Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230302e302f32312d3231203d3e20323633353132.roa
File:                     3139312e3234332e3230302e302f32312d3231203d3e20323633353132.roa (raw, json)
Hash identifier:          j+YTO2SNoJicIJlcTUI3761ywP60WNERNZ8TLJ+vOY4=
Subject key identifier:   14:78:09:E7:B9:A5:8A:33:0A:82:E5:5D:45:E6:FF:A3:75:63:A7:7F
Certificate issuer:       /CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Certificate serial:       4FFEFB19769B124830AAD8E7BBE261AFD2943472
Authority key identifier: 8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230302e302f32312d3231203d3e20323633353132.roa
Signing time:             Thu 04 Jan 2024 22:00:00 +0000
ROA not before:           Thu 04 Jan 2024 21:55:00 +0000
ROA not after:            Thu 02 Jan 2025 22:00:00 +0000
asID:                     263512
IP address blocks:        191.243.200.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:fe:fb:19:76:9b:12:48:30:aa:d8:e7:bb:e2:61:af:d2:94:34:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
        Validity
            Not Before: Jan  4 21:55:00 2024 GMT
            Not After : Jan  2 22:00:00 2025 GMT
        Subject: CN=147809E7B9A58A330A82E55D45E6FFA37563A77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:c1:ae:c4:fa:8c:be:f9:61:b7:84:b7:a9:
                    a4:d9:ad:a0:8f:43:21:12:0f:24:85:21:20:30:85:
                    17:46:dd:85:37:c6:f2:1c:14:b2:5c:46:f8:6e:3a:
                    8d:7f:18:53:dd:1b:56:3f:e6:c8:0e:44:24:96:8f:
                    20:84:e6:0d:d7:39:1d:43:65:05:4c:c5:e4:31:3d:
                    1f:34:6e:15:79:f3:f2:4d:dd:fd:3b:b6:77:6e:5f:
                    16:9f:13:53:d2:07:91:e6:a6:c1:15:48:ee:53:22:
                    ff:a9:08:d9:7a:48:d5:7f:6b:8e:f3:60:18:0d:d4:
                    19:2b:e4:07:0b:2d:a9:44:1e:2e:cb:68:b9:99:9c:
                    18:78:9e:01:2d:cd:4d:97:d1:6d:de:cf:d6:2f:b9:
                    f8:37:32:56:61:26:68:4f:9c:7b:88:67:2a:b8:8b:
                    05:4d:66:bd:1e:d6:b0:74:39:ee:55:f5:1d:86:22:
                    47:12:c8:ed:2a:a0:90:64:fb:f5:d4:aa:d0:be:1c:
                    4c:58:6b:52:92:2c:86:5f:f4:84:1b:89:d7:29:68:
                    7d:e4:5b:25:f3:f8:37:41:40:37:eb:ab:ac:be:e1:
                    bf:a2:cb:23:4a:a8:c6:99:f2:cc:e4:db:db:51:8b:
                    ce:d3:bb:3a:24:3a:2a:e6:1f:87:2f:8d:57:8e:df:
                    cd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:78:09:E7:B9:A5:8A:33:0A:82:E5:5D:45:E6:FF:A3:75:63:A7:7F
            X509v3 Authority Key Identifier:
                keyid:8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230302e302f32312d3231203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:2b:09:92:6a:04:60:d4:c4:4c:b3:e8:2f:77:33:d4:13:57:
         8e:b5:d8:1f:64:19:22:06:c9:2b:fa:ab:3a:37:4b:08:ba:91:
         3f:e9:f9:18:49:5e:e1:8b:c7:48:cb:7f:bf:84:21:b8:60:d2:
         2a:47:97:40:31:4d:f2:2b:4c:33:38:02:5b:1c:b3:a4:41:dc:
         be:31:d8:13:75:f7:50:31:fc:ec:22:00:96:c0:4c:05:44:24:
         89:a6:86:9e:d7:a1:e0:71:14:54:81:c8:23:6f:7d:6e:e6:6e:
         36:aa:dd:96:f4:d9:cc:22:3d:cf:e7:3a:dc:d0:60:7b:0c:93:
         34:44:3b:4b:1a:84:4d:d2:ca:b7:18:b4:91:95:8b:4e:fb:76:
         dd:4a:9d:44:26:fe:60:17:1b:bb:f7:f0:c0:4f:10:8f:0d:4f:
         ac:69:b1:7c:d3:55:b2:c4:b9:d7:56:b0:e0:1e:c5:b3:76:44:
         36:fc:2b:af:50:aa:9a:76:a0:ed:9d:fe:47:94:af:c0:ff:7d:
         67:40:48:ab:45:f8:38:3c:fa:bb:5a:8d:0d:1e:b0:5b:39:1c:
         11:0e:f3:f8:bd:a7:4e:c6:31:e0:be:ab:eb:05:cc:19:a6:06:
         e0:ae:a1:d2:50:5c:46:1f:0e:28:aa:9c:6f:fa:a5:6a:8b:fe:
         d0:f0:ce:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:10 2025 by rpki-client