Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3230312e3135392e39302e302f32332d3233203d3e20323634393237.roa
File:                     3230312e3135392e39302e302f32332d3233203d3e20323634393237.roa (raw, json)
Hash identifier:          5s7Ih+E5xhU9rr7KI9zm7Y3pYNRJYTQBZSyMLMrkPeI=
Subject key identifier:   41:7E:A5:C2:3F:70:10:91:A7:29:A3:E0:BF:DD:06:77:07:5C:BA:78
Certificate issuer:       /CN=B11605843889B763BDD71C75D79082A16C54D7E7
Certificate serial:       4BF4E6575010671F0771B7E772B51FA4194D90CB
Authority key identifier: B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3230312e3135392e39302e302f32332d3233203d3e20323634393237.roa
Signing time:             Wed 22 Jan 2025 21:44:35 +0000
ROA not before:           Wed 22 Jan 2025 21:39:35 +0000
ROA not after:            Wed 21 Jan 2026 21:44:35 +0000
asID:                     264927
IP address blocks:        201.159.90.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f4:e6:57:50:10:67:1f:07:71:b7:e7:72:b5:1f:a4:19:4d:90:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11605843889B763BDD71C75D79082A16C54D7E7
        Validity
            Not Before: Jan 22 21:39:35 2025 GMT
            Not After : Jan 21 21:44:35 2026 GMT
        Subject: CN=417EA5C23F701091A729A3E0BFDD0677075CBA78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:2d:7c:c1:07:75:7a:2f:c8:19:a1:f8:f6:
                    f6:63:10:d9:02:46:81:22:0f:58:e6:5a:b9:b1:18:
                    3e:9d:b6:88:72:17:10:db:75:31:73:f1:ae:81:08:
                    92:8e:5c:75:93:c6:c4:83:6a:12:c3:47:55:df:08:
                    22:ce:cf:87:8f:d7:ae:02:ac:6d:d2:7e:06:00:6b:
                    e6:57:22:75:db:75:1e:84:2d:62:36:3c:ae:f1:68:
                    5b:e1:7a:a4:b5:a7:3e:1a:52:f0:70:0e:eb:99:18:
                    32:b1:b5:43:48:e5:67:a4:ec:a1:c0:8c:3f:86:c0:
                    bf:3f:23:15:3d:5b:3c:e4:ed:0f:a0:60:cd:ba:90:
                    f0:00:4e:aa:7d:50:d3:53:3b:f2:7f:4b:51:32:b2:
                    4a:b3:a2:6d:84:79:8a:83:59:dc:fb:35:65:66:f4:
                    f0:0f:c3:36:92:f8:20:1d:71:ff:32:96:0f:1d:ba:
                    35:f7:dc:21:76:14:ad:b1:34:a7:3c:ec:cf:c8:69:
                    bd:74:c1:dd:7f:ec:58:02:bf:2b:5c:91:82:f5:12:
                    4d:d4:2d:74:b3:ce:81:a1:00:4e:65:f3:c5:a7:ce:
                    f7:ff:3e:eb:b9:10:26:33:fc:ab:46:e9:bd:b1:16:
                    76:4d:81:bb:d4:c6:2c:55:83:42:7a:9d:3e:ad:cb:
                    36:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7E:A5:C2:3F:70:10:91:A7:29:A3:E0:BF:DD:06:77:07:5C:BA:78
            X509v3 Authority Key Identifier:
                keyid:B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3230312e3135392e39302e302f32332d3233203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:8c:47:ba:77:35:74:a2:71:3f:1b:43:f8:f7:07:6d:ca:d2:
         4a:16:84:26:f9:40:8c:5b:1e:0c:74:3b:10:5b:86:1f:41:9e:
         62:df:a5:4c:cc:39:6a:98:86:87:ce:9b:1e:ae:b8:01:9f:c4:
         17:a0:fb:97:f6:1f:b6:1d:92:58:37:e2:cb:82:6e:cd:b9:cf:
         06:5b:bc:33:5d:82:00:4d:12:9a:12:9e:81:2e:c0:47:70:ed:
         e2:71:eb:68:20:a2:25:47:55:f7:35:8b:34:ad:13:5a:ea:38:
         fd:23:3a:e0:33:09:4c:54:68:79:4c:e9:bc:dd:a5:06:52:99:
         64:7a:e5:74:e5:4e:08:f7:f6:c9:c5:fa:de:f9:9c:aa:7e:3d:
         ee:f6:28:1e:a3:c9:a0:7a:5f:ce:be:11:aa:7d:99:27:f5:ec:
         c5:06:de:0a:10:88:4c:c4:34:6e:34:2b:7c:95:bc:43:72:54:
         c8:c6:32:b4:67:25:82:9f:bf:a4:9f:a4:2e:7b:99:d1:d6:d0:
         d5:b5:55:33:9f:de:52:ba:73:d6:5f:39:0d:c0:37:c2:bf:cc:
         b8:f1:d4:ed:b2:59:41:fc:cb:f2:0b:e6:b8:49:f8:af:9f:12:
         0b:32:e0:da:7f:e0:9a:d0:a2:9d:0b:83:1d:fd:95:32:b5:fa:
         f3:fa:5c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:31:22 2025 by rpki-client