Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230352e302f32342d3234203d3e20323633353132.roa
File:                     3139312e3234332e3230352e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier:          uZrvmpeTseA9gRNMYB7/EGM3Xx3eFRm1R6KS2nkr5nw=
Subject key identifier:   4C:B6:A5:05:E2:C9:DC:13:F1:1B:0F:11:A4:90:0B:7D:7B:65:21:8B
Certificate issuer:       /CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Certificate serial:       210194B340BF56E98D76D337A64CFD3254551D15
Authority key identifier: 8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230352e302f32342d3234203d3e20323633353132.roa
Signing time:             Thu 25 Jan 2024 15:30:35 +0000
ROA not before:           Thu 25 Jan 2024 15:25:35 +0000
ROA not after:            Thu 23 Jan 2025 15:30:35 +0000
asID:                     263512
IP address blocks:        191.243.205.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:01:94:b3:40:bf:56:e9:8d:76:d3:37:a6:4c:fd:32:54:55:1d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
        Validity
            Not Before: Jan 25 15:25:35 2024 GMT
            Not After : Jan 23 15:30:35 2025 GMT
        Subject: CN=4CB6A505E2C9DC13F11B0F11A4900B7D7B65218B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:10:ff:72:61:e7:4b:27:94:1a:36:3b:a2:a1:
                    9e:93:e3:77:d8:3a:34:2f:1f:0a:ba:17:8a:07:88:
                    98:b6:20:c6:67:36:91:af:9b:09:8f:0b:59:fc:27:
                    f3:0f:d0:0f:cf:e8:42:6d:e2:1f:28:13:db:ab:aa:
                    8b:bc:ae:f3:5b:59:71:8a:02:92:64:94:68:78:cd:
                    b4:38:2a:91:94:a8:20:c9:45:7b:7c:90:c6:d5:22:
                    62:8b:ce:03:88:95:82:b9:e5:ea:1c:1e:ff:d3:9f:
                    1e:a7:34:41:c5:61:e6:c6:82:77:32:af:15:0e:3a:
                    41:a0:83:2a:f6:c0:c7:a5:85:5b:11:76:d1:86:93:
                    02:ff:14:eb:30:4c:20:5d:ee:42:ea:d6:57:ab:99:
                    b6:3f:93:5a:ae:b2:d8:55:b4:3e:4f:9e:1a:85:ba:
                    d0:9f:f8:b4:bc:15:0e:66:6f:c7:74:ed:e4:92:b9:
                    38:98:10:30:9e:05:4e:df:fc:98:cd:b8:c5:ee:1c:
                    0d:6d:8d:8b:0b:d7:2e:9f:05:e0:e4:23:95:6e:b0:
                    6c:47:97:84:7c:c7:a6:ca:d5:48:13:f4:16:cd:d2:
                    a9:a5:da:db:4d:0a:56:ed:34:ad:21:87:67:6b:6c:
                    61:bd:81:4e:50:32:36:c2:a8:a4:b4:db:03:4a:fe:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B6:A5:05:E2:C9:DC:13:F1:1B:0F:11:A4:90:0B:7D:7B:65:21:8B
            X509v3 Authority Key Identifier:
                keyid:8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/3139312e3234332e3230352e302f32342d3234203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:44:a4:97:96:da:1d:23:02:3b:32:93:6b:ac:14:76:32:8a:
         81:e4:0d:2f:49:39:1c:61:b0:7e:b5:65:75:d5:bd:85:9c:16:
         8e:63:df:5f:c4:a9:12:21:e6:e5:ed:7f:e6:09:8b:da:da:38:
         2c:38:17:9d:64:c2:44:45:08:e7:86:b0:52:77:e0:d1:1b:64:
         d1:a3:35:69:1e:06:69:f6:39:43:20:a1:30:d2:39:9f:c9:ff:
         65:9d:da:d9:77:3d:3f:e3:34:a7:12:d7:c6:04:4f:b5:2c:a8:
         9f:f9:19:fc:b3:6c:97:7a:07:69:10:0a:c1:9f:3c:40:61:c2:
         4c:e4:76:1e:ba:49:15:17:01:84:81:a0:f8:26:6a:fb:07:55:
         3d:45:89:d2:12:88:b0:3f:9a:2e:47:2a:c8:8b:89:f0:6f:b0:
         d2:15:86:d0:b9:10:2b:a2:ec:fe:52:eb:e4:f6:2e:c8:f0:82:
         49:e8:84:d9:00:d4:57:1b:31:14:72:71:bf:74:56:08:d7:39:
         52:e0:e8:c8:6e:55:81:55:f9:77:74:81:1d:4f:e8:9e:32:a2:
         0b:bf:48:07:7e:73:11:1b:0c:71:b3:1e:00:7d:a7:50:f0:12:
         ea:59:74:1d:4c:32:d5:8b:9c:00:76:ec:38:01:2f:b0:c3:96:
         c3:d9:8c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:40 2025 by rpki-client