Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e39312e39362e302f31392d3332203d3e20323632353839.roa
File:                     3138392e39312e39362e302f31392d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          7hBqhQZEKltgG2yK7JuRSEoxH4BbqSStUSgP7b3yNAc=
Subject key identifier:   F6:2C:8F:0B:FE:CE:80:58:D9:1F:C5:40:57:2E:82:9E:53:F4:48:0C
Certificate issuer:       /CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
Certificate serial:       2FA0F12AA6CDAE34E0A2969110D4024B5843627D
Authority key identifier: C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e39312e39362e302f31392d3332203d3e20323632353839.roa
Signing time:             Fri 07 Mar 2025 19:53:39 +0000
ROA not before:           Fri 07 Mar 2025 19:48:39 +0000
ROA not after:            Fri 06 Mar 2026 19:53:39 +0000
asID:                     262589
IP address blocks:        189.91.96.0/19 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a0:f1:2a:a6:cd:ae:34:e0:a2:96:91:10:d4:02:4b:58:43:62:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
        Validity
            Not Before: Mar  7 19:48:39 2025 GMT
            Not After : Mar  6 19:53:39 2026 GMT
        Subject: CN=F62C8F0BFECE8058D91FC540572E829E53F4480C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5b:16:cf:58:3c:6f:06:4d:84:b6:a2:3a:b9:
                    66:90:7c:60:34:27:fe:01:b8:46:8f:d4:0d:e4:27:
                    c4:cb:89:15:26:5d:13:d9:42:0a:b3:23:a6:c5:da:
                    93:9e:88:f3:ed:f9:57:92:a6:3d:25:36:74:87:94:
                    bc:c5:8a:d1:4c:62:c2:d8:aa:48:3e:ca:df:1a:35:
                    55:d2:bc:d2:39:8e:53:37:e4:64:17:66:0c:c0:49:
                    1e:c9:77:2e:d3:93:42:7e:5e:4b:43:a3:c8:b1:67:
                    85:9e:0b:ba:97:ea:27:fb:7c:4a:8e:47:47:0d:59:
                    d8:6b:36:2d:a5:4e:43:5b:62:3c:bf:1a:c5:de:ae:
                    3f:e6:3f:a9:61:3d:dc:66:7e:3a:b2:86:03:fb:58:
                    b6:96:bb:59:23:06:ee:76:83:74:4a:04:f4:97:ce:
                    7b:3e:5d:3f:e9:8a:e7:d1:2b:ad:af:4c:b4:57:58:
                    24:f8:0b:4c:30:96:6d:60:9c:3b:73:8b:27:b2:dd:
                    ed:ee:e3:39:05:e3:04:a2:20:3b:b3:6f:69:58:bf:
                    7e:84:2c:2c:44:c1:c8:0f:34:11:86:e4:cf:54:f9:
                    fc:4f:58:d2:33:ea:af:94:49:d8:73:8e:f8:b4:06:
                    7b:3c:28:b8:b6:66:d6:e6:2e:d3:9b:73:b7:f8:42:
                    16:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2C:8F:0B:FE:CE:80:58:D9:1F:C5:40:57:2E:82:9E:53:F4:48:0C
            X509v3 Authority Key Identifier:
                keyid:C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e39312e39362e302f31392d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         e2:31:35:0d:7f:b7:f9:92:15:31:91:4b:5f:bb:39:0b:30:00:
         94:8c:10:cb:f7:34:14:b5:cb:c2:e4:43:2e:9c:36:a4:42:41:
         b4:98:6f:6d:18:a2:21:0d:ef:49:65:4f:83:56:6c:e7:ed:50:
         f4:30:22:26:66:4e:17:07:09:41:82:84:b7:55:60:5f:9f:bc:
         a3:ed:76:71:af:26:d9:a0:ad:58:1a:62:f3:d1:3e:c5:73:ce:
         45:96:7e:1d:07:c0:11:15:ea:1b:cf:af:26:95:9b:6a:fc:f7:
         24:4e:d4:ee:68:6f:dc:07:ce:2d:9e:a7:48:e5:4a:85:1b:1c:
         58:d1:e8:a0:bb:0f:48:e1:10:67:8a:a0:c4:cf:46:fe:b1:9b:
         be:84:59:bd:1c:2a:8a:21:bc:04:ef:24:8f:de:8e:8b:73:ac:
         89:00:34:3d:14:fe:39:f8:c1:2d:60:99:1a:60:ea:d0:e2:3f:
         7d:d4:85:80:7d:4b:7a:7d:0a:83:49:0a:32:de:ef:9d:6a:45:
         32:fa:fb:2e:02:b1:29:e3:16:8c:34:09:a0:64:8c:da:af:1f:
         c4:27:90:d1:6a:e1:be:dc:4f:84:6c:f5:c9:b1:42:b6:8a:50:
         38:cf:e3:d3:96:a4:17:76:25:84:67:06:85:fd:df:44:90:79:
         14:9c:bf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:41:37 2025 by rpki-client