Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230342e302f32332d3233203d3e20323636323432.roa
File:                     3139322e3134352e3230342e302f32332d3233203d3e20323636323432.roa (raw, json)
Hash identifier:          99ePMGNhJvaJ+4wuo1tmFHCXSeGz+rc07EgjBpUzF1w=
Subject key identifier:   1D:7E:CB:A6:78:12:ED:2F:5B:BB:2C:08:02:E7:14:69:D0:6A:D9:B7
Certificate issuer:       /CN=1547EB99992D867A7DC9C9932309620DED3EB049
Certificate serial:       15386A5C498F7933DD1BB3544C45550955868C6E
Authority key identifier: 15:47:EB:99:99:2D:86:7A:7D:C9:C9:93:23:09:62:0D:ED:3E:B0:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1547EB99992D867A7DC9C9932309620DED3EB049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230342e302f32332d3233203d3e20323636323432.roa
Signing time:             Fri 22 Mar 2024 13:08:01 +0000
ROA not before:           Fri 22 Mar 2024 13:03:01 +0000
ROA not after:            Fri 21 Mar 2025 13:08:01 +0000
asID:                     266242
IP address blocks:        192.145.204.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:38:6a:5c:49:8f:79:33:dd:1b:b3:54:4c:45:55:09:55:86:8c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1547EB99992D867A7DC9C9932309620DED3EB049
        Validity
            Not Before: Mar 22 13:03:01 2024 GMT
            Not After : Mar 21 13:08:01 2025 GMT
        Subject: CN=1D7ECBA67812ED2F5BBB2C0802E71469D06AD9B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dd:9a:df:5d:ee:2e:f3:72:81:ce:34:d7:23:
                    e7:8f:a6:60:b4:16:17:8f:b1:a3:3f:09:67:ed:0f:
                    cb:39:c3:6a:bc:d7:85:a2:74:07:5d:b8:04:94:e0:
                    52:63:70:4b:8d:18:b7:30:64:52:a0:f9:fb:2b:8c:
                    90:36:72:ea:0e:cb:2d:91:e4:00:74:8a:83:49:45:
                    68:3a:eb:1d:fc:33:1f:80:f6:f5:df:cb:be:38:44:
                    54:b9:8b:b1:5d:82:6b:2f:95:74:f0:b6:ef:6f:ee:
                    8b:24:95:07:f5:da:48:a1:93:e2:15:67:59:06:27:
                    eb:04:a8:09:45:40:eb:e4:83:2e:ab:5f:ad:16:87:
                    86:05:c4:68:f7:7c:48:19:6b:ab:07:2f:44:31:c7:
                    ab:08:c9:9a:10:e1:49:ae:86:9b:d2:d9:02:27:a5:
                    7d:24:42:a2:f6:f2:76:da:c6:7b:ce:5f:04:0d:96:
                    a7:28:73:9a:75:b8:63:d2:29:ce:9a:9c:b7:aa:a1:
                    06:1f:8c:8b:7a:66:9a:92:3c:0d:e6:c8:39:31:e0:
                    c4:b7:45:89:e0:ea:23:22:19:ae:5d:98:8a:d1:02:
                    7a:b5:d7:8b:b8:83:14:41:41:e2:9a:9b:b9:fd:69:
                    6c:f1:e1:21:78:c3:93:50:4c:c8:7e:88:e4:67:6a:
                    4c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7E:CB:A6:78:12:ED:2F:5B:BB:2C:08:02:E7:14:69:D0:6A:D9:B7
            X509v3 Authority Key Identifier:
                keyid:15:47:EB:99:99:2D:86:7A:7D:C9:C9:93:23:09:62:0D:ED:3E:B0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/1547EB99992D867A7DC9C9932309620DED3EB049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1547EB99992D867A7DC9C9932309620DED3EB049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvPnsJqn22vawdEPUQQHJuuFT6H3HDM89jYEuh9aNy7H/0/3139322e3134352e3230342e302f32332d3233203d3e20323636323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:5f:94:9f:8b:3d:8e:18:8e:ca:7b:ca:7c:2f:9a:cb:f6:c2:
         11:34:a7:8f:cc:d9:2f:0e:59:92:b8:80:2c:88:31:a4:5c:57:
         9f:da:08:75:1d:f3:eb:ea:6b:1f:a6:f5:24:09:a1:a2:a9:23:
         df:5e:20:53:60:ba:24:24:32:d4:93:96:4a:17:82:37:2f:c5:
         d1:cf:d3:ca:73:71:3c:90:ed:c8:ff:49:70:89:39:da:9d:ab:
         98:78:95:60:f8:da:22:bd:38:a5:10:85:c6:d1:eb:d5:ce:26:
         2c:94:52:b5:a8:d0:e6:bd:33:44:58:7e:bd:15:11:87:d0:5a:
         ed:4b:4f:e0:24:2b:2c:f0:1f:c9:a9:91:cc:9b:fe:0d:3c:4f:
         c7:69:10:f5:c4:f8:57:d3:0c:cd:58:e4:17:08:35:62:99:63:
         3f:4c:70:5f:2d:c6:f3:46:3b:d5:dc:5e:71:43:87:76:93:91:
         bd:e2:91:9b:9b:4b:d8:80:69:cc:f1:11:b6:7c:f1:55:a8:ef:
         4f:55:30:5f:53:19:97:c4:8a:17:18:8a:de:93:2e:71:7d:53:
         e3:cf:bb:a4:c1:38:8f:e1:07:b5:70:5c:52:cd:8b:40:74:b6:
         82:46:bd:2d:43:64:1d:40:ca:26:d9:0b:db:71:30:b9:19:c6:
         47:ae:04:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:30 2025 by rpki-client