Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230342e302f32332d3233203d3e20323633353132.roa
File:                     3139312e3234332e3230342e302f32332d3233203d3e20323633353132.roa (raw, json)
Hash identifier:          WYWs4ODpf9ooKBzpQpsXaoxTs2jPixhN5kUtRBaFK0I=
Subject key identifier:   33:2F:B0:B5:4D:70:FB:1B:71:F7:80:F0:3B:41:A5:32:C2:DA:E8:43
Certificate issuer:       /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial:       51767991FA7BDEA84DBEC8B0F6E80B768332C794
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230342e302f32332d3233203d3e20323633353132.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     263512
IP address blocks:        191.243.204.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:76:79:91:fa:7b:de:a8:4d:be:c8:b0:f6:e8:0b:76:83:32:c7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=332FB0B54D70FB1B71F780F03B41A532C2DAE843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:82:5d:f2:74:4f:9d:03:24:01:b9:d0:14:
                    4b:de:98:5a:29:ae:d4:e7:63:c5:a6:2b:b1:39:1a:
                    4f:12:71:ea:21:f3:6a:47:d6:e5:72:ea:1b:24:24:
                    3c:7e:ce:75:6b:ea:41:be:59:ae:71:db:83:4e:30:
                    30:46:81:58:ed:a3:62:0b:b5:34:19:d0:04:f4:2b:
                    92:b4:6d:96:7f:f3:eb:5a:c6:fc:32:73:a4:8d:bb:
                    54:02:45:9f:6d:b5:ba:73:dd:4a:c0:50:4a:30:1e:
                    c2:c8:2b:2e:cf:0f:7b:d7:e9:36:ca:ac:3c:68:0e:
                    15:0e:dd:91:b0:b0:fd:f1:af:fb:22:d5:db:94:97:
                    fa:c2:59:98:07:69:e2:32:d9:84:03:05:e0:86:d3:
                    4c:3a:53:dd:66:46:f4:c9:8c:e4:99:fd:6a:cf:3a:
                    5e:48:72:cf:7e:4a:f9:2d:d7:d5:13:fb:67:6c:47:
                    3a:50:f4:99:41:c4:fe:f8:16:38:04:ac:c0:ec:6d:
                    9b:27:a6:a0:ef:d4:6f:aa:0e:b2:c9:5e:65:e5:75:
                    b9:cc:f0:f3:dd:75:9b:b4:f3:fc:94:f5:bc:ac:ac:
                    7b:bd:d9:12:34:0b:13:de:37:33:33:2e:2b:fe:aa:
                    3e:af:1a:b6:10:f5:e6:f0:a2:b1:32:30:ca:7e:aa:
                    3f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2F:B0:B5:4D:70:FB:1B:71:F7:80:F0:3B:41:A5:32:C2:DA:E8:43
            X509v3 Authority Key Identifier:
                keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230342e302f32332d3233203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:4b:27:47:62:cb:f7:48:28:51:3a:77:25:20:9d:f6:60:82:
         b9:aa:be:c3:74:dd:76:7e:c0:52:65:2e:cb:d8:59:89:63:df:
         94:dd:b4:ef:bf:cb:c2:d2:ac:ab:01:c8:ee:20:85:a4:32:26:
         ed:95:24:c4:47:cc:a6:34:e2:9e:be:46:59:67:7f:c1:c6:47:
         9c:db:3d:a8:d6:d6:4d:f3:43:12:7f:b3:98:d6:af:42:24:f8:
         8d:3b:5e:25:f9:c9:67:bd:72:f1:3d:07:7d:81:02:3e:d6:a3:
         c0:da:99:b8:75:34:39:60:6d:60:9f:78:fd:1d:e6:69:78:fd:
         e8:d0:0b:2d:76:ae:73:58:25:57:65:b1:96:a1:dd:dc:95:cb:
         d0:a6:db:de:04:1d:3b:59:0a:13:99:78:7f:9a:57:4f:ab:1e:
         6a:81:8d:d5:02:7a:c5:8e:68:76:54:e3:0d:bb:e6:fb:da:7f:
         c2:23:82:30:2d:35:9b:82:f6:9e:4e:b2:6c:d6:70:81:2d:55:
         55:e2:27:21:4a:1a:e9:8c:0c:44:0c:9a:ee:24:9e:3a:30:3f:
         2b:df:b8:29:b7:03:59:5c:5d:93:ab:4f:c7:4a:3f:08:d8:44:
         5a:be:07:a5:80:f0:63:ba:32:c1:fa:49:3b:f5:41:21:35:ab:
         c8:eb:ef:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:35:52 2025 by rpki-client