Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135392e302f32342d3234203d3e20323639373132.roa
File:                     3139302e3131322e3135392e302f32342d3234203d3e20323639373132.roa (raw, json)
Hash identifier:          UGPL2INYUnOxq1cqhYrS43yOQ9qWVQ1aXMrMCsd9U/I=
Subject key identifier:   1F:D2:A8:CD:DD:46:9C:DC:FC:6D:79:8E:C5:E8:AD:FE:8F:86:52:DF
Certificate issuer:       /CN=9F6CAAB00E7B77388E82F39831FB778453932941
Certificate serial:       342619B81FE456BCE7EBC126D03829ECEC8975CB
Authority key identifier: 9F:6C:AA:B0:0E:7B:77:38:8E:82:F3:98:31:FB:77:84:53:93:29:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F6CAAB00E7B77388E82F39831FB778453932941.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135392e302f32342d3234203d3e20323639373132.roa
Signing time:             Mon 19 Feb 2024 18:20:31 +0000
ROA not before:           Mon 19 Feb 2024 18:15:31 +0000
ROA not after:            Mon 17 Feb 2025 18:20:31 +0000
asID:                     269712
IP address blocks:        190.112.159.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:26:19:b8:1f:e4:56:bc:e7:eb:c1:26:d0:38:29:ec:ec:89:75:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F6CAAB00E7B77388E82F39831FB778453932941
        Validity
            Not Before: Feb 19 18:15:31 2024 GMT
            Not After : Feb 17 18:20:31 2025 GMT
        Subject: CN=1FD2A8CDDD469CDCFC6D798EC5E8ADFE8F8652DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:63:c3:34:dc:c6:3e:e3:c1:de:23:1c:5c:
                    5b:31:c9:2c:5a:19:ce:ec:15:9c:aa:d5:0c:db:be:
                    f1:9b:8c:16:59:0d:92:98:af:33:5f:c8:ba:cb:4c:
                    d4:78:d0:bb:46:f9:45:ea:3c:f8:a5:b7:e8:7b:80:
                    ae:75:ec:ae:d9:35:bc:68:bd:ca:75:31:df:49:9c:
                    0c:39:7a:4f:c7:43:3b:16:a3:f2:73:86:8d:af:c3:
                    44:38:7c:12:e7:b1:97:c7:e6:56:33:55:bb:cf:9a:
                    81:cd:d9:cb:17:7d:d7:d6:e0:3a:50:a2:28:83:2c:
                    63:e2:5b:30:81:bb:0e:22:0f:88:42:09:6e:3f:8e:
                    b9:6f:c4:05:8e:6a:9c:4e:1c:4e:75:78:24:c2:58:
                    17:16:91:8c:94:d4:8f:3c:c9:1f:30:29:ca:30:48:
                    c1:6f:7e:e9:80:7e:ac:23:f8:7d:41:49:94:75:2e:
                    91:31:75:f5:cd:b1:ea:73:be:72:ba:47:6f:1f:72:
                    00:fa:54:0c:3a:70:16:60:a0:d2:a7:66:8b:34:99:
                    93:fc:e9:32:9a:f8:4e:dd:f6:3d:5c:f1:39:fa:2c:
                    0d:77:34:23:69:b2:f8:5b:c1:31:b4:c4:3c:0b:e9:
                    94:7d:b4:65:50:e9:c9:cb:c9:25:13:44:5a:6d:66:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D2:A8:CD:DD:46:9C:DC:FC:6D:79:8E:C5:E8:AD:FE:8F:86:52:DF
            X509v3 Authority Key Identifier:
                keyid:9F:6C:AA:B0:0E:7B:77:38:8E:82:F3:98:31:FB:77:84:53:93:29:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9F6CAAB00E7B77388E82F39831FB778453932941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F6CAAB00E7B77388E82F39831FB778453932941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135392e302f32342d3234203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:99:91:79:dc:4f:01:cd:42:f5:97:eb:88:1e:70:31:72:38:
         c0:41:4f:da:a3:34:bc:35:ab:d2:16:1a:ee:04:0d:cd:e8:dc:
         16:ab:30:d1:cd:f2:56:16:c6:8b:b7:37:3e:08:ef:f7:7b:43:
         4b:13:7d:6b:5e:71:e7:d3:72:bc:d3:65:85:97:8c:ef:a8:eb:
         50:7b:0e:4c:a6:48:69:20:17:13:92:7d:ac:7b:47:3a:12:39:
         58:1c:8f:b2:cc:ef:69:fe:9d:c3:e0:cb:2a:2a:b8:10:2d:d5:
         89:ca:6f:4d:79:5d:3e:42:9e:a1:de:aa:d7:84:da:5c:1e:a8:
         c8:79:dd:eb:3d:0b:26:02:56:79:d5:2f:31:7b:3c:c6:9e:6c:
         7f:e3:1b:3c:9a:7f:fd:7f:bc:10:3a:60:1c:26:1c:3a:4a:32:
         45:de:bb:52:5d:f1:45:de:a1:e8:1b:58:c9:85:24:72:ba:a9:
         1a:f2:f0:71:0c:a4:93:3f:66:ea:e3:8d:ee:22:9f:a8:ad:29:
         5a:4c:1a:7e:da:8b:87:4e:2f:2b:f9:26:46:05:41:68:d0:93:
         b9:90:47:4b:90:07:4a:1b:4d:e4:1f:a0:85:b7:04:2e:67:2f:
         d2:82:0e:4e:76:50:54:e1:c5:80:47:bb:7a:a5:bf:17:78:c4:
         11:a3:34:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:03 2025 by rpki-client