Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32312d3231203d3e20323633333338.roa
File:                     3139312e33362e3138342e302f32312d3231203d3e20323633333338.roa (raw, json)
Hash identifier:          RIdJKeWuoF05Y1jlyVzMpiRaJSpasitmMqVcL0neQ1M=
Subject key identifier:   3F:79:4A:DD:F8:C1:EE:10:58:DD:4C:63:CC:A4:26:0F:B5:38:97:59
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       6734FE7039CEA9F3020053D3C8C1F585A4D8ABB6
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32312d3231203d3e20323633333338.roa
Signing time:             Wed 12 Feb 2025 11:57:56 +0000
ROA not before:           Wed 12 Feb 2025 11:52:56 +0000
ROA not after:            Wed 11 Feb 2026 11:57:56 +0000
asID:                     263338
IP address blocks:        191.36.184.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:34:fe:70:39:ce:a9:f3:02:00:53:d3:c8:c1:f5:85:a4:d8:ab:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: Feb 12 11:52:56 2025 GMT
            Not After : Feb 11 11:57:56 2026 GMT
        Subject: CN=3F794ADDF8C1EE1058DD4C63CCA4260FB5389759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:0f:4c:ab:f6:a6:aa:21:dd:4e:7d:84:0d:
                    83:8c:6c:4b:c0:5f:40:1e:47:ff:3a:e4:27:33:aa:
                    98:41:fa:39:c6:b4:45:cf:ca:33:b4:12:49:05:95:
                    da:f4:24:44:d1:bb:61:0e:7f:e5:d2:0e:17:61:84:
                    e3:c5:d9:5a:a3:84:bd:1a:e7:e3:5c:98:98:c9:73:
                    bd:90:55:8e:73:ec:3c:89:70:55:9d:62:76:8d:a6:
                    5d:91:16:f4:fa:52:4d:45:cc:15:64:1b:68:cb:05:
                    d4:fc:d0:2a:04:d0:e4:18:98:5a:71:06:e2:0e:ed:
                    bb:f0:56:11:b4:c5:2e:5f:0f:5c:a9:7b:0a:9d:02:
                    f7:4b:ba:8f:fd:91:bd:be:2b:6e:3b:fc:23:1e:7f:
                    e9:02:dc:60:c8:ee:39:87:bc:58:b8:a6:86:d6:7f:
                    b3:34:81:35:9a:b8:99:1a:05:94:80:c1:4a:fc:65:
                    c2:d7:9e:bc:98:31:ee:8b:8f:ce:92:3d:58:8c:60:
                    50:c7:13:ad:43:2a:c9:46:42:2f:87:0e:bd:e2:98:
                    39:a1:bf:98:0a:5b:25:c0:6d:f2:f4:d4:c8:99:99:
                    9f:ea:80:c5:34:df:2a:f3:8f:bc:a0:cf:ef:90:49:
                    b3:3a:a3:8f:c5:cf:67:0b:4a:56:ed:c9:b2:86:f3:
                    25:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:79:4A:DD:F8:C1:EE:10:58:DD:4C:63:CC:A4:26:0F:B5:38:97:59
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32312d3231203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:0e:ee:1a:73:d4:17:32:a6:8f:2c:44:8a:0d:af:76:54:e1:
         9e:8c:02:36:2c:8e:6c:7a:60:a6:5a:39:a6:8f:a1:0e:fb:2e:
         66:37:73:c7:09:59:ca:81:4f:95:4f:e4:33:8f:71:00:b5:74:
         58:fa:be:f8:d2:dc:7d:a4:29:55:4e:00:6a:f9:17:b5:16:a5:
         03:23:4b:57:55:08:1f:b4:ca:ef:34:8c:2f:3e:15:d1:c2:18:
         c1:ed:51:87:3d:04:57:7a:6e:09:63:b6:b4:fe:82:8e:04:0d:
         b0:eb:9a:d3:4f:47:e7:5d:eb:82:f8:a7:2f:c2:e8:d2:2f:59:
         41:da:93:58:e5:e2:02:58:10:f7:1b:90:b8:e7:0f:fd:aa:8e:
         11:65:a3:49:0f:36:2e:fa:fd:3b:36:92:8c:cf:23:dc:63:69:
         78:8d:89:45:59:0b:c8:bd:23:c6:39:90:28:36:41:c2:c0:b0:
         61:60:24:ea:e3:e1:26:bd:db:be:35:df:0c:0a:fb:9b:ad:31:
         f5:51:60:2b:7b:98:d4:e9:26:fe:1b:d6:c0:ed:43:75:59:4b:
         75:f0:88:08:15:50:4a:9f:49:1b:0c:7b:06:a8:07:ae:75:ca:
         b0:6f:10:40:d1:e1:de:0c:30:b1:3a:59:49:c6:63:b7:46:b3:
         a1:24:3a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:45 2025 by rpki-client