Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CivBN81R3pbo6z32G9xa9LZCDVNtUPRL3KCTmbKLDwgu/0/3139322e3134302e3130342e302f32322d3234203d3e20323636323632.roa
File:                     3139322e3134302e3130342e302f32322d3234203d3e20323636323632.roa (raw, json)
Hash identifier:          DuABOLjNrKmiTQmx37QkC9FCtbHHLfMksCoaJlAa4i8=
Subject key identifier:   D4:46:FE:7F:B6:96:91:22:4A:44:10:DA:DC:83:14:86:B3:5E:77:33
Certificate issuer:       /CN=618DD4A40E00188ACD6CD728BA6A1EBD60F14F5C
Certificate serial:       0F93EB9D3338BC86B6D4B7B53A8453A088CD4897
Authority key identifier: 61:8D:D4:A4:0E:00:18:8A:CD:6C:D7:28:BA:6A:1E:BD:60:F1:4F:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/618DD4A40E00188ACD6CD728BA6A1EBD60F14F5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CivBN81R3pbo6z32G9xa9LZCDVNtUPRL3KCTmbKLDwgu/0/3139322e3134302e3130342e302f32322d3234203d3e20323636323632.roa
Signing time:             Fri 23 Feb 2024 03:27:14 +0000
ROA not before:           Fri 23 Feb 2024 03:22:14 +0000
ROA not after:            Fri 21 Feb 2025 03:27:14 +0000
asID:                     266262
IP address blocks:        192.140.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:93:eb:9d:33:38:bc:86:b6:d4:b7:b5:3a:84:53:a0:88:cd:48:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618DD4A40E00188ACD6CD728BA6A1EBD60F14F5C
        Validity
            Not Before: Feb 23 03:22:14 2024 GMT
            Not After : Feb 21 03:27:14 2025 GMT
        Subject: CN=D446FE7FB69691224A4410DADC831486B35E7733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:69:50:14:67:34:0f:95:ef:d3:cf:84:8e:08:
                    9b:2a:a7:89:11:14:ea:6a:84:81:2d:6e:83:4d:d2:
                    d0:55:9a:85:fc:09:24:a7:a9:bd:b6:5b:02:41:e3:
                    c3:95:7f:01:1f:08:ea:4b:f2:0b:6f:f0:68:93:f9:
                    64:06:5a:ec:fc:6d:03:95:71:2d:fb:b1:33:b9:80:
                    0c:bf:0e:16:bd:2f:d4:22:54:cd:24:56:51:f4:a2:
                    c1:5b:95:37:91:fd:2f:d8:2d:d9:f0:eb:3a:b2:dc:
                    14:e1:6e:28:35:dd:15:07:9b:7b:b9:4c:14:c5:7b:
                    a7:c5:f8:fd:f7:ee:d6:1f:ee:81:ac:7a:b4:a0:6e:
                    6a:42:af:99:5e:f2:14:d4:94:93:a3:57:92:cc:85:
                    41:0d:5b:e2:63:95:0c:e6:50:1f:67:7c:91:87:3c:
                    dc:b4:e4:3e:a3:7e:b6:06:ce:05:b1:a9:60:72:03:
                    57:0b:4c:6e:94:39:a3:7d:40:6c:50:32:35:9e:2b:
                    c1:eb:ba:e6:85:35:3a:b2:84:58:8e:95:c3:02:18:
                    95:d9:83:5b:cb:91:51:9f:03:d2:fc:6c:03:cc:94:
                    89:8d:99:a3:f5:ae:20:5e:c8:aa:2e:7f:eb:c3:c5:
                    98:47:ab:1b:37:31:90:e8:01:1c:b9:7a:15:b8:61:
                    99:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:46:FE:7F:B6:96:91:22:4A:44:10:DA:DC:83:14:86:B3:5E:77:33
            X509v3 Authority Key Identifier:
                keyid:61:8D:D4:A4:0E:00:18:8A:CD:6C:D7:28:BA:6A:1E:BD:60:F1:4F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CivBN81R3pbo6z32G9xa9LZCDVNtUPRL3KCTmbKLDwgu/0/618DD4A40E00188ACD6CD728BA6A1EBD60F14F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/618DD4A40E00188ACD6CD728BA6A1EBD60F14F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CivBN81R3pbo6z32G9xa9LZCDVNtUPRL3KCTmbKLDwgu/0/3139322e3134302e3130342e302f32322d3234203d3e20323636323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:89:67:0a:14:44:8b:bf:0d:ce:2f:ca:78:35:ed:54:81:23:
         ec:21:da:e0:2b:f5:05:20:23:86:6c:b6:fe:9d:68:b1:41:ec:
         ab:99:78:88:76:25:bb:be:fe:2b:70:a6:b3:6f:44:73:94:30:
         c9:b0:92:ad:d7:26:e5:3d:c8:0a:a1:65:96:35:70:47:9c:cf:
         7c:c3:bd:3e:ff:21:fb:68:b0:8a:f6:66:da:5a:db:56:d2:8d:
         57:70:13:92:1d:12:05:b2:1e:86:d5:db:cf:de:24:e6:a6:9f:
         4e:6c:93:fb:c4:78:87:98:5e:02:68:46:d7:5c:12:c1:cf:08:
         02:53:fc:60:98:58:5c:f7:79:e2:6f:e4:4e:63:b3:1a:de:e4:
         76:f1:11:93:21:e3:4a:11:15:67:99:2c:a0:f3:87:cd:06:93:
         b1:a9:4f:8e:7f:9b:26:c6:83:fd:29:5c:7e:03:6f:d1:76:e6:
         5d:a8:11:95:b1:da:53:66:f5:4c:b5:a3:76:78:5a:18:b5:6b:
         c8:6f:f8:22:6c:85:b5:5c:28:ba:18:2b:5a:e6:a5:23:58:89:
         12:b0:54:ca:13:63:61:a0:4d:48:f7:e1:20:be:21:66:72:d5:
         25:88:5a:d7:c6:41:dc:bd:aa:fb:0e:34:7a:78:60:cd:70:ee:
         d3:16:29:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:35 2025 by rpki-client