Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138302e302f32322d3234203d3e20323633353039.roa
File:                     3139312e3234332e3138302e302f32322d3234203d3e20323633353039.roa (raw, json)
Hash identifier:          ogFI854q4roF6ibXQTpWC9Um7jrKjoyhVnRNxMpZkhc=
Subject key identifier:   4C:32:AA:56:0F:33:64:29:11:0A:AC:D0:02:4D:1E:90:00:55:02:24
Certificate issuer:       /CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
Certificate serial:       5EB9C5ABD36CCC22B933AC5568DEE849FA236CF2
Authority key identifier: D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138302e302f32322d3234203d3e20323633353039.roa
Signing time:             Sun 15 Oct 2023 06:34:08 +0000
ROA not before:           Sun 15 Oct 2023 06:29:08 +0000
ROA not after:            Sun 13 Oct 2024 06:34:08 +0000
asID:                     263509
IP address blocks:        191.243.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b9:c5:ab:d3:6c:cc:22:b9:33:ac:55:68:de:e8:49:fa:23:6c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
        Validity
            Not Before: Oct 15 06:29:08 2023 GMT
            Not After : Oct 13 06:34:08 2024 GMT
        Subject: CN=4C32AA560F336429110AACD0024D1E9000550224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3d:d0:52:a8:53:b1:fd:a8:ab:cd:a7:b6:88:
                    38:f8:c9:82:44:8c:ad:ce:36:8d:dd:b9:3c:97:65:
                    68:2b:15:ba:51:5f:00:e8:c1:00:d7:72:f5:0f:e8:
                    f6:47:c8:ed:37:71:8b:62:3e:19:b1:61:e5:94:7f:
                    4a:e3:85:6f:fd:42:95:7c:f6:db:aa:51:04:2c:28:
                    86:a6:88:de:62:af:f8:67:eb:0e:62:94:92:30:7a:
                    be:ee:5e:8f:f4:b7:a0:2f:91:31:39:f1:34:97:d1:
                    03:30:71:17:0f:ab:e1:e3:83:df:cf:a7:29:52:dd:
                    89:27:4f:b1:30:5c:b6:48:ec:4c:cd:0b:a3:c8:0f:
                    7c:00:f6:b7:47:59:61:c6:dc:8d:39:1e:71:cf:7f:
                    42:8e:7b:88:90:bc:ba:eb:a2:ca:6d:9b:44:fe:3c:
                    79:ca:26:fc:15:8f:e2:65:b2:b2:27:77:e7:58:ec:
                    b6:f6:62:c0:88:19:67:15:4d:b3:bb:f5:7d:3f:04:
                    ad:a8:66:86:0f:c4:2b:a4:57:c5:28:ca:ce:4b:37:
                    b9:36:5c:68:6d:4a:3d:78:36:dc:dd:49:a5:f2:6f:
                    99:bf:e7:74:ee:15:16:4c:fa:33:b4:79:14:79:4b:
                    33:9e:d3:23:22:80:5d:1e:3b:3a:55:44:e9:c5:d6:
                    eb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:32:AA:56:0F:33:64:29:11:0A:AC:D0:02:4D:1E:90:00:55:02:24
            X509v3 Authority Key Identifier:
                keyid:D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138302e302f32322d3234203d3e20323633353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:4d:3e:d3:4b:bb:73:0d:b8:4d:f4:c7:03:66:07:9e:48:dc:
         69:d4:9e:cc:d0:a1:74:63:bd:ae:3a:d3:ac:c9:1a:6f:f5:94:
         a3:65:36:2a:de:af:40:14:88:e5:b9:6f:fd:4b:d7:64:3a:bf:
         08:76:56:88:09:fe:95:95:55:36:1f:59:21:58:2b:6f:2e:be:
         70:56:2e:0d:22:dd:09:14:3d:bc:1a:43:45:b7:3c:00:0f:57:
         f1:b5:48:5b:10:a3:0d:a1:98:ef:ef:42:8a:0f:a8:48:ab:30:
         48:df:7d:2f:58:0f:bb:7c:8e:aa:c7:ea:b1:6e:21:06:c2:3b:
         b2:ed:4c:76:bb:3c:e4:57:fc:f5:ad:37:a9:fc:a1:6f:2c:c0:
         f5:4d:80:6c:d8:cb:3a:dc:8b:68:2e:e3:ac:fc:7f:07:f4:f0:
         38:9a:47:b2:95:fd:0f:8e:88:8c:e2:f5:75:14:80:fc:a5:48:
         ef:79:96:26:88:c8:c5:64:ff:7c:3f:e5:f9:98:18:ee:c4:ce:
         29:80:4f:59:1d:cf:36:4f:33:83:dc:9e:a8:64:60:d1:d3:5d:
         71:49:45:98:a3:49:cc:54:e3:6a:a1:43:51:a9:58:b0:6d:05:
         a2:06:0a:3c:45:44:e6:43:42:c4:bc:63:b4:53:ea:0a:1d:7a:
         09:9e:c0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:54:12 2025 by rpki-client