Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3230392e302f32342d3234203d3e20323632383038.roa
File:                     3139312e3235332e3230392e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          dtzXv0VzNS+mqlzyJJBOI/DMckEQmAcLLwoAQwNP9XI=
Subject key identifier:   11:D2:DC:36:86:2A:18:E3:A7:C6:AC:79:4E:68:20:B0:70:9F:AC:FD
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       7FE6BB36DF572F691AB4C2E7CDF0899826C74EA1
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3230392e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:23 +0000
ROA not before:           Tue 10 Oct 2023 13:52:23 +0000
ROA not after:            Tue 08 Oct 2024 13:57:23 +0000
asID:                     262808
IP address blocks:        191.253.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e6:bb:36:df:57:2f:69:1a:b4:c2:e7:cd:f0:89:98:26:c7:4e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:23 2023 GMT
            Not After : Oct  8 13:57:23 2024 GMT
        Subject: CN=11D2DC36862A18E3A7C6AC794E6820B0709FACFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:94:02:49:c1:c1:b9:59:82:4b:96:bd:2b:f3:
                    01:d0:3a:d6:f9:78:dc:ca:79:40:56:9b:24:97:28:
                    d4:eb:51:0a:8f:05:83:48:b9:0d:e5:f9:c3:eb:9f:
                    c7:cc:fb:50:0b:21:da:c3:b5:c3:ee:16:f9:f9:94:
                    66:ac:bc:3e:5d:7a:2f:07:cb:29:1f:b4:3b:d2:c9:
                    d0:b6:b2:69:61:ef:18:a3:8d:35:45:2e:c5:34:d3:
                    a2:d2:a5:78:14:33:8c:15:34:06:06:36:93:39:21:
                    84:27:fc:7f:b7:67:67:3a:61:4f:fd:c1:f4:f8:cc:
                    21:1a:c6:9d:8b:9b:1c:39:ec:1d:82:c4:fa:d3:95:
                    a0:c7:2e:ff:e0:7d:43:68:d4:90:40:e9:2c:bd:65:
                    30:d3:c4:00:1a:1d:f0:c3:2c:29:25:ad:ba:3e:53:
                    e7:f7:29:b7:b8:35:9f:59:9a:56:b9:f5:54:5c:77:
                    4a:05:4c:68:4e:ec:9f:36:90:91:c1:23:c9:64:9d:
                    56:10:6d:ee:9b:67:ff:71:8e:90:9d:74:52:fd:45:
                    6d:52:9b:59:8f:9b:8f:02:6b:0b:b1:d7:f8:5b:5c:
                    a8:38:78:bb:20:e9:fc:94:f5:59:17:83:42:11:60:
                    6c:b7:d6:bc:45:9a:8c:b1:9e:42:e3:a7:f3:88:49:
                    cc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D2:DC:36:86:2A:18:E3:A7:C6:AC:79:4E:68:20:B0:70:9F:AC:FD
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3230392e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:cd:fe:57:d4:bd:ad:ce:d1:51:42:d0:37:33:ce:3a:6e:21:
         ed:17:4d:82:a4:9d:cd:72:40:0d:b3:0b:81:d2:89:5a:73:3f:
         f0:95:87:5b:0b:58:f1:3b:f2:3c:d8:d5:68:be:81:b2:21:58:
         13:ac:21:7f:79:b5:d2:70:03:ef:4b:7d:04:41:a4:bb:4e:af:
         53:8f:83:d2:68:14:1b:9e:b1:38:37:89:8b:2c:14:70:4c:1d:
         a2:0f:70:17:7f:67:7c:30:1c:ae:31:ce:29:e5:00:3a:84:dd:
         34:97:3a:57:92:50:12:f7:95:7e:9e:65:b7:d4:c0:6e:1b:5f:
         77:ab:26:13:02:80:bf:d2:0f:78:7c:da:92:8c:ff:eb:36:3b:
         45:7b:42:a0:49:62:e2:04:bc:f1:91:6d:48:48:09:fd:5b:3d:
         15:a2:5a:3e:e2:1a:b0:76:d4:47:a5:a9:b5:87:f5:92:29:16:
         26:bc:53:32:80:f5:43:1c:ac:be:4d:8f:25:10:98:8e:56:8e:
         da:0f:50:62:dd:4f:3c:73:17:24:0b:ba:6a:ca:c7:8d:10:3c:
         c1:74:1c:c8:43:a8:b7:6f:fc:59:61:a5:0c:fb:b3:b0:f1:33:
         58:d3:89:24:96:f8:86:cc:0e:5d:20:6c:cd:cc:08:aa:d1:3c:
         c9:a1:8b:fd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUf+a7Nt9XL2katMLnzfCJmCbHTqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFFQjBDNDE4MUY5MkIxMjMwQjBEMUI5ODg5MjMxMUUy
QjcwODM0QTAeFw0yMzEwMTAxMzUyMjNaFw0yNDEwMDgxMzU3MjNaMDMxMTAvBgNV
BAMTKDExRDJEQzM2ODYyQTE4RTNBN0M2QUM3OTRFNjgyMEIwNzA5RkFDRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblAJJwcG5WYJLlr0r8wHQOtb5
eNzKeUBWmySXKNTrUQqPBYNIuQ3l+cPrn8fM+1ALIdrDtcPuFvn5lGasvD5dei8H
yykftDvSydC2smlh7xijjTVFLsU006LSpXgUM4wVNAYGNpM5IYQn/H+3Z2c6YU/9
wfT4zCEaxp2Lmxw57B2CxPrTlaDHLv/gfUNo1JBA6Sy9ZTDTxAAaHfDDLCklrbo+
U+f3Kbe4NZ9Zmla59VRcd0oFTGhO7J82kJHBI8lknVYQbe6bZ/9xjpCddFL9RW1S
m1mPm48Cawux1/hbXKg4eLsg6fyU9VkXg0IRYGy31rxFmoyxnkLjp/OIScxdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUEdLcNoYqGOOnxqx5TmggsHCfrP0wHwYDVR0j
BBgwFoAUAesMQYH5KxIwsNG5iJIxHitwg0owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTNUNGl4WVE0N3NXRXpKWGlqRUFaYVZVdjdHQ0MxcWE4Yjl6R1R4NkhW
TWgvMC8wMUVCMEM0MTgxRjkyQjEyMzBCMEQxQjk4ODkyMzExRTJCNzA4MzRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAxRUIwQzQxODFGOTJCMTIz
MEIwRDFCOTg4OTIzMTFFMkI3MDgzNEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EzVDRpeFlRNDdzV0V6SlhpakVBWmFWVXY3R0NDMXFhOGI5ekdUeDZIVk1oLzAv
MzEzOTMxMmUzMjM1MzMyZTMyMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM4MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/90TANBgkqhkiG9w0BAQsFAAOCAQEATc3+
V9S9rc7RUULQNzPOOm4h7RdNgqSdzXJADbMLgdKJWnM/8JWHWwtY8TvyPNjVaL6B
siFYE6whf3m10nAD70t9BEGku06vU4+D0mgUG56xODeJiywUcEwdog9wF39nfDAc
rjHOKeUAOoTdNJc6V5JQEveVfp5lt9TAbhtfd6smEwKAv9IPeHzakoz/6zY7RXtC
oEli4gS88ZFtSEgJ/Vs9FaJaPuIasHbUR6WptYf1kikWJrxTMoD1Qxysvk2PJRCY
jlaO2g9QYt1PPHMXJAu6asrHjRA8wXQcyEOot2/8WWGlDPuzsPEzWNOJJJb4hswO
XSBszcwIqtE8yaGL/Q==
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:15:52 2025 by rpki-client