Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35342e302f32332d3233203d3e20323635313339.roa
File:                     3134332e3235352e35342e302f32332d3233203d3e20323635313339.roa (raw, json)
Hash identifier:          RmmqIriYmmmkEW2dju5E8tNj+0XGQj/MZFJclyzf+To=
Subject key identifier:   DE:86:3A:00:1E:5A:03:52:BB:F5:2A:E1:CF:2F:0D:AC:C7:6B:23:4A
Certificate issuer:       /CN=51D614FB21687226E5AB5B4AABC42D2C253C1549
Certificate serial:       16F94647DB1CD0DEB5F19CB46FFB63232B17FB17
Authority key identifier: 51:D6:14:FB:21:68:72:26:E5:AB:5B:4A:AB:C4:2D:2C:25:3C:15:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51D614FB21687226E5AB5B4AABC42D2C253C1549.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35342e302f32332d3233203d3e20323635313339.roa
Signing time:             Sat 01 Jun 2024 00:45:37 +0000
ROA not before:           Sat 01 Jun 2024 00:40:37 +0000
ROA not after:            Sat 31 May 2025 00:45:37 +0000
asID:                     265139
IP address blocks:        143.255.54.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f9:46:47:db:1c:d0:de:b5:f1:9c:b4:6f:fb:63:23:2b:17:fb:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51D614FB21687226E5AB5B4AABC42D2C253C1549
        Validity
            Not Before: Jun  1 00:40:37 2024 GMT
            Not After : May 31 00:45:37 2025 GMT
        Subject: CN=DE863A001E5A0352BBF52AE1CF2F0DACC76B234A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:33:d4:aa:b0:53:6a:4c:50:2e:29:ba:d9:
                    4f:22:98:88:a4:24:04:ad:86:35:1a:73:04:95:0e:
                    24:0c:7c:b9:04:40:0e:8e:dd:9d:a5:c3:89:ed:e8:
                    6e:31:bb:08:75:e2:47:f5:a2:bc:c6:f0:02:26:4e:
                    6a:5c:76:a8:2b:40:f9:9a:b7:f9:7c:83:3b:91:71:
                    2d:21:9a:a9:0b:51:22:92:3a:8e:57:b5:3b:80:fc:
                    ac:6f:9b:15:e3:f2:43:d2:24:98:01:b9:d7:14:37:
                    b0:2e:c9:18:bf:45:dd:ef:ff:86:46:5c:7d:37:61:
                    8f:b9:a2:39:48:32:c8:e9:d4:0f:e9:6b:e8:5f:f3:
                    57:54:fa:c2:75:f0:d7:6e:e8:1d:3f:f3:64:7f:c2:
                    9d:94:ed:d9:4f:1c:6f:cc:5a:37:29:b1:d0:e6:ab:
                    05:70:a5:c2:8e:01:68:73:fb:0b:ee:35:d0:92:50:
                    4a:df:6f:b3:1c:72:d2:86:a4:f1:82:cc:6c:4c:0a:
                    a0:dc:5f:ef:a9:7c:0b:84:ba:a1:62:8d:fb:4d:19:
                    53:9e:69:bb:9b:d6:1e:fa:3b:cc:45:fc:63:39:33:
                    92:a8:93:24:2e:43:12:c7:0e:81:a5:02:d7:39:96:
                    fb:d0:e2:d6:81:4c:03:51:d8:f9:8d:3d:c1:69:2d:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:86:3A:00:1E:5A:03:52:BB:F5:2A:E1:CF:2F:0D:AC:C7:6B:23:4A
            X509v3 Authority Key Identifier:
                keyid:51:D6:14:FB:21:68:72:26:E5:AB:5B:4A:AB:C4:2D:2C:25:3C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/51D614FB21687226E5AB5B4AABC42D2C253C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51D614FB21687226E5AB5B4AABC42D2C253C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35342e302f32332d3233203d3e20323635313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:2f:b6:62:8d:a1:f4:b4:9b:7d:0b:9d:68:a2:98:50:a0:54:
         b9:d5:fb:ff:4e:ce:6d:af:25:86:39:e4:d7:ab:56:b4:fd:e6:
         19:56:5f:5b:85:d8:ce:e0:a0:f4:92:22:bc:05:71:6d:e1:a6:
         d5:33:38:d7:2d:d4:05:c4:b6:46:61:40:5a:f2:39:0e:46:7d:
         e0:d9:47:2b:bc:01:ff:a9:6f:48:57:84:b3:a1:f1:85:0a:e3:
         f5:51:47:1b:24:24:f4:9a:a2:61:52:4c:44:d1:a4:49:ec:61:
         e1:f5:6c:63:40:6d:a3:0c:36:cf:4c:8f:30:b0:75:3c:2d:60:
         14:0c:ec:41:77:da:12:ec:eb:b5:cd:58:5f:2c:7a:c7:55:7c:
         cc:d0:c1:de:aa:5f:6b:51:97:04:16:4f:95:71:56:f4:47:e3:
         13:48:a6:2b:e5:00:5f:6c:d2:c2:6f:2f:95:af:bc:39:83:00:
         b8:d0:b6:01:67:98:29:60:59:76:2f:4b:e8:ff:7e:d8:c0:34:
         97:c2:eb:46:1e:b6:3c:ec:fb:54:40:fb:18:a2:c5:53:56:97:
         3b:b3:20:bb:81:6f:b3:8d:59:44:c6:3d:cf:24:ac:fc:1e:16:
         26:de:4e:2f:b6:f7:ac:69:df:10:fd:85:bc:d8:5e:5d:ef:d9:
         cf:5c:fe:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:23:18 2025 by rpki-client