Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39362e302f32332d3233203d3e203532393737.roa
File:                     3134332e3235352e39362e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          s8Bl7nTRSYXeT27Z1pGrBOMVSfqUPi4KE2ADdXQ6VuA=
Subject key identifier:   ED:4A:46:C0:B2:65:7A:50:C0:A4:EA:31:4F:0D:B0:68:55:25:8C:D8
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       690139B9AF64A31BB2B62128C2C89123C6CA7F97
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39362e302f32332d3233203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     52977
IP address blocks:        143.255.96.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:01:39:b9:af:64:a3:1b:b2:b6:21:28:c2:c8:91:23:c6:ca:7f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=ED4A46C0B2657A50C0A4EA314F0DB06855258CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:a2:dc:95:2f:7a:c5:fb:66:6b:a4:f0:29:
                    15:99:d3:fb:50:e2:15:e7:e7:80:05:2f:1f:6b:e8:
                    6a:e6:a6:f5:a8:5e:e7:fa:d7:5d:a8:d4:91:bc:d6:
                    c5:90:a6:93:54:90:fe:6a:a8:59:9a:79:e3:8a:fc:
                    a1:d1:a1:39:6b:5d:03:12:e3:34:36:0a:7d:ed:4d:
                    d0:0c:63:09:2d:22:a0:17:f5:f5:ca:e6:48:b8:71:
                    22:ba:64:c7:0b:ac:bd:1e:c5:2d:f0:39:df:2f:42:
                    11:3f:a6:03:b7:83:4b:50:bf:09:cc:cc:01:ee:57:
                    49:d6:1c:05:2e:a4:de:88:ba:20:3d:7f:ce:7b:db:
                    1f:15:3e:14:76:dd:7a:7e:2b:e2:f5:b5:91:a7:1d:
                    98:ac:69:40:de:8a:5d:68:29:eb:5d:b9:fd:a0:f6:
                    6b:10:28:59:bd:f7:7e:dc:c1:7b:d2:83:56:72:8c:
                    3b:72:e3:95:f1:fe:00:bb:b5:6f:73:bf:83:bf:23:
                    38:8b:fe:93:1c:70:af:0f:9b:ce:a1:33:e3:c1:61:
                    4f:17:93:d9:95:ef:3d:62:29:c4:48:b1:9b:52:55:
                    6f:52:e3:23:10:fe:61:83:90:81:da:9b:c0:50:cf:
                    a2:05:e6:e3:8c:7b:ea:70:70:b3:39:81:6f:de:6a:
                    5d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4A:46:C0:B2:65:7A:50:C0:A4:EA:31:4F:0D:B0:68:55:25:8C:D8
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39362e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:dd:5e:94:4d:0f:ec:22:ed:5b:a5:28:b0:ad:12:4f:65:a7:
         40:56:63:3a:00:04:16:48:4f:73:a6:b8:0d:6f:98:70:a9:6d:
         e7:c7:e0:f2:d0:a5:bd:85:89:eb:0d:56:08:53:39:cf:40:b9:
         a5:d2:af:e2:f0:bc:7d:e5:52:44:5e:87:52:43:6e:bb:17:d5:
         2f:9d:65:f5:33:72:db:a0:ed:74:d0:2e:5d:f7:46:d9:48:09:
         2e:0b:69:6f:2b:0b:27:82:c4:7c:f4:e9:5d:7b:ba:e4:08:ac:
         3c:d2:0f:eb:e1:00:06:18:0c:3f:6f:c0:be:10:5b:38:9e:70:
         30:e2:2d:b9:8e:e9:68:66:68:c9:2e:98:07:df:f7:20:c7:f6:
         32:8d:a5:b8:fd:d5:8b:0f:89:20:a9:29:a9:eb:a7:b8:7c:3e:
         04:cc:75:e5:2b:40:81:bf:02:73:23:cc:69:ab:75:e6:30:11:
         c7:c0:e4:bf:5b:f5:c0:bd:27:76:8e:dc:48:48:61:02:ee:d5:
         de:69:03:be:32:e7:fc:6c:13:69:01:60:b7:0f:8f:5d:33:1a:
         65:20:51:36:53:b2:25:df:a6:a2:53:3d:52:9d:c2:d4:a5:27:
         f3:95:72:4e:dc:2c:ec:5a:72:3f:ee:70:2c:2f:9e:0a:8a:b8:
         68:5c:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:08 2025 by rpki-client