:00:2b:12:a9:34:dc:79:
                    8e:2f:4f:59:e6:82:ce:53:4b:71:61:d7:05:10:07:
                    13:44:88:a3:bc:fa:33:ae:be:49:ca:60:63:e0:e9:
                    c8:b5:5f:85:0c:98:c5:c6:47:38:23:e2:19:6d:11:
                    90:b2:09:a9:22:3f:f8:7b:be:f0:b2:61:c5:a1:f1:
                    af:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B5:1B:F7:6C:71:3C:1F:D6:FC:51:98:F9:C5:1C:13:CD:D0:AA:09
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34382e302f32302d3230203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:8c:7e:5a:6a:72:6d:f2:d5:06:96:3c:49:a8:34:12:88:7b:
         fd:e1:28:67:83:e5:4e:0a:f8:ff:0b:81:2d:61:9e:e8:3b:fb:
         20:14:6a:33:f1:80:9f:b8:34:f8:75:2e:06:92:03:fa:a9:a0:
         f6:14:ee:44:16:a3:1f:06:a5:a4:4a:55:b1:b4:69:ef:ea:3e:
         8c:d6:c0:a9:3f:a4:81:4d:55:c9:0d:47:42:47:0f:86:b6:5c:
         ae:8b:f0:37:9e:d1:28:e9:b7:59:c9:6a:f3:b2:72:ca:8b:b2:
         fe:07:91:3d:95:76:79:ad:1a:55:8b:a3:a4:8c:59:ed:3c:8b:
         01:01:06:d4:cf:4e:43:d7:2d:47:00:40:94:cc:e2:36:db:5f:
         61:c6:c6:83:f0:e9:52:9e:0c:da:d9:71:b1:c8:91:8a:a7:7c:
         fd:fb:73:12:36:4b:43:80:0a:1b:97:43:ac:29:c4:67:d8:17:
         48:a4:38:be:b5:38:7f:e8:b8:a1:9d:95:cf:c9:a4:89:e3:a4:
         09:6d:64:1a:10:35:ae:0d:aa:a6:40:30:83:6e:1d:97:5a:95:
         a2:45:1d:78:1d:0c:4c:a1:55:22:49:43:f3:d7:15:e2:98:cb:
         c4:f9:c3:1f:cc:d4:d3:8d:26:c3:5b:98:2a:93:eb:8d:e3:b1:
         93:63:ee:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:50:58 2025 by rpki-client