Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31362e302f32332d3233203d3e203532393136.roa
File:                     3134332e3235352e31362e302f32332d3233203d3e203532393136.roa (raw, json)
Hash identifier:          Uk/sCSjVF+56HCPrvrNzZIyQFnE1DbZcTuhg2eWx3io=
Subject key identifier:   6A:59:FC:3E:CD:C0:21:91:50:9F:51:08:2C:2E:E8:54:55:F8:E9:34
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       24A077E4B994CC2D1ADF91A4A8FF60C53301E439
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31362e302f32332d3233203d3e203532393136.roa
Signing time:             Wed 05 Mar 2025 21:16:09 +0000
ROA not before:           Wed 05 Mar 2025 21:11:09 +0000
ROA not after:            Wed 04 Mar 2026 21:16:09 +0000
asID:                     52916
IP address blocks:        143.255.16.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a0:77:e4:b9:94:cc:2d:1a:df:91:a4:a8:ff:60:c5:33:01:e4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Mar  5 21:11:09 2025 GMT
            Not After : Mar  4 21:16:09 2026 GMT
        Subject: CN=6A59FC3ECDC02191509F51082C2EE85455F8E934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:bd:12:bd:96:c2:a1:48:61:19:69:cc:18:
                    52:ff:eb:9b:65:d6:ff:de:5e:a9:0a:62:25:99:75:
                    8d:fc:2c:de:f3:da:e2:d4:19:5c:a2:a7:be:5c:a8:
                    d2:a1:e5:f3:9f:b4:c8:8a:11:64:fc:ae:f0:96:f4:
                    88:90:c2:10:89:1d:86:35:7f:87:de:f7:ac:e7:a9:
                    86:c4:00:ab:ee:00:94:01:2d:fd:72:d7:74:3b:53:
                    ab:bc:fa:01:a9:85:be:12:23:05:55:95:f9:b1:fe:
                    67:bb:c6:9a:09:ff:ca:92:79:e1:ff:9f:d4:3d:fc:
                    be:f9:a5:ae:c4:ee:7e:8d:9f:00:74:3c:22:90:c2:
                    5e:35:c7:8d:05:61:ef:04:20:c7:03:e3:cd:e9:c3:
                    6b:2b:53:ec:df:7f:69:b1:45:a1:5d:7d:82:52:2c:
                    14:8d:6f:95:47:8f:6e:c6:bc:f5:1c:c1:e3:f4:dd:
                    39:47:8e:b1:de:8c:f4:ac:ce:06:7e:77:67:13:80:
                    a9:f3:07:5d:6e:03:8a:4b:99:e1:fd:c9:e8:79:8a:
                    7d:8c:f6:2c:63:76:41:4a:b5:78:e1:13:1b:9b:ac:
                    9e:0e:30:76:c7:67:da:83:ea:ac:5a:d9:51:78:be:
                    91:ba:7e:85:32:d1:c3:58:2b:64:45:e4:98:fa:dd:
                    ae:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:59:FC:3E:CD:C0:21:91:50:9F:51:08:2C:2E:E8:54:55:F8:E9:34
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31362e302f32332d3233203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:4d:4b:76:80:83:29:1e:23:80:20:b2:3b:0a:1b:7a:24:05:
         da:6e:c3:7e:2e:63:d1:63:45:73:14:2e:bf:4a:19:43:76:57:
         85:ac:74:fa:08:03:ac:4a:2c:6b:82:45:9c:e7:11:da:f3:b1:
         6e:a5:7a:eb:75:7b:ad:56:d6:84:ef:a8:39:01:21:ff:27:0b:
         dd:cf:17:2c:e6:39:7f:ba:82:a2:d4:39:02:c6:85:08:8d:b7:
         18:82:7c:23:80:a3:8f:c9:4c:2b:98:5c:64:17:08:b1:48:27:
         ce:83:8a:0f:9b:4d:36:53:25:81:d6:56:91:0c:04:9f:5f:e8:
         71:64:2a:75:4a:ba:84:c9:94:7c:95:26:89:0b:c9:5d:1c:23:
         d2:97:05:e6:43:82:3d:a1:66:55:81:4d:d0:c7:fe:c8:33:89:
         a3:98:a3:7e:51:53:e4:74:f8:05:82:3b:d2:aa:65:89:9b:ab:
         a6:cc:27:1e:df:2c:74:23:1e:d2:6b:e4:96:57:f2:19:99:21:
         c1:97:65:d4:8f:89:6b:65:5f:b3:b3:72:34:f5:6b:1a:dd:33:
         15:8a:08:4b:16:dd:ca:35:38:41:c6:60:b4:0d:a4:4a:26:93:
         e2:59:df:bc:eb:9f:2b:10:61:41:b7:d3:d7:8b:91:ea:cb:de:
         ae:ef:58:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:51:01 2025 by rpki-client