Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230342e302f32342d3234203d3e20323633353132.roa
File:                     3139312e3234332e3230342e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier:          iUSpErf22gJa641SBEuhOduax/ia+oEeM5jFNV3+JqQ=
Subject key identifier:   65:B7:CB:C4:E4:A8:17:A6:05:04:D1:23:96:52:B1:FE:89:D1:A7:41
Certificate issuer:       /CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Certificate serial:       224BECE7B2BAABBA171F0CD2B09D6474CE346F32
Authority key identifier: 8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230342e302f32342d3234203d3e20323633353132.roa
Signing time:             Thu 25 Jan 2024 15:30:16 +0000
ROA not before:           Thu 25 Jan 2024 15:25:16 +0000
ROA not after:            Thu 23 Jan 2025 15:30:16 +0000
asID:                     263512
IP address blocks:        191.243.204.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4b:ec:e7:b2:ba:ab:ba:17:1f:0c:d2:b0:9d:64:74:ce:34:6f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
        Validity
            Not Before: Jan 25 15:25:16 2024 GMT
            Not After : Jan 23 15:30:16 2025 GMT
        Subject: CN=65B7CBC4E4A817A60504D1239652B1FE89D1A741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:32:ad:a1:b1:f1:7b:99:39:80:e5:28:c9:50:
                    b0:03:1b:6c:dc:f1:31:a9:52:e0:7b:75:5f:56:c9:
                    0f:d2:93:32:a7:37:7d:c9:1c:39:31:17:2e:7c:6d:
                    39:21:d2:5b:b8:98:10:35:86:e1:3a:2b:d2:13:b3:
                    48:a7:d9:37:c4:5c:78:63:7e:5b:18:4e:10:e7:1b:
                    c4:20:1e:7f:25:e9:0e:f4:1e:a8:e9:1d:b3:7b:74:
                    2c:d7:5f:ca:69:a8:37:04:a6:0a:6b:95:b5:da:6c:
                    76:3d:5c:7d:f2:5d:c8:ef:e8:86:3a:a6:32:54:5e:
                    ec:fe:8e:72:29:00:36:29:46:fa:08:04:54:91:f6:
                    cd:2a:73:af:34:00:fd:d8:e1:5b:3e:a0:fd:5a:df:
                    0b:f6:5f:41:ad:58:1f:2f:28:c5:2c:b2:14:5e:b4:
                    ef:93:75:e6:66:9c:e4:c5:cb:60:ea:e8:44:c9:b1:
                    e2:f3:56:3a:4f:ad:db:90:f6:d6:b7:68:86:b0:c6:
                    8d:46:78:b7:8f:8d:6a:9a:33:66:77:2f:88:70:c1:
                    ac:f5:e2:23:1a:dd:57:5e:4b:6c:eb:98:c7:4d:f7:
                    85:41:78:19:34:5e:08:84:84:41:25:dc:5a:0b:2e:
                    30:0c:af:d0:6b:71:d8:f5:48:c6:d2:a5:0c:24:e1:
                    81:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B7:CB:C4:E4:A8:17:A6:05:04:D1:23:96:52:B1:FE:89:D1:A7:41
            X509v3 Authority Key Identifier:
                keyid:8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230342e302f32342d3234203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:22:70:c2:46:d0:60:ab:fa:7d:0d:c5:bd:fa:40:a2:8a:aa:
         7e:f4:7b:67:ef:e3:a8:c7:bf:68:2e:86:85:64:68:24:93:e4:
         9a:1e:33:a4:c9:c6:34:46:e2:c1:61:8a:37:c8:5a:d3:3c:49:
         7e:4a:78:6e:ff:a4:80:d2:40:49:fd:a0:54:21:7f:66:c4:57:
         a7:1a:0a:4d:e0:36:84:ca:3c:a9:de:f6:71:3c:11:95:94:28:
         0f:7a:64:fe:df:92:e8:bb:89:0d:01:f1:50:52:45:7f:00:97:
         c3:5d:65:35:bc:f1:a2:5c:c8:7f:af:68:6f:a3:8d:6f:21:7d:
         11:5e:0c:be:95:d8:b3:31:1e:00:70:90:b0:4c:9c:e9:d8:d7:
         8a:82:c9:f0:5a:a1:5a:ae:5f:1c:a6:6f:67:95:1b:c1:70:dc:
         29:16:4f:78:eb:44:0f:11:fc:27:02:c7:94:c4:f9:35:67:38:
         c8:57:89:f2:ff:b7:89:30:c8:ff:f2:e7:28:10:2b:a5:31:ae:
         2b:c0:a5:17:22:1b:68:a4:75:61:2d:de:ab:61:09:4b:0e:93:
         a0:88:b3:b1:f0:ba:1a:54:92:e6:b8:f9:75:16:0c:40:90:33:
         b1:6f:27:50:b1:9b:72:60:52:58:5f:02:ea:8e:e8:48:3a:75:
         23:89:6d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:53 2025 by rpki-client