Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/3139312e3234322e36342e302f32312d3331203d3e20323633343733.roa
File:                     3139312e3234322e36342e302f32312d3331203d3e20323633343733.roa (raw, json)
Hash identifier:          vM3nuUyNIPg/4FgmLPtN//D51KTzjMWgmt/+um4e04U=
Subject key identifier:   B7:F1:68:95:2D:32:70:3D:65:ED:10:AF:06:70:A9:91:7F:D2:DA:62
Certificate issuer:       /CN=E9B4B625A678B4368E18095C962431764F4875B3
Certificate serial:       614E18AA47F8D4F142D70662BD654C7E201EBE1B
Authority key identifier: E9:B4:B6:25:A6:78:B4:36:8E:18:09:5C:96:24:31:76:4F:48:75:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B4B625A678B4368E18095C962431764F4875B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/3139312e3234322e36342e302f32312d3331203d3e20323633343733.roa
Signing time:             Thu 15 Aug 2024 17:38:17 +0000
ROA not before:           Thu 15 Aug 2024 17:33:17 +0000
ROA not after:            Thu 14 Aug 2025 17:38:17 +0000
asID:                     263473
IP address blocks:        191.242.64.0/21 maxlen: 31
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4e:18:aa:47:f8:d4:f1:42:d7:06:62:bd:65:4c:7e:20:1e:be:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9B4B625A678B4368E18095C962431764F4875B3
        Validity
            Not Before: Aug 15 17:33:17 2024 GMT
            Not After : Aug 14 17:38:17 2025 GMT
        Subject: CN=B7F168952D32703D65ED10AF0670A9917FD2DA62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:5d:17:75:e7:43:e5:01:aa:87:08:f7:1f:
                    a9:6e:46:90:d4:c6:67:71:37:0c:3c:1b:df:64:6c:
                    d6:d2:66:f2:5b:3d:0b:0d:9f:d2:c9:8d:8f:6b:3b:
                    d6:a0:a6:62:55:df:0d:99:4b:6f:42:47:39:9f:9a:
                    a9:a3:aa:55:ef:11:60:9c:92:85:00:53:c6:f5:f9:
                    78:f7:3c:49:ce:b0:7e:ec:9a:2b:c0:bd:89:d0:85:
                    1b:30:6e:c3:b5:c0:f9:57:ce:bf:87:bf:25:74:0f:
                    07:1b:db:ae:8a:e9:0f:9a:9e:c7:37:a0:80:30:f3:
                    32:f2:0d:79:d2:f9:85:0c:2b:c3:dc:93:6f:98:1c:
                    aa:18:8c:eb:11:3d:a7:f8:36:9f:14:6a:78:6e:3c:
                    7d:d8:26:50:66:21:3a:4e:e1:d6:4f:ac:eb:15:b6:
                    4c:91:e5:0a:b8:34:78:6c:f4:d9:43:d4:a3:ff:2a:
                    42:ec:05:21:3d:f2:44:24:dc:95:43:94:c1:72:05:
                    ed:db:1d:25:69:a3:66:ca:6f:a4:93:04:be:4a:60:
                    04:d8:a1:4b:da:28:e1:2d:cc:93:42:ef:83:2b:0c:
                    91:6b:7a:1e:86:f5:17:b1:68:5d:b2:f1:1c:33:06:
                    57:ef:e5:91:4b:08:8d:45:f8:af:60:62:8f:09:e5:
                    59:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F1:68:95:2D:32:70:3D:65:ED:10:AF:06:70:A9:91:7F:D2:DA:62
            X509v3 Authority Key Identifier:
                keyid:E9:B4:B6:25:A6:78:B4:36:8E:18:09:5C:96:24:31:76:4F:48:75:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/E9B4B625A678B4368E18095C962431764F4875B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B4B625A678B4368E18095C962431764F4875B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/3139312e3234322e36342e302f32312d3331203d3e20323633343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:1c:a1:64:6a:61:81:ef:7c:c7:94:f8:62:64:a9:d8:6c:2d:
         af:94:86:f5:cb:57:c7:9f:fa:de:f9:f2:ef:ce:f3:1c:cd:76:
         c0:c6:ff:68:df:52:17:d4:6a:ac:12:dd:e9:3c:c7:3d:f4:26:
         ef:3d:9a:0f:83:6d:a5:de:b4:ca:25:90:b3:19:12:37:74:0a:
         32:a5:8a:b8:8d:e2:ad:8f:7a:f6:b0:b8:48:b8:39:a3:74:1c:
         48:59:d4:55:7e:03:48:ec:c2:af:d4:8b:4d:53:09:c4:aa:75:
         25:62:56:0e:1c:4d:f4:a4:46:7f:97:96:15:7e:24:e8:eb:58:
         f8:74:1c:d2:32:38:64:3e:95:d5:bd:4f:d3:1a:4d:63:7f:ff:
         42:95:88:d4:33:5f:62:e7:37:8d:7c:3d:45:15:8f:40:8e:89:
         3e:b2:d6:1c:54:a0:67:bf:8a:3d:e5:d4:56:33:a4:28:58:20:
         65:11:db:d1:89:94:8b:a0:77:8e:cf:6d:77:44:04:56:02:1b:
         0a:5d:19:43:77:3c:69:4e:5a:5d:32:e6:78:39:79:ed:ab:9f:
         98:2a:a0:11:1e:b6:3c:70:e3:90:f3:8c:79:08:1e:6b:61:92:
         3c:23:7b:31:1b:bd:00:ad:5b:e5:99:2e:ba:df:72:1d:76:06:
         fc:46:2f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:33:40 2025 by rpki-client