Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233362e302f32322d3232203d3e20323633343834.roa
File:                     3139312e3234322e3233362e302f32322d3232203d3e20323633343834.roa (raw, json)
Hash identifier:          0cRx0DnFZvY+JNwDbX6h9BI9jKAQAUQ/GYJh4g1mOC8=
Subject key identifier:   F3:7F:CC:0A:0E:32:39:53:81:09:DA:EA:BF:AC:62:83:EC:51:85:1A
Certificate issuer:       /CN=1698795302C7E2A145BFA93BF0B8C9B149DFD43D
Certificate serial:       6D3375556D1DC6C324FB8089359F7D1D4E212E92
Authority key identifier: 16:98:79:53:02:C7:E2:A1:45:BF:A9:3B:F0:B8:C9:B1:49:DF:D4:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1698795302C7E2A145BFA93BF0B8C9B149DFD43D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233362e302f32322d3232203d3e20323633343834.roa
Signing time:             Wed 04 Dec 2024 14:43:53 +0000
ROA not before:           Wed 04 Dec 2024 14:38:53 +0000
ROA not after:            Wed 03 Dec 2025 14:43:53 +0000
asID:                     263484
IP address blocks:        191.242.236.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:33:75:55:6d:1d:c6:c3:24:fb:80:89:35:9f:7d:1d:4e:21:2e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1698795302C7E2A145BFA93BF0B8C9B149DFD43D
        Validity
            Not Before: Dec  4 14:38:53 2024 GMT
            Not After : Dec  3 14:43:53 2025 GMT
        Subject: CN=F37FCC0A0E3239538109DAEABFAC6283EC51851A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:7a:42:1d:f0:16:27:c6:b8:33:8a:2d:98:
                    71:28:16:e9:d3:28:1d:fa:32:5b:d9:54:0c:44:af:
                    49:23:66:6f:22:c8:f4:22:62:e6:55:c8:5c:36:bc:
                    bf:b9:cf:fb:bf:d8:83:c3:8d:32:e1:25:20:bd:cc:
                    3e:4c:1e:1f:9e:a2:4c:b5:af:3b:74:e5:ca:e7:3d:
                    e4:45:ab:b8:44:67:6d:e6:ba:d0:35:ff:30:74:9a:
                    70:02:7c:2c:29:97:14:6a:c7:6a:be:a5:96:fe:bb:
                    f7:5d:fe:5b:ec:dd:ca:b5:49:e2:02:81:ce:7e:a4:
                    9d:aa:8d:5d:ad:3c:a0:80:36:b2:f7:9c:1b:39:a2:
                    64:8e:97:e4:12:2d:b5:59:72:47:46:f8:56:14:a8:
                    73:82:06:db:c6:10:1b:3b:1b:fd:89:34:99:92:d4:
                    01:6f:9e:6b:08:a1:2f:0e:53:62:2c:49:7c:c5:48:
                    66:f9:80:2c:cb:c2:89:dc:40:53:92:11:ed:bd:29:
                    1c:89:cb:6d:63:c2:ce:ae:4d:2d:c6:44:56:7f:94:
                    c9:21:a1:ae:7e:4a:4c:73:92:b1:96:38:0c:fc:27:
                    4b:75:4f:95:07:55:a3:51:4d:7e:0c:b1:89:74:53:
                    cd:8a:ff:60:1a:41:2c:1f:c9:5d:fe:72:51:1a:b6:
                    f9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7F:CC:0A:0E:32:39:53:81:09:DA:EA:BF:AC:62:83:EC:51:85:1A
            X509v3 Authority Key Identifier:
                keyid:16:98:79:53:02:C7:E2:A1:45:BF:A9:3B:F0:B8:C9:B1:49:DF:D4:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/1698795302C7E2A145BFA93BF0B8C9B149DFD43D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1698795302C7E2A145BFA93BF0B8C9B149DFD43D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233362e302f32322d3232203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:2c:dd:d4:65:19:70:63:77:30:2f:67:a0:dd:54:c6:ea:fb:
         5f:70:73:c6:c3:5b:79:65:7f:d1:5e:e4:f3:f9:96:a0:16:1a:
         a4:b7:a4:14:32:24:86:96:ff:9b:d8:89:23:33:4f:d9:de:99:
         8a:30:a8:ad:70:85:42:57:55:ec:c1:83:04:b2:d6:1f:6f:50:
         ae:e6:5e:24:ef:be:13:f2:d1:c0:f9:ad:93:04:ee:8a:c7:7e:
         e5:21:d4:45:bb:0b:5d:65:94:53:79:b8:1d:e5:37:c1:65:50:
         78:f4:46:93:52:63:50:28:d4:28:ab:51:dc:18:7f:e4:b1:c0:
         1d:76:80:17:22:d7:04:3a:85:bc:b2:23:44:81:60:9f:89:21:
         c3:a6:cd:11:82:6a:d3:72:45:79:e3:7f:8c:40:cc:6e:66:94:
         0a:73:98:88:a1:cb:98:c0:39:bd:de:cf:01:66:64:05:84:c7:
         5b:7e:74:cb:e2:14:48:f1:48:0e:42:c5:50:b7:a7:8f:59:e2:
         62:07:4d:ec:b4:30:2d:48:1c:32:2c:a4:71:31:fa:b7:60:52:
         7f:fd:b9:93:0a:de:c7:b2:c8:35:e0:93:fc:57:63:ce:cb:41:
         7e:a7:a7:27:75:04:7c:bb:66:10:c4:e9:7b:66:d8:7d:d1:a9:
         a0:1b:8e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:44:07 2025 by rpki-client