Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3235312e302f32342d3234203d3e20323633333032.roa
File:                     3139312e362e3235312e302f32342d3234203d3e20323633333032.roa (raw, json)
Hash identifier:          0G5elJOXGjs9PD0WSOENCKccLyXY/ViNhL0Mu6LM9j0=
Subject key identifier:   88:9F:95:07:EE:D6:DD:8D:7B:27:F7:0A:9C:6D:90:FF:B9:2B:E0:0D
Certificate issuer:       /CN=443FAA41D08D0DC55D06C514471A6A595278B345
Certificate serial:       3378BCF7092C87EFAC9E1B841A31E5BAE7C19A43
Authority key identifier: 44:3F:AA:41:D0:8D:0D:C5:5D:06:C5:14:47:1A:6A:59:52:78:B3:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443FAA41D08D0DC55D06C514471A6A595278B345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3235312e302f32342d3234203d3e20323633333032.roa
Signing time:             Tue 18 Jun 2024 18:37:22 +0000
ROA not before:           Tue 18 Jun 2024 18:32:22 +0000
ROA not after:            Tue 17 Jun 2025 18:37:22 +0000
asID:                     263302
IP address blocks:        191.6.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:78:bc:f7:09:2c:87:ef:ac:9e:1b:84:1a:31:e5:ba:e7:c1:9a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443FAA41D08D0DC55D06C514471A6A595278B345
        Validity
            Not Before: Jun 18 18:32:22 2024 GMT
            Not After : Jun 17 18:37:22 2025 GMT
        Subject: CN=889F9507EED6DD8D7B27F70A9C6D90FFB92BE00D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3c:d4:eb:38:51:93:09:90:cb:de:0e:74:ea:
                    59:42:36:5a:4c:2f:89:0c:9f:66:1e:bf:0d:e7:f9:
                    58:2f:89:35:32:29:a1:0d:48:d3:fe:8a:4b:e0:85:
                    38:2b:d7:63:03:e0:35:71:fb:fd:8a:05:02:6a:30:
                    5c:5f:46:e5:52:6f:b4:60:a9:3b:3a:54:7b:97:4d:
                    f2:f7:0a:3f:a8:49:18:fd:46:f5:cd:cc:80:0b:4b:
                    52:55:4e:fd:c9:35:21:15:59:ff:60:52:72:0c:cf:
                    00:33:fb:3b:59:f7:ca:4a:de:f5:7e:c6:8a:77:1f:
                    85:d9:36:5d:35:1e:f8:83:0a:52:1a:35:91:cb:8c:
                    da:7f:c9:b1:1a:05:af:15:ce:0a:86:16:bb:ab:5c:
                    f8:9d:a2:e1:87:27:4d:86:c8:c2:04:2c:77:55:c8:
                    8e:64:99:2b:59:d7:ad:c6:88:15:5e:6a:71:c1:44:
                    7d:8b:28:fe:4b:63:c3:a7:d7:ce:b2:ee:45:c7:a4:
                    7a:eb:e2:e7:bb:35:fc:d9:52:1f:76:d3:1d:f1:17:
                    a3:db:6b:39:07:c6:dc:5a:39:80:1b:70:e0:b7:8c:
                    32:1c:a3:6c:8d:60:d8:70:20:f1:b7:e9:c2:96:ac:
                    74:b1:59:14:8c:66:9a:fc:a8:3e:90:e5:19:05:c2:
                    44:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9F:95:07:EE:D6:DD:8D:7B:27:F7:0A:9C:6D:90:FF:B9:2B:E0:0D
            X509v3 Authority Key Identifier:
                keyid:44:3F:AA:41:D0:8D:0D:C5:5D:06:C5:14:47:1A:6A:59:52:78:B3:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/443FAA41D08D0DC55D06C514471A6A595278B345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443FAA41D08D0DC55D06C514471A6A595278B345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3235312e302f32342d3234203d3e20323633333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:21:b9:bf:96:69:4a:38:5d:22:bb:60:f5:46:92:95:a8:72:
         da:fc:08:95:85:d7:1e:42:ae:05:35:45:67:36:c9:5b:0b:98:
         5b:9d:d7:17:c5:b8:99:cb:7d:34:20:bc:cc:74:77:0a:ce:60:
         86:7c:a3:5e:a3:35:3e:c3:e7:b2:48:dd:91:55:bf:c2:93:4b:
         88:63:0e:2d:ac:f1:43:32:26:ac:a6:6a:45:9e:8d:44:4f:7a:
         b4:15:5d:41:9f:56:19:2d:91:e2:3a:40:5a:bc:14:c5:51:a2:
         e7:4c:c5:61:37:72:24:43:89:b7:12:e6:59:fd:4c:42:32:bd:
         2a:9d:dd:47:c7:0a:83:ca:b5:e3:aa:b2:ef:ae:d9:a0:d5:74:
         16:0f:6a:00:fd:94:53:0a:af:aa:01:5f:3a:7d:0b:38:c0:94:
         ae:20:a2:cc:c1:e5:6d:bb:61:25:02:21:2d:0d:90:ea:3c:30:
         ed:87:73:4e:d7:7c:0f:bf:d0:9f:40:78:65:e6:4e:a8:97:3d:
         25:f1:2e:91:39:ed:5b:22:2e:59:7c:8c:35:2d:3e:b9:74:99:
         78:15:63:61:58:91:21:ca:39:49:62:0b:c9:eb:b8:24:1b:dd:
         52:05:a2:28:ad:59:28:68:69:94:ca:6f:42:86:99:8f:ad:f2:
         13:c7:c7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:29 2025 by rpki-client