Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32322d3234203d3e20323632323933.roa
File:                     3134332e3230322e3234302e302f32322d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          zvICf813D0pWmsaTsPHx1tD1jbQNfMFaL6VSotrprSM=
Subject key identifier:   65:E8:69:B5:11:61:B0:6D:13:B2:06:18:CE:A6:8F:C5:B5:63:6D:B9
Certificate issuer:       /CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
Certificate serial:       481C606D9D641950371408BD271EAA9ABDBD947F
Authority key identifier: 8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32322d3234203d3e20323632323933.roa
Signing time:             Fri 05 Jul 2024 15:18:17 +0000
ROA not before:           Fri 05 Jul 2024 15:13:17 +0000
ROA not after:            Fri 04 Jul 2025 15:18:17 +0000
asID:                     262293
IP address blocks:        143.202.240.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1c:60:6d:9d:64:19:50:37:14:08:bd:27:1e:aa:9a:bd:bd:94:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
        Validity
            Not Before: Jul  5 15:13:17 2024 GMT
            Not After : Jul  4 15:18:17 2025 GMT
        Subject: CN=65E869B51161B06D13B20618CEA68FC5B5636DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4b:7a:92:a9:76:e0:26:35:07:95:23:94:c2:
                    ef:f7:2b:82:c8:86:2c:ee:d7:ab:7c:29:e9:a2:5d:
                    39:56:59:00:b6:ad:01:91:60:7a:44:c3:e1:89:98:
                    cb:dd:06:6e:24:a8:c9:15:c2:b3:65:a1:a8:40:a5:
                    2b:e4:81:9d:22:e2:88:0e:ac:af:d9:b8:27:c7:f1:
                    58:84:22:24:05:48:b3:3d:8e:e3:8a:81:76:a1:95:
                    d5:8b:92:69:0b:60:2d:ec:09:a2:07:35:10:49:06:
                    9d:fc:a4:15:12:ba:cc:0b:52:a8:38:bb:28:7c:6f:
                    b0:52:f9:0c:dd:35:5c:6e:b8:10:f9:1d:4c:30:5a:
                    b7:1e:63:2b:d9:fb:7e:71:d0:c6:0a:d1:8b:d2:99:
                    a9:06:41:3b:ab:65:44:45:7b:23:eb:ad:1c:c0:58:
                    0f:85:a2:8b:c0:b0:87:83:99:71:1f:dc:4c:34:72:
                    ca:0b:7c:1f:95:a8:be:e2:9d:45:4f:86:64:7c:90:
                    ef:85:6b:23:74:dc:12:6a:a5:bf:06:91:62:38:af:
                    b6:e1:c7:0a:18:5a:82:f3:45:41:9c:ba:8f:9f:8b:
                    f0:07:ec:9f:0f:30:bd:dc:fc:8f:d1:99:21:da:b7:
                    f9:11:e9:41:6c:d0:6c:7a:e4:e0:04:09:11:46:4f:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E8:69:B5:11:61:B0:6D:13:B2:06:18:CE:A6:8F:C5:B5:63:6D:B9
            X509v3 Authority Key Identifier:
                keyid:8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/8EA97C26E58799D3765EA8E38C553BF596FE990E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32322d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:07:31:74:91:f1:54:c2:84:75:7b:d4:1e:ab:79:c5:05:c5:
         99:4d:0d:46:4b:6d:a0:b3:06:15:ed:e5:37:23:f9:1a:29:42:
         82:a1:13:c8:48:2d:18:8e:2e:f5:97:a1:72:7b:12:43:5d:1b:
         f9:2d:7d:4f:ac:60:f6:14:24:bc:48:b2:29:1d:39:e3:d4:f4:
         a2:ab:5f:b7:a5:56:4e:4d:0b:7e:6e:8f:04:f2:8b:c7:16:23:
         30:c8:69:84:5e:9b:7c:9a:1d:fb:a2:d1:f3:e4:d5:0a:53:1e:
         f2:58:4c:48:0f:12:b7:47:79:28:69:a0:e0:ad:29:72:40:f9:
         6e:58:7a:c8:34:24:64:8b:ea:a3:f9:b5:35:f6:b8:02:e7:52:
         e0:dc:0b:93:da:eb:ec:8d:60:1d:cb:94:87:90:dd:ad:d2:4b:
         95:95:54:42:fb:4a:ed:7d:b8:28:35:c1:2c:34:17:1e:55:31:
         34:b7:a8:61:72:33:7f:70:aa:61:d9:33:bd:07:65:60:5e:0b:
         28:87:fb:97:21:61:4d:2d:75:3e:e9:41:16:1e:5e:07:0e:c5:
         50:6d:af:79:c0:fa:21:22:37:c3:89:09:b5:24:78:f5:cd:3f:
         86:55:9f:89:a1:84:8c:93:9e:4d:a6:24:7e:30:44:8b:7f:73:
         15:19:e0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:15:08 2025 by rpki-client