Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa
File:                     3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa (raw, json)
Hash identifier:          aFqu8XkHv2P1Tj5Epf6dP0lpDJaTueg1m1UcNcZzh88=
Subject key identifier:   C4:15:EF:4C:EC:06:E1:FC:9A:16:3F:9E:02:61:FA:6F:10:56:B9:66
Certificate issuer:       /CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
Certificate serial:       07DE8788A038F6FFEABB0FF76AE1BC4C4DB48566
Authority key identifier: FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa
Signing time:             Thu 06 Mar 2025 09:33:39 +0000
ROA not before:           Thu 06 Mar 2025 09:28:39 +0000
ROA not after:            Thu 05 Mar 2026 09:33:39 +0000
asID:                     263482
IP address blocks:        191.242.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:de:87:88:a0:38:f6:ff:ea:bb:0f:f7:6a:e1:bc:4c:4d:b4:85:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
        Validity
            Not Before: Mar  6 09:28:39 2025 GMT
            Not After : Mar  5 09:33:39 2026 GMT
        Subject: CN=C415EF4CEC06E1FC9A163F9E0261FA6F1056B966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:16:92:cd:d4:47:46:27:df:c9:df:52:60:
                    71:5e:d2:34:57:b6:dd:93:b9:11:10:3a:11:40:d3:
                    27:60:a2:f4:aa:1c:df:11:bb:03:54:e4:8d:04:58:
                    1c:9f:ea:fc:4f:b4:55:a6:8a:01:36:fd:15:0e:b0:
                    41:d2:8f:ac:ec:71:09:94:b0:98:49:c1:3a:c1:76:
                    29:83:e8:28:a8:6b:80:03:3c:85:03:56:95:4d:3b:
                    74:25:c3:e4:a6:ab:ef:53:9f:93:05:dc:57:90:08:
                    04:6f:92:02:67:54:46:9e:1a:dd:b8:fb:8c:bb:5a:
                    7d:04:70:2c:17:09:62:c9:30:f1:17:c4:50:58:03:
                    45:da:70:74:20:39:a9:76:46:43:38:a3:c5:a6:14:
                    17:43:ca:d4:97:35:c0:a7:fe:9b:77:26:3a:86:6e:
                    e4:49:e4:32:9f:07:ba:25:2a:07:15:71:e8:d8:16:
                    ba:2f:dd:7c:1c:32:48:bc:54:c5:d4:06:dd:66:62:
                    80:a5:22:d4:20:b6:8c:03:0b:0d:2f:e9:f3:f2:1f:
                    34:8c:05:c5:0f:b2:26:48:cb:9b:98:96:91:5c:4d:
                    76:2e:52:0a:93:85:00:c4:80:aa:a0:05:da:63:a2:
                    d1:b7:33:17:11:21:95:d2:a6:c8:a5:a0:4f:a7:d2:
                    80:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:15:EF:4C:EC:06:E1:FC:9A:16:3F:9E:02:61:FA:6F:10:56:B9:66
            X509v3 Authority Key Identifier:
                keyid:FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:2a:3d:25:f4:5a:88:87:70:c6:42:71:4d:66:5b:22:61:0d:
         91:68:4c:50:7e:c3:3c:c8:76:96:3a:74:2b:5e:38:81:16:05:
         e1:35:09:8f:3d:89:fb:8b:3c:4a:6c:4b:4b:18:24:e5:45:a7:
         e5:78:a2:04:ed:43:b7:d3:c8:38:30:ae:2e:b9:4d:a8:05:5b:
         32:f5:e4:24:39:83:a3:3b:9f:b6:98:b4:80:2d:91:98:99:84:
         1b:5e:8c:98:9e:3c:b3:bb:d4:24:f3:4e:84:7c:39:bf:36:6d:
         8f:a0:1f:60:ce:b1:03:4f:c4:a5:62:ad:e2:ee:93:39:55:cb:
         d4:8b:cc:32:86:04:f7:b0:c1:99:b5:4c:58:00:77:b7:ee:51:
         05:5b:4b:90:fa:69:42:62:09:1f:26:13:9f:95:7a:28:13:58:
         5f:16:c2:9b:44:0a:2b:e6:b2:44:1e:0f:58:33:29:e1:f2:6e:
         68:61:5f:d7:06:5b:56:cf:92:eb:3b:db:57:a4:e5:af:35:43:
         1c:69:87:1b:37:13:31:ff:ca:52:e6:95:9d:20:29:41:4b:2e:
         3f:5a:2f:dc:ee:ac:18:7d:3f:c7:86:2b:22:84:a1:e4:c9:2c:
         fa:1b:65:2a:e5:65:bb:23:5a:83:d7:34:63:81:d7:eb:f8:89:
         2a:57:33:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:27:20 2025 by rpki-client