Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231392e302f32342d3234203d3e20323632383038.roa
File:                     3139312e3235332e3231392e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          r9Rk0qpfTJ/hhT+mbnfOfV8gq2HzUwnOvUH7KnXAJMw=
Subject key identifier:   DF:CD:A0:3D:30:BE:ED:A8:1C:58:B3:3C:12:39:CF:14:1F:DD:5E:20
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       37BD4CEC504C8629084D42CC27AA924C38689276
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231392e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:22 +0000
ROA not before:           Tue 10 Oct 2023 13:52:22 +0000
ROA not after:            Tue 08 Oct 2024 13:57:22 +0000
asID:                     262808
IP address blocks:        191.253.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:bd:4c:ec:50:4c:86:29:08:4d:42:cc:27:aa:92:4c:38:68:92:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:22 2023 GMT
            Not After : Oct  8 13:57:22 2024 GMT
        Subject: CN=DFCDA03D30BEEDA81C58B33C1239CF141FDD5E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:38:fe:3f:3d:76:01:90:b3:e7:b3:cf:79:40:
                    5f:fa:e9:0d:a9:78:b7:34:56:a8:1d:d0:01:b8:9a:
                    51:f7:52:6f:c4:81:bc:92:d3:a1:fc:2d:46:08:9a:
                    97:cf:37:5f:c5:31:d6:15:59:c2:78:42:21:05:64:
                    60:76:f6:7d:ec:e8:b5:07:93:6e:a4:6b:9f:83:2d:
                    98:19:7e:b1:59:87:8f:98:38:b8:16:52:5f:f6:38:
                    8c:39:5e:e2:01:ff:a2:3d:d9:3d:17:3b:02:13:cd:
                    e8:90:fc:84:c0:43:93:4e:02:ab:41:14:9f:93:25:
                    86:b0:10:c2:69:5f:f3:26:02:d0:b5:5e:92:dc:5c:
                    2f:02:56:5e:51:83:f8:76:61:64:43:2c:b9:e7:d3:
                    e6:1b:bc:fd:67:85:5e:59:d3:72:d8:65:2b:56:9a:
                    44:84:ad:bc:ef:a0:b1:eb:de:21:34:28:90:d2:3c:
                    a7:80:1a:55:10:c6:2d:e1:55:62:75:68:55:af:a1:
                    da:4a:8f:5f:0a:ed:4b:7e:cf:1b:0f:e6:47:81:ce:
                    77:7e:c7:24:cb:21:43:ca:c8:60:8a:7e:66:72:95:
                    ad:f0:42:78:eb:04:cd:19:2c:c5:15:67:b1:e9:9b:
                    e4:76:a3:87:49:ec:26:74:0d:a8:8b:29:ac:62:91:
                    32:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CD:A0:3D:30:BE:ED:A8:1C:58:B3:3C:12:39:CF:14:1F:DD:5E:20
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3231392e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:da:98:7e:28:be:97:51:2e:b3:5e:d9:e2:70:17:ae:03:f7:
         7d:81:9a:74:17:fd:1a:29:1d:ed:33:4e:ee:4f:5d:c5:02:c3:
         71:43:1f:dd:01:1b:e8:93:b7:49:f4:87:db:2e:2e:03:c3:dc:
         40:1b:00:b1:57:10:2c:2f:90:5d:87:d5:04:62:86:55:d2:e1:
         22:e5:0a:59:bd:75:0c:3b:98:84:ff:5b:41:21:19:57:12:0c:
         70:23:3c:b8:ec:7c:ad:b8:32:08:66:fc:f2:57:68:28:f3:e6:
         66:fe:e1:2a:7f:b9:4d:e3:36:f6:a7:43:65:5e:68:e6:83:64:
         9e:fe:8f:f0:ad:94:bd:af:03:1a:b0:3e:05:e0:53:8c:17:3c:
         7a:31:a8:87:e6:ca:d2:d7:6a:1e:b6:8d:9d:b5:05:8f:8c:53:
         6f:8c:c2:fc:fa:8b:95:d9:8c:ed:da:92:18:c9:12:d3:8b:3e:
         44:55:8c:ae:0f:03:d2:af:11:65:94:19:c5:49:1e:1b:85:64:
         2a:f1:61:b5:6d:cd:ea:d6:09:5f:2f:ec:18:d8:e7:8b:d8:07:
         0d:d0:11:db:77:1a:c9:a5:04:28:4b:cb:88:01:cd:4f:06:9b:
         d8:08:04:3c:d8:2c:6b:2b:b8:1d:a9:f6:d6:04:58:a7:57:55:
         75:20:d7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:06 2025 by rpki-client