Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3232312e302f32342d3234203d3e20323632383038.roa
File:                     3139312e3235332e3232312e302f32342d3234203d3e20323632383038.roa (raw, json)
Hash identifier:          sGX9mISILis49zCK+7sPW8dKuhcYngvyPPKsVgxYpG4=
Subject key identifier:   53:10:52:15:C3:BF:3C:5E:18:7D:FD:D3:B9:30:C2:86:EC:48:96:47
Certificate issuer:       /CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
Certificate serial:       4028BC3886F4F6166FB48469EAAD36E4A08A85D2
Authority key identifier: 01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3232312e302f32342d3234203d3e20323632383038.roa
Signing time:             Tue 10 Oct 2023 13:57:24 +0000
ROA not before:           Tue 10 Oct 2023 13:52:24 +0000
ROA not after:            Tue 08 Oct 2024 13:57:24 +0000
asID:                     262808
IP address blocks:        191.253.221.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:28:bc:38:86:f4:f6:16:6f:b4:84:69:ea:ad:36:e4:a0:8a:85:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01EB0C4181F92B1230B0D1B98892311E2B70834A
        Validity
            Not Before: Oct 10 13:52:24 2023 GMT
            Not After : Oct  8 13:57:24 2024 GMT
        Subject: CN=53105215C3BF3C5E187DFDD3B930C286EC489647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:3d:28:a6:30:75:71:60:65:97:b5:46:64:
                    f7:9c:be:d1:15:c4:44:91:a1:bd:09:4e:1c:10:f9:
                    65:30:b4:30:17:f6:a0:fd:d2:c7:01:51:e0:a1:cd:
                    45:31:c0:26:0c:56:fa:89:5b:55:52:82:ad:3e:6e:
                    c6:cc:2f:64:46:ef:af:f3:f5:c1:4a:2d:23:1b:31:
                    e1:e8:49:69:80:cb:5d:92:3c:d1:e4:b4:cb:cc:af:
                    c8:8b:a7:7a:d2:53:e7:a3:3f:0d:ac:ea:4f:5b:d1:
                    4b:23:62:fe:66:a4:78:95:6a:ac:54:6f:7b:0d:f2:
                    69:8a:73:29:74:fd:f2:f5:72:54:1e:4b:26:34:ce:
                    a3:ba:2b:18:58:08:93:ad:e4:c1:3d:92:4d:6c:48:
                    1f:60:0d:f9:88:39:0d:b0:42:e0:d7:11:dd:95:75:
                    64:63:b6:2b:18:6c:79:cc:41:42:27:3a:61:3a:a1:
                    59:02:c9:77:f1:c9:3e:7c:08:97:f1:35:aa:89:b0:
                    11:fc:43:ac:a5:5d:32:90:de:bb:d9:24:91:db:cc:
                    d8:3d:e0:f1:46:8f:1f:a5:2f:ad:b3:92:a7:0d:3b:
                    b3:78:ff:95:92:40:8d:9c:84:81:a8:31:60:34:6a:
                    76:1e:8a:e0:53:59:ce:8b:d3:e0:39:3f:b3:3d:8f:
                    f1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:10:52:15:C3:BF:3C:5E:18:7D:FD:D3:B9:30:C2:86:EC:48:96:47
            X509v3 Authority Key Identifier:
                keyid:01:EB:0C:41:81:F9:2B:12:30:B0:D1:B9:88:92:31:1E:2B:70:83:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01EB0C4181F92B1230B0D1B98892311E2B70834A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/3139312e3235332e3232312e302f32342d3234203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:93:ac:f5:58:e0:1a:b7:42:2d:18:2b:df:ca:88:6f:1f:18:
         ed:62:9c:6b:2f:c6:a9:b6:6a:d9:86:aa:ac:a2:e3:15:de:1d:
         b4:b1:27:94:ed:58:af:86:35:ca:4d:03:75:5c:da:57:ae:8b:
         c0:f9:07:9e:63:56:1c:1a:09:6c:48:68:7f:7a:06:bc:33:7b:
         2d:b2:76:0a:c2:07:ed:7a:b1:c5:15:c9:5f:d3:97:05:50:08:
         29:58:26:83:a0:70:f8:ca:52:0f:33:32:b7:f5:64:ac:40:57:
         32:db:6a:72:1c:fd:ff:c1:60:c8:c8:9b:25:59:fa:94:3f:ed:
         35:e7:92:a9:19:91:e5:4b:05:98:e2:c0:d5:34:23:b1:6b:39:
         48:03:ab:7d:03:e6:e4:63:e6:5b:d4:a3:dc:62:ea:ed:3d:35:
         10:11:7e:8f:ac:78:b9:63:77:c1:20:aa:1f:b5:41:9a:a7:f7:
         4b:94:03:1a:79:33:78:bf:23:b1:7f:ba:4c:45:89:42:64:6c:
         59:92:75:65:e1:6b:71:6e:62:fc:6c:f6:7e:99:51:a4:ed:72:
         09:fc:b1:93:90:d9:6a:66:18:f9:a3:b1:23:73:60:a8:bc:53:
         d6:0a:23:b2:d6:f5:57:96:e2:f8:c6:92:fb:fb:96:3e:69:d3:
         85:91:36:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:10 2025 by rpki-client