Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32322d3332203d3e20323633323536.roa
File:                     3139382e35382e382e302f32322d3332203d3e20323633323536.roa (raw, json)
Hash identifier:          VrvSK02k5rhiW4wKvrrAXllqnRDxK4gNhwRwVBXM1Wk=
Subject key identifier:   4C:44:1C:0A:FE:EA:64:1C:82:75:64:9E:99:D0:7C:D3:21:EF:A7:40
Certificate issuer:       /CN=4AC63499535F096FC094DF4DF02AC3681513D3B2
Certificate serial:       5D021E5AC3EDF34EE8F198C18693CAEA127C3BF7
Authority key identifier: 4A:C6:34:99:53:5F:09:6F:C0:94:DF:4D:F0:2A:C3:68:15:13:D3:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AC63499535F096FC094DF4DF02AC3681513D3B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32322d3332203d3e20323633323536.roa
Signing time:             Mon 09 Dec 2024 19:59:01 +0000
ROA not before:           Mon 09 Dec 2024 19:54:01 +0000
ROA not after:            Mon 08 Dec 2025 19:59:01 +0000
asID:                     263256
IP address blocks:        198.58.8.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:02:1e:5a:c3:ed:f3:4e:e8:f1:98:c1:86:93:ca:ea:12:7c:3b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AC63499535F096FC094DF4DF02AC3681513D3B2
        Validity
            Not Before: Dec  9 19:54:01 2024 GMT
            Not After : Dec  8 19:59:01 2025 GMT
        Subject: CN=4C441C0AFEEA641C8275649E99D07CD321EFA740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bf:db:a0:ac:ba:7a:16:b6:3a:92:85:4a:e1:
                    1f:fd:f6:2e:a0:bb:59:78:bb:4f:c6:2d:a4:5a:2b:
                    7c:4a:05:52:34:ab:57:71:11:eb:cf:2e:ed:50:7f:
                    c6:22:50:3e:8b:48:26:ac:ec:8b:3d:2c:2f:6f:34:
                    3e:6d:3d:4e:61:81:91:a1:9a:09:9a:6e:19:0b:8a:
                    99:a9:43:8d:d4:47:aa:77:3a:bb:df:94:14:0a:06:
                    55:62:4b:be:9b:9a:30:e4:9a:1c:59:65:69:e8:3f:
                    4b:d6:11:71:a8:c0:2b:8b:6e:e4:27:aa:43:b2:7c:
                    c7:0d:f9:35:63:7f:5e:82:8c:9c:44:55:4c:df:f5:
                    27:ac:57:25:be:69:dc:44:dd:f6:4b:0b:72:49:d7:
                    fc:65:d3:22:d6:8e:ad:30:d3:29:ea:22:ce:8e:78:
                    b3:b8:81:6a:e7:29:c9:f6:40:7c:96:dc:1d:8c:8b:
                    15:88:c4:46:b8:be:bb:3e:be:82:47:d5:3a:d6:87:
                    9c:ee:a7:8a:74:14:dd:39:4c:be:31:36:14:68:c5:
                    58:00:c4:01:a7:7b:75:7b:c0:04:3a:ea:46:be:fe:
                    85:8e:b2:55:fe:e3:30:ff:92:87:3e:ae:dc:c8:5c:
                    58:f6:f5:dc:ab:e5:02:88:07:46:07:c3:1c:c1:f2:
                    82:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:44:1C:0A:FE:EA:64:1C:82:75:64:9E:99:D0:7C:D3:21:EF:A7:40
            X509v3 Authority Key Identifier:
                keyid:4A:C6:34:99:53:5F:09:6F:C0:94:DF:4D:F0:2A:C3:68:15:13:D3:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4AC63499535F096FC094DF4DF02AC3681513D3B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AC63499535F096FC094DF4DF02AC3681513D3B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32322d3332203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.58.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:25:77:b4:3c:ac:77:10:50:20:52:64:71:6c:b0:e4:d8:51:
         90:12:e9:7a:a7:92:c7:bd:16:7b:07:f2:a3:70:d5:3c:4e:db:
         a3:4c:a1:3c:51:90:f5:ee:1c:66:7a:b9:a1:07:5e:d9:b7:fc:
         3b:f0:bf:94:63:94:06:9f:bb:51:dc:a0:b5:ef:77:91:0b:cd:
         8c:cf:7b:f6:7e:77:db:d7:21:e8:18:21:8c:74:93:92:de:80:
         ab:be:fb:8b:e4:e5:37:56:2b:0f:4a:cc:f6:3a:80:34:79:10:
         6c:59:60:ef:5a:9d:82:b6:a6:fa:64:c3:39:5a:77:44:e0:e9:
         88:98:0b:69:f7:ff:8b:bb:dd:20:63:b3:71:f7:01:7b:26:bd:
         ef:b8:50:91:e0:e6:b5:be:cf:41:24:ab:b3:82:22:62:a4:1d:
         6d:cc:7d:50:1f:4e:fc:c0:42:ef:ee:f1:81:fb:b9:32:9d:6d:
         07:d4:fa:f6:3f:ca:7b:94:52:35:d5:db:22:b2:cd:34:dd:f2:
         a1:69:20:b5:d1:ce:6b:50:a2:08:a0:3f:39:25:03:f2:2d:21:
         74:20:10:f7:8a:33:6e:23:6b:8d:ab:69:cc:6a:85:63:80:34:
         f5:64:f0:37:bf:90:e7:55:55:99:39:36:61:5a:c7:24:65:7d:
         64:08:56:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:03:56 2025 by rpki-client