Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/3139322e3134312e3130362e302f32332d3233203d3e20323637353335.roa
File:                     3139322e3134312e3130362e302f32332d3233203d3e20323637353335.roa (raw, json)
Hash identifier:          T4aRc3cfAbceaheUqTI8ux3FGzVGr2ML5svD3udG8pg=
Subject key identifier:   E7:EC:1B:9F:88:1F:1A:E4:24:E1:9F:07:E8:4D:76:78:8E:C7:FD:DB
Certificate issuer:       /CN=24B76CD87395C0B9E7F969993DB4701E0DFBE8E3
Certificate serial:       0281D6EE11CA5E08F4C08EA3FCD85B471E29C38B
Authority key identifier: 24:B7:6C:D8:73:95:C0:B9:E7:F9:69:99:3D:B4:70:1E:0D:FB:E8:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B76CD87395C0B9E7F969993DB4701E0DFBE8E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/3139322e3134312e3130362e302f32332d3233203d3e20323637353335.roa
Signing time:             Thu 06 Mar 2025 09:52:47 +0000
ROA not before:           Thu 06 Mar 2025 09:47:47 +0000
ROA not after:            Thu 05 Mar 2026 09:52:47 +0000
asID:                     267535
IP address blocks:        192.141.106.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:81:d6:ee:11:ca:5e:08:f4:c0:8e:a3:fc:d8:5b:47:1e:29:c3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24B76CD87395C0B9E7F969993DB4701E0DFBE8E3
        Validity
            Not Before: Mar  6 09:47:47 2025 GMT
            Not After : Mar  5 09:52:47 2026 GMT
        Subject: CN=E7EC1B9F881F1AE424E19F07E84D76788EC7FDDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:e1:d4:87:45:5b:0c:00:8a:3d:21:a4:2b:
                    fa:bd:40:4b:be:94:e0:fd:b0:d7:48:e7:36:84:c1:
                    7a:39:54:4f:59:e1:a2:7f:60:7a:07:1e:b3:e6:f2:
                    b7:65:cf:d9:a4:bb:8b:3c:7c:65:07:3a:ce:cf:fb:
                    a0:d1:61:59:f8:18:56:e0:ea:87:83:4c:16:8b:19:
                    9c:a1:57:b2:e7:1c:31:eb:4f:d2:01:d6:1e:ba:f3:
                    eb:0c:f3:f6:e5:aa:a7:fd:cf:84:37:08:b1:ae:02:
                    d5:f5:0c:9c:62:cb:6d:cf:91:11:37:f1:7a:0f:4f:
                    73:c2:79:18:e5:5b:bb:d5:1b:ce:cf:8a:0e:29:ac:
                    4f:e1:0d:43:d1:bf:48:08:15:9f:87:b9:45:a8:c0:
                    cd:c3:ac:e0:aa:10:a5:3f:4e:e2:2e:9d:96:86:ef:
                    e4:d7:6a:e6:6d:ce:58:1d:37:3a:59:e8:fe:b6:44:
                    cf:e1:b3:ea:48:87:79:8b:ef:e0:ff:34:db:b7:d5:
                    b3:96:a4:2e:d0:a4:fa:e1:3f:97:71:8f:27:db:db:
                    c0:f5:d3:58:63:19:c6:6c:e2:31:5c:9b:2e:68:43:
                    ca:f7:1e:e6:e9:24:14:d9:c2:4f:ca:75:d3:49:6e:
                    ab:6d:de:83:0e:d5:29:31:03:3b:29:3d:78:2f:72:
                    2b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EC:1B:9F:88:1F:1A:E4:24:E1:9F:07:E8:4D:76:78:8E:C7:FD:DB
            X509v3 Authority Key Identifier:
                keyid:24:B7:6C:D8:73:95:C0:B9:E7:F9:69:99:3D:B4:70:1E:0D:FB:E8:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/24B76CD87395C0B9E7F969993DB4701E0DFBE8E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B76CD87395C0B9E7F969993DB4701E0DFBE8E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/1/3139322e3134312e3130362e302f32332d3233203d3e20323637353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:a9:24:4f:8c:b6:cc:eb:6c:b3:4b:71:d7:19:5f:9a:d3:4c:
         9e:70:aa:3e:19:19:a5:9a:b4:e4:a4:5d:d5:8f:c1:7c:e2:6a:
         93:bd:7d:b7:84:31:20:d7:1c:50:ec:9c:3f:87:ac:bd:eb:5e:
         09:a8:e0:b5:2b:96:92:f0:6f:0b:38:af:2b:cb:36:65:3f:3c:
         d1:e7:1c:a1:34:59:75:6a:59:ef:4a:6d:70:a6:fe:73:e3:23:
         1b:cc:ec:04:07:61:5c:a9:52:2d:b0:a3:7a:ec:e4:ad:58:71:
         f3:dd:69:e9:90:9b:09:60:38:bb:3b:62:b9:3d:05:7d:65:e4:
         4f:54:dd:7d:11:74:a3:23:52:03:87:8d:26:e6:af:44:bf:90:
         34:9c:45:9a:8e:77:13:bf:1d:3c:38:c1:a4:10:51:ee:92:cd:
         93:c8:e0:30:e0:e9:0f:23:ca:af:2a:cf:64:4c:ef:cb:8a:ae:
         06:12:b4:2e:9c:d2:09:ac:37:92:79:5c:16:a4:ae:b0:b7:0b:
         88:54:8d:9f:65:28:1a:7e:09:7e:c6:47:98:7e:7f:9a:df:13:
         d7:a2:70:e0:f0:22:5e:8b:fa:fc:8b:cc:a0:67:5d:70:b8:8f:
         d8:88:df:6b:c3:b6:78:f3:12:29:c3:82:6c:b6:3b:f2:37:f0:
         ec:b6:66:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:53:21 2025 by rpki-client