Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230322e302f32332d3233203d3e20323633353132.roa
File:                     3139312e3234332e3230322e302f32332d3233203d3e20323633353132.roa (raw, json)
Hash identifier:          gSF/j8aYvYtV3mPFE0IY7NJoh5EiNvkQbCefczem51E=
Subject key identifier:   4E:4F:05:07:96:C7:67:DD:1A:4C:0D:25:53:38:52:6D:E4:B0:17:E2
Certificate issuer:       /CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Certificate serial:       0D8868674BDB270DAA87D0ED59C66BB0289A5F6D
Authority key identifier: 8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230322e302f32332d3233203d3e20323633353132.roa
Signing time:             Thu 04 Jan 2024 22:00:01 +0000
ROA not before:           Thu 04 Jan 2024 21:55:01 +0000
ROA not after:            Thu 02 Jan 2025 22:00:01 +0000
asID:                     263512
IP address blocks:        191.243.202.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:88:68:67:4b:db:27:0d:aa:87:d0:ed:59:c6:6b:b0:28:9a:5f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
        Validity
            Not Before: Jan  4 21:55:01 2024 GMT
            Not After : Jan  2 22:00:01 2025 GMT
        Subject: CN=4E4F050796C767DD1A4C0D255338526DE4B017E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:19:92:93:d8:43:21:16:c0:64:cd:fb:ba:db:
                    cb:ee:63:33:8b:b4:81:9e:bd:26:cc:65:1d:a2:5f:
                    2c:40:fd:65:86:6c:7e:2b:bf:81:99:ee:41:5d:12:
                    3c:21:ac:87:7f:d4:06:22:44:69:75:67:8b:94:f3:
                    e4:d5:4b:6a:9e:fb:b4:c4:95:49:57:b8:eb:10:5e:
                    80:83:fe:f3:31:1f:0e:c9:08:98:54:1e:5b:f7:31:
                    6f:5c:d3:c0:91:63:22:d8:71:e4:89:12:78:5b:2c:
                    c8:47:a1:94:2d:c0:18:ef:14:38:bf:c6:d5:3a:be:
                    ad:16:c2:77:a6:50:4e:b6:67:f3:f5:dc:7f:02:64:
                    bd:e3:6d:9c:54:57:18:75:e5:8b:78:be:16:77:0d:
                    91:58:8f:cd:85:17:a5:ec:ca:48:c3:03:63:67:75:
                    ed:eb:78:96:40:f1:21:51:91:57:ef:96:db:c1:3b:
                    ee:24:53:03:23:53:39:6b:95:55:d7:ca:98:32:97:
                    d4:12:c6:ca:83:87:ef:cc:cb:99:bd:ab:b2:d9:11:
                    dc:c3:21:e5:b6:5c:00:ea:55:43:5a:44:67:af:65:
                    db:e2:5c:f3:38:26:23:a5:b5:f3:46:4f:04:47:d0:
                    2d:77:b5:79:f7:b5:d6:ba:f0:23:35:e7:76:f6:fa:
                    43:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4F:05:07:96:C7:67:DD:1A:4C:0D:25:53:38:52:6D:E4:B0:17:E2
            X509v3 Authority Key Identifier:
                keyid:8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230322e302f32332d3233203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:7c:93:79:98:91:4d:38:17:32:9d:47:0b:c7:81:26:2d:56:
         d3:38:8e:3e:7a:bb:dd:92:64:9f:43:e0:2f:b0:91:ee:38:74:
         3d:6e:c4:56:8b:1a:a5:9b:4e:a4:c9:05:e1:46:34:ac:e5:1e:
         c6:07:ce:a4:b3:ef:70:ce:0f:15:86:ed:88:64:ba:43:63:99:
         b8:00:70:32:be:09:ff:a5:2d:7b:28:93:c7:7c:d8:fc:38:dd:
         6b:cb:fc:97:7e:de:82:da:eb:95:2a:fd:58:cd:2f:82:9b:2a:
         0d:fb:60:3f:2c:1b:5d:7b:40:2c:78:81:79:61:30:9e:8b:29:
         81:6b:7f:1c:cd:92:87:8a:e7:09:bc:32:e3:5d:b2:70:55:97:
         1b:a7:1e:7c:be:ec:c8:d7:69:60:3d:a3:65:03:e4:a0:87:89:
         a2:aa:6a:b4:26:9f:ad:ad:07:7e:1b:e7:07:f9:49:72:f0:9a:
         dd:05:af:51:0a:88:fd:51:3b:0e:8e:a4:8a:01:ea:68:da:5b:
         0d:2b:75:e9:7c:62:25:8c:9c:2e:7a:6a:69:3c:0f:19:0d:46:
         85:f5:f8:1f:a9:f3:5c:8d:1f:2a:f4:e0:5a:fa:4c:57:91:64:
         64:e4:b3:69:08:87:04:d6:40:ef:86:e0:0d:05:a4:14:ee:66:
         fd:a4:2d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:37 2025 by rpki-client