Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/3139312e3235332e302e302f32302d3234203d3e203533303830.roa
File:                     3139312e3235332e302e302f32302d3234203d3e203533303830.roa (raw, json)
Hash identifier:          x3kF7w4wVNN+YMVWERCUyxsmBqK6TVgX8V56pnULHPc=
Subject key identifier:   D3:0D:14:BC:E9:0F:02:FA:CC:B4:44:CF:77:03:AA:96:0F:00:33:C7
Certificate issuer:       /CN=F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE
Certificate serial:       1CFEAC2FEDDC7E823424D659BD5B018492B9F5C1
Authority key identifier: F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/3139312e3235332e302e302f32302d3234203d3e203533303830.roa
Signing time:             Tue 23 Jul 2024 11:55:43 +0000
ROA not before:           Tue 23 Jul 2024 11:50:43 +0000
ROA not after:            Tue 22 Jul 2025 11:55:43 +0000
asID:                     53080
IP address blocks:        191.253.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fe:ac:2f:ed:dc:7e:82:34:24:d6:59:bd:5b:01:84:92:b9:f5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE
        Validity
            Not Before: Jul 23 11:50:43 2024 GMT
            Not After : Jul 22 11:55:43 2025 GMT
        Subject: CN=D30D14BCE90F02FACCB444CF7703AA960F0033C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:12:d9:65:52:dc:ef:3c:b9:59:04:89:64:60:
                    d3:c4:4e:e9:8c:7b:00:e2:00:83:55:3f:73:71:3e:
                    50:cc:ab:10:67:88:37:38:02:fb:7b:de:24:5f:c9:
                    46:5b:ec:37:a9:18:92:4a:ef:0c:0e:12:47:40:6d:
                    b9:b8:97:fc:0f:24:42:a8:9c:9f:f5:71:7e:57:54:
                    08:eb:a4:2f:fc:5e:d4:14:51:61:b0:e4:9b:95:f1:
                    64:e8:63:36:71:93:71:3b:83:4a:f8:cd:1c:ec:8d:
                    6e:57:e5:bf:1d:0b:59:de:8b:b1:7d:af:f3:1f:e6:
                    f9:d7:2c:33:9a:16:97:08:15:1c:5b:b0:f3:4e:70:
                    73:a1:03:b7:3d:df:fb:fa:6d:91:0f:db:2a:16:48:
                    94:0d:a2:5e:57:11:e0:cd:26:b3:ee:fc:b5:2e:7b:
                    45:34:ff:93:5a:49:7c:46:86:15:74:e3:fe:b1:b5:
                    6d:81:8d:b5:f0:a1:6e:96:f7:eb:07:f4:0f:be:61:
                    11:b4:c8:92:dc:02:8d:5f:f5:3c:cf:9c:c6:58:54:
                    13:41:2c:48:d3:2b:8d:cc:80:0f:55:8a:5f:ca:64:
                    48:b6:0d:df:8b:7a:a2:6b:87:93:6a:d9:b2:0d:d2:
                    45:66:c6:b0:fb:3c:63:ec:9c:8c:39:9f:82:fe:11:
                    94:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0D:14:BC:E9:0F:02:FA:CC:B4:44:CF:77:03:AA:96:0F:00:33:C7
            X509v3 Authority Key Identifier:
                keyid:F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/3139312e3235332e302e302f32302d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bb:6f:03:e8:93:8a:8f:20:45:4e:3e:c7:a9:bd:c0:bd:c4:b7:
         f0:f1:02:2c:a6:e5:d2:af:97:fa:e8:c1:9a:b8:bc:6b:f7:b5:
         1e:7e:0e:05:bc:75:a5:84:14:1c:c6:36:4a:bd:25:8f:e8:c4:
         89:1e:8b:65:66:36:e1:9d:a6:27:19:9c:25:36:bc:ac:c9:6b:
         ba:8e:b2:0a:dc:97:86:10:6a:26:94:76:40:8b:51:86:7b:2f:
         fe:33:5f:92:3f:1d:49:d4:6e:5a:19:ea:2f:18:93:38:69:b5:
         76:7d:77:5e:8b:d7:24:fa:f6:df:1b:e8:c5:a4:28:f9:87:00:
         fd:7b:ee:78:71:6b:8d:6c:a9:e2:66:fc:99:84:1e:74:29:af:
         c5:c0:08:76:f6:05:82:48:b1:15:52:ae:c7:14:80:0e:8b:f6:
         c8:df:46:30:69:61:f4:ce:6f:59:2c:c8:9d:e8:89:7e:95:f0:
         cc:20:44:ba:26:c2:30:0f:af:50:fc:19:d2:8a:76:12:34:fc:
         21:ba:26:ba:17:35:3c:8d:82:9f:2e:be:19:ed:a1:c7:cb:01:
         95:f9:ed:20:4b:e0:b3:af:c1:44:3d:44:79:d0:01:ce:ae:f7:
         8f:82:71:fe:57:17:c8:5b:af:fd:ca:27:22:0b:d5:97:4f:18:
         b5:59:76:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:49:44 2025 by rpki-client