Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3139312e362e382e302f32312d3234203d3e203631383332.roa
File:                     3139312e362e382e302f32312d3234203d3e203631383332.roa (raw, json)
Hash identifier:          7mPTQu5A3XncIOkOcW0l06erMsWHlc+IJDHWNRgvUzc=
Subject key identifier:   31:40:D9:BE:B9:37:F6:AE:A7:21:6A:F4:8A:C4:C2:86:74:AC:7C:CB
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       F9281CEB22E0B07B5EFE2FD24616378F16F8AA
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3139312e362e382e302f32312d3234203d3e203631383332.roa
Signing time:             Wed 07 Jun 2023 04:02:40 +0000
ROA not before:           Wed 07 Jun 2023 03:57:40 +0000
ROA not after:            Wed 05 Jun 2024 04:02:40 +0000
asID:                     61832
IP address blocks:        191.6.8.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f9:28:1c:eb:22:e0:b0:7b:5e:fe:2f:d2:46:16:37:8f:16:f8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Jun  7 03:57:40 2023 GMT
            Not After : Jun  5 04:02:40 2024 GMT
        Subject: CN=3140D9BEB937F6AEA7216AF48AC4C28674AC7CCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fc:6a:97:fd:0f:f4:31:0f:7d:a5:c6:c5:e0:
                    bb:2e:ea:55:90:50:72:27:8c:26:e1:49:c3:e9:ca:
                    ff:e7:b1:aa:9a:73:f8:5a:c5:ac:75:74:a9:14:1f:
                    00:b2:20:05:25:08:52:80:3f:37:96:42:41:1d:d7:
                    b0:97:a4:b3:4c:b4:f4:b4:18:cc:4d:44:b6:ac:79:
                    6b:13:74:0c:b7:56:0b:94:50:28:68:23:d4:ca:66:
                    c4:b4:26:9f:26:09:14:2c:46:ad:a4:6e:d8:74:a2:
                    00:a7:e9:c2:1f:fc:9e:87:6c:ee:23:06:90:ca:e6:
                    3c:83:5c:a7:93:a7:f8:84:64:99:7b:af:0b:17:f7:
                    b7:75:39:fb:21:bf:60:12:ed:10:f7:df:21:58:09:
                    8f:cb:2d:73:cd:de:9e:d3:d9:a3:3b:69:7f:9e:63:
                    fc:e3:6f:63:b8:80:54:06:26:28:16:1f:2b:54:4d:
                    8a:f8:30:fc:4e:b4:b9:30:a5:7e:39:0f:c9:e6:3b:
                    02:07:65:03:cb:d9:77:56:4a:04:00:bc:4c:7e:e4:
                    da:5e:b4:21:16:d5:52:3d:1b:72:24:37:af:9d:d3:
                    ca:e0:c2:f6:4f:00:87:61:f4:60:34:3e:1f:d9:a8:
                    91:6d:6f:2a:eb:04:56:c2:e7:6e:87:55:f4:1d:27:
                    fb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:40:D9:BE:B9:37:F6:AE:A7:21:6A:F4:8A:C4:C2:86:74:AC:7C:CB
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3139312e362e382e302f32312d3234203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:88:50:a2:9d:35:29:c8:f1:64:05:22:47:2e:b4:92:fe:4b:
         e0:26:52:4e:f1:21:39:db:c1:ae:3c:24:36:65:ec:bd:98:ad:
         e3:79:d6:fc:c9:b3:7a:74:0b:a7:c6:80:bc:41:9d:d0:71:dc:
         a7:0c:53:07:89:31:97:dd:e0:31:ca:d1:07:32:23:ca:cc:3b:
         0e:08:47:e3:11:50:d8:5b:77:71:f2:7c:4e:c8:67:50:38:db:
         15:17:77:26:1a:47:de:ff:23:7a:a5:01:c8:af:7b:45:fd:8e:
         9d:1e:2a:70:a8:16:1d:4e:2a:0f:8c:1e:a6:0d:95:7a:4c:fd:
         0e:23:2c:7a:20:3d:5d:8d:28:00:42:b0:77:e8:71:84:0d:bc:
         c5:d7:e6:9c:4b:45:4a:33:de:3a:86:bd:35:88:de:5c:d2:83:
         5c:38:2f:96:75:8f:c3:70:66:a1:c5:39:ba:7b:f6:d4:75:d2:
         ba:fc:d2:6d:87:96:62:e4:88:dc:68:69:68:11:63:44:c0:f3:
         c8:ad:7a:60:8b:1d:86:09:4f:a3:ee:79:a5:07:4c:cd:d7:0f:
         04:79:f4:ce:40:60:82:8c:9d:d1:c2:01:c6:4a:ce:eb:fb:db:
         78:49:66:24:53:95:2b:d1:bf:c5:33:36:4b:49:f5:6a:30:17:
         4d:65:44:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:57:56 2025 by rpki-client