Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3230382e302f32342d3234203d3e20323632383038.roa
File:                     3139312e3235332e3230382e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          IR5QUd1NaQf+pH5/QzpVqRaLfT5oIInaR/Mv2PxauoI=
Subject key identifier:   BA:17:23:3F:AA:93:6C:07:75:3B:8B:28:3E:74:36:2A:1A:40:11:F1
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       9B54E4A2A402D49E89DB7982851BCCC42050D4
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3230382e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:24 +0000
ROA not before:           Tue 10 Oct 2023 13:52:24 +0000
ROA not after:            Tue 08 Oct 2024 13:57:24 +0000
asID:                     262808
IP address blocks:        191.253.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9b:54:e4:a2:a4:02:d4:9e:89:db:79:82:85:1b:cc:c4:20:50:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:24 2023 GMT
            Not After : Oct  8 13:57:24 2024 GMT
        Subject: CN=BA17233FAA936C07753B8B283E74362A1A4011F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3d:08:aa:88:a6:cd:25:cf:5b:10:61:62:b9:
                    0f:27:32:94:a9:31:fa:a5:5f:c0:ad:99:fa:91:cc:
                    8e:a3:81:75:8a:55:a5:55:43:53:1d:2c:24:3b:46:
                    c1:19:b9:cf:9a:d8:65:06:e5:65:47:e6:4b:4c:65:
                    aa:b2:e3:5e:7d:a6:6e:c2:e4:bf:a9:2e:99:2d:41:
                    64:4d:5f:30:d1:38:51:49:b6:c8:e1:f6:a8:7b:09:
                    23:af:87:df:9b:ee:13:a5:35:a2:76:9f:bb:ee:44:
                    36:dd:7b:26:75:39:c7:52:44:b7:a7:93:93:ff:0b:
                    39:ac:16:11:b1:7c:47:65:14:fc:4d:84:40:3d:34:
                    7b:f8:16:25:4a:f6:ff:ee:c8:68:23:df:67:b6:bf:
                    f6:b8:c8:e0:6c:89:35:20:b3:f4:ea:a6:f6:b6:98:
                    60:ba:1b:68:08:52:71:12:22:05:8d:a4:a0:49:64:
                    3e:51:ce:50:fb:23:3d:46:78:09:d7:d0:19:32:01:
                    1f:a4:73:81:10:f2:03:08:42:fa:eb:8f:6f:d2:c2:
                    bb:1a:a3:a3:37:a1:77:19:a5:ae:e1:ad:64:ad:ab:
                    71:c2:d3:aa:21:1f:3e:60:7e:41:4d:ae:30:97:13:
                    34:1f:f8:d2:23:7e:c1:fb:59:1f:72:7f:48:c8:b9:
                    66:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:17:23:3F:AA:93:6C:07:75:3B:8B:28:3E:74:36:2A:1A:40:11:F1
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3230382e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:58:c3:3b:f7:03:8f:1e:12:99:c5:78:c0:46:62:72:93:dd:
         00:3e:c1:5d:a4:7c:10:79:37:a0:66:e0:f6:2f:4f:dc:fe:33:
         3f:de:82:d1:34:47:ab:33:4c:10:30:10:7e:f3:67:14:86:d5:
         40:29:f9:e2:1a:9c:66:1b:6d:9c:70:ad:99:81:df:04:22:af:
         ee:43:e1:d2:30:ef:47:ee:32:fc:93:d4:c9:ea:3d:02:bc:42:
         b3:5c:ea:cc:9c:1b:27:24:0b:60:75:7f:ce:76:fd:aa:f9:68:
         76:dd:98:bd:5f:65:98:7f:c6:4c:10:0a:94:8e:65:f8:b0:35:
         af:fc:f8:1d:e3:a0:30:2b:6c:aa:92:c5:63:b9:80:a6:df:6f:
         ea:9e:fd:26:26:f2:d8:85:c8:66:e3:47:03:87:6d:79:81:ee:
         5d:aa:73:de:22:47:28:f5:3d:a3:65:48:91:15:6f:70:05:b8:
         20:e2:0e:81:b7:4a:67:2d:f6:5e:c5:2f:42:7d:16:32:b4:67:
         ce:42:a2:b8:c5:f5:4c:8d:05:b2:85:f2:15:24:03:b5:0d:3e:
         e7:5d:57:5d:96:12:43:ca:8e:77:4e:c2:7e:ee:de:7c:41:b2:
         83:9c:ec:42:dc:11:59:f9:91:2e:65:16:9f:4c:ed:d7:ef:82:
         72:d5:9b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:37 2025 by rpki-client