Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa
File:                     3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier:          ygOKKxTB/O8C399YuqUoaH2NG+2X8Q7ieA3QFkDorfc=
Subject key identifier:   6B:4E:64:BF:2E:93:8F:DE:03:5D:B9:DC:C3:68:DD:D9:50:DA:8A:CA
Certificate issuer:       /CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Certificate serial:       27DB89D77F55F9890432A555E3F52C99F899EA12
Authority key identifier: 8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa
Signing time:             Thu 25 Jan 2024 15:32:02 +0000
ROA not before:           Thu 25 Jan 2024 15:27:02 +0000
ROA not after:            Thu 23 Jan 2025 15:32:02 +0000
asID:                     263512
IP address blocks:        191.243.201.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:db:89:d7:7f:55:f9:89:04:32:a5:55:e3:f5:2c:99:f8:99:ea:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
        Validity
            Not Before: Jan 25 15:27:02 2024 GMT
            Not After : Jan 23 15:32:02 2025 GMT
        Subject: CN=6B4E64BF2E938FDE035DB9DCC368DDD950DA8ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:97:39:c6:92:42:1c:e1:7c:d7:1f:bc:59:ba:
                    77:61:7e:30:0b:66:c9:ac:b5:fb:78:c9:b9:d2:73:
                    19:e8:6a:e6:38:21:a2:c1:6d:95:b6:e6:70:01:b8:
                    07:24:2a:cf:53:e5:c1:a6:2b:6a:53:9d:56:57:fe:
                    c5:1e:f3:3c:fd:d3:69:0d:07:69:ca:0a:13:97:0a:
                    6a:68:46:7e:b4:88:a5:d4:e1:50:66:69:4a:88:f3:
                    8f:e6:73:4c:4e:a4:e9:8d:d3:3d:ea:29:e3:d6:5a:
                    79:d6:90:1b:44:a7:62:a2:1e:92:c1:24:b6:5e:10:
                    79:38:dc:f1:36:f9:51:bc:68:e2:98:5e:83:8f:cd:
                    e3:cf:b1:0c:59:18:8c:1e:c9:d7:26:04:ea:15:b5:
                    7c:df:8a:70:4a:2d:bb:7a:1a:57:ac:76:48:52:b2:
                    27:22:de:5b:7f:74:39:cc:93:8f:5f:bc:38:59:36:
                    bd:f5:86:04:72:6c:ae:dc:b6:5b:86:75:46:2a:65:
                    10:13:24:d1:4c:67:30:60:bd:36:07:65:4b:08:d9:
                    9a:5f:e9:6c:f7:5c:b8:48:59:0e:4b:ed:29:90:e4:
                    e4:c6:15:18:93:5b:5c:32:24:34:44:f3:26:43:7d:
                    84:8b:8e:77:39:29:d8:ff:e5:bd:4c:69:21:75:8f:
                    a9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4E:64:BF:2E:93:8F:DE:03:5D:B9:DC:C3:68:DD:D9:50:DA:8A:CA
            X509v3 Authority Key Identifier:
                keyid:8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:21:b3:ed:5b:c1:08:7c:5c:f2:a3:e0:3f:ed:a7:13:19:64:
         90:c4:c1:c7:8c:d3:81:51:80:2b:7a:ef:45:a7:43:29:36:91:
         7e:1c:45:c4:b8:59:25:22:dc:8f:ae:36:36:d0:63:ed:b6:3a:
         1b:c8:d1:f9:0c:0e:ab:dd:26:e7:70:26:83:4b:ad:50:3f:1e:
         7b:08:88:36:0f:4b:f9:ba:8e:12:b3:5f:88:d7:9c:db:83:b0:
         83:a9:7b:b3:28:ba:8e:27:97:3b:5a:13:96:41:c4:1f:cb:50:
         e8:95:6d:91:73:b5:93:3a:d0:6f:c6:7f:b1:8f:37:b7:58:f1:
         5a:a3:5b:e4:33:95:ba:21:72:c0:da:dd:a2:de:d5:70:d4:30:
         3f:92:6b:fa:8f:98:03:9a:62:37:a8:15:bd:bd:7f:56:96:fe:
         7e:b4:9f:4f:52:39:0d:0a:f5:5c:88:f2:08:51:c7:67:c9:cf:
         1c:79:bf:06:d8:cb:aa:f6:50:03:d7:06:74:8e:63:41:06:c2:
         e3:cc:bb:e2:de:e3:7d:aa:c6:7e:79:db:8c:81:54:87:7d:d4:
         1a:69:1b:a6:58:e8:3b:a4:68:d8:f4:46:61:06:e9:9e:e0:38:
         6e:2c:90:e4:53:77:8e:45:a3:17:8d:e5:e3:da:32:8c:04:8d:
         fd:22:07:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:52:48 2025 by rpki-client