Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3134392e31392e3230362e302f32332d3234203d3e203137323232.roa
File:                     3134392e31392e3230362e302f32332d3234203d3e203137323232.roa (raw, json)
Hash identifier:          nphwZgArTbE0wLK2yxQA/5siMudwwn3MnU1+lUw6OZI=
Subject key identifier:   48:BC:47:13:63:D4:9E:70:45:CF:9A:BF:B9:FB:46:02:9E:62:64:85
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       14B51FCDC21FA11F7DC7904EA45013247A9AE0A2
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3134392e31392e3230362e302f32332d3234203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:41 +0000
ROA not before:           Mon 25 Mar 2024 22:50:41 +0000
ROA not after:            Mon 24 Mar 2025 22:55:41 +0000
asID:                     17222
IP address blocks:        149.19.206.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b5:1f:cd:c2:1f:a1:1f:7d:c7:90:4e:a4:50:13:24:7a:9a:e0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:41 2024 GMT
            Not After : Mar 24 22:55:41 2025 GMT
        Subject: CN=48BC471363D49E7045CF9ABFB9FB46029E626485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:38:2e:d1:2e:5e:17:70:e0:4b:4a:3d:ef:
                    36:7e:6f:80:33:81:c0:a9:cd:44:83:bb:a4:5e:43:
                    a9:79:cb:65:45:35:74:e7:1f:7f:af:fb:30:d9:21:
                    7d:2c:1a:5c:89:be:a4:12:33:a2:e2:d9:c7:22:50:
                    52:ab:b7:a8:51:91:1c:55:6a:d4:69:89:02:3d:43:
                    0b:c2:4d:0d:a7:f8:6d:f3:c6:e2:35:d5:3a:2d:d8:
                    5c:bc:4f:68:7a:4b:06:ff:05:de:63:b7:9e:08:81:
                    7d:a3:3f:2d:bb:6c:51:3d:60:84:eb:b2:fa:03:12:
                    5e:c2:5f:fc:f1:a4:e7:fd:0c:59:b8:e9:f1:c7:e9:
                    1f:05:0c:f7:19:00:75:75:8d:d9:9c:c8:d7:85:ca:
                    f8:91:74:3a:ad:4c:13:17:79:a2:dc:33:97:df:34:
                    da:36:1c:3e:7b:a6:05:20:f1:7c:f3:b3:34:b7:00:
                    2a:a8:c9:74:5b:cb:82:bc:b3:5f:70:da:82:79:56:
                    ab:50:0e:a4:e4:0a:6d:0a:aa:70:79:7f:68:94:a7:
                    86:a1:c5:94:9f:2f:5c:cd:6a:68:49:96:4d:97:02:
                    47:92:00:90:bb:9f:27:3d:40:b8:5d:bb:82:2e:fe:
                    06:fa:a8:14:65:0b:5b:9e:96:41:55:86:fe:60:01:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BC:47:13:63:D4:9E:70:45:CF:9A:BF:B9:FB:46:02:9E:62:64:85
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3134392e31392e3230362e302f32332d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:4c:2f:f5:3d:52:7f:44:12:cc:41:09:2e:d6:c3:fd:66:d2:
         10:28:8c:68:ee:8c:80:23:3a:c2:e0:fa:f2:5d:f2:c5:0a:d0:
         c1:db:0b:20:1f:35:12:18:2f:f8:20:bd:95:90:69:e4:69:b5:
         06:cb:d1:06:af:79:3e:58:c5:34:f3:4c:17:d9:d9:76:0f:2e:
         5b:cd:0a:5c:6c:69:8f:95:60:16:d8:83:e9:8a:09:e5:50:98:
         b8:e9:8c:b6:3d:73:99:d4:b9:18:9e:84:60:06:39:99:4c:60:
         45:98:e3:87:bd:e7:8e:4c:81:c1:f4:c0:60:8a:c5:bb:38:28:
         33:1c:30:d2:8a:98:5c:68:f5:6f:25:58:cd:15:fe:e2:4c:47:
         0d:75:67:db:ed:7a:6a:66:0a:84:da:dc:1f:e0:a1:3e:d8:fa:
         37:bb:23:49:a3:f9:37:04:5f:0d:c0:74:50:04:21:34:f4:4f:
         72:b9:73:45:bc:72:7a:3d:79:e7:2e:be:6d:16:f0:e4:6a:50:
         49:66:d6:19:a8:49:e8:ac:b2:a0:eb:7d:eb:f4:4f:26:bf:85:
         43:d4:ac:b7:8b:ce:c0:cb:39:c9:6e:a1:b8:d9:5f:4f:4e:35:
         64:fa:95:e8:c3:39:3f:8c:e0:e3:a2:0c:cf:55:32:31:c1:4e:
         1d:08:e2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:30 2025 by rpki-client