Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231372e302f32342d3234203d3e20323632383038.roa
File:                     3139312e3235332e3231372e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          O8T6nLmo4X9adr6UCvRk/pOLOgUuLnDQVqtszdFFojU=
Subject key identifier:   7F:4E:72:0F:2A:DE:CE:D4:6E:9B:8A:0B:8B:A6:E9:E8:53:A4:D0:CD
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       7FBFE607B9550CE45250B8C1216C4DE7F24D00E6
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231372e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:29 +0000
ROA not before:           Tue 10 Oct 2023 13:52:29 +0000
ROA not after:            Tue 08 Oct 2024 13:57:29 +0000
asID:                     262808
IP address blocks:        191.253.217.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:bf:e6:07:b9:55:0c:e4:52:50:b8:c1:21:6c:4d:e7:f2:4d:00:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:29 2023 GMT
            Not After : Oct  8 13:57:29 2024 GMT
        Subject: CN=7F4E720F2ADECED46E9B8A0B8BA6E9E853A4D0CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:70:d4:c6:fb:56:02:ba:6f:4f:06:e2:80:70:
                    98:30:aa:82:f5:51:b9:cf:fc:f0:c2:2a:97:c3:34:
                    7d:73:2e:b2:c4:dd:f4:3f:f2:32:c5:59:d4:8b:80:
                    1c:1f:81:b0:ed:80:14:9b:f2:5a:5b:0d:a8:1c:4c:
                    f2:10:6a:1a:a5:4a:ca:91:e6:02:dc:8c:14:83:85:
                    95:50:32:04:b4:44:f6:4c:7b:b1:d7:e0:a3:0d:2a:
                    55:9c:10:48:b9:68:03:e8:62:5e:fe:4f:0b:36:e5:
                    ee:46:97:76:d5:6a:e3:85:5b:be:d5:2a:f3:4f:f4:
                    09:67:90:2c:0b:69:8b:bc:70:82:c6:9d:43:2a:db:
                    88:cf:59:2c:ec:a7:8e:7e:e7:6d:88:7b:a3:c8:28:
                    03:75:db:dc:56:c4:3f:f0:dd:53:f4:22:b0:1c:3f:
                    7c:57:e6:fa:50:82:2e:f5:d1:03:6e:91:0e:b9:f6:
                    61:23:0a:50:07:ef:69:e8:4f:d7:df:7d:18:dc:3b:
                    17:85:0e:bc:5a:1e:3f:d1:c4:f3:b7:2f:e7:fd:0a:
                    96:f1:ac:06:2f:6b:30:bf:ca:a5:3e:28:5b:02:ef:
                    ff:ad:cf:b5:dc:dc:e8:fa:87:84:d3:b9:c8:ce:4e:
                    23:27:69:6e:60:43:eb:a7:dd:dc:37:5e:32:44:98:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4E:72:0F:2A:DE:CE:D4:6E:9B:8A:0B:8B:A6:E9:E8:53:A4:D0:CD
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231372e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:be:49:5f:39:25:81:d6:35:c9:67:f1:39:4d:57:70:5f:c6:
         00:f0:6a:6a:77:64:b0:05:11:5a:b1:00:83:90:33:a6:c9:9b:
         b1:f2:8c:e2:7b:21:48:83:ea:c3:14:e3:57:23:44:54:d1:8f:
         bd:cb:72:90:d4:b7:49:6b:01:fd:3a:34:c0:b4:69:be:63:57:
         92:36:c4:a8:58:be:37:86:53:2f:5c:61:b7:bf:d4:0d:8f:9c:
         e8:3b:aa:77:2d:17:0f:7e:a7:58:e6:8a:45:4f:1c:01:b8:67:
         8e:1e:ab:7e:bd:02:bc:eb:e3:d6:44:34:f1:5b:3d:86:55:49:
         6e:5b:be:5a:e0:12:55:af:e4:2a:7e:cc:5a:68:05:ed:ae:e4:
         93:35:2e:ea:5a:17:e6:b6:d6:37:88:ef:33:28:3c:36:dc:00:
         bb:ba:4f:0c:cb:37:7a:1c:a2:09:e5:fc:dd:45:38:f6:13:ef:
         c8:59:19:0c:15:8e:82:14:b2:7d:ec:b7:11:88:7b:00:37:b3:
         dd:58:e4:27:60:f6:37:dc:19:82:d8:cf:9a:06:cc:6f:31:73:
         74:2f:ef:a3:54:b7:6c:2e:2a:ba:8f:67:25:e8:2f:5a:73:aa:
         4f:c3:63:23:75:8f:43:4d:f1:9a:41:5a:88:0b:ee:34:7a:a3:
         8a:09:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:20 2025 by rpki-client