Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38342e302f32332d3233203d3e20323731313131.roa
File:                     3139322e3134302e38342e302f32332d3233203d3e20323731313131.roa (raw, json)
Hash identifier:          GTW2j6bHbG+AdFkXR0+Zp9yEgBDM4Qa7+e+0IGTmJF4=
Subject key identifier:   CD:B4:F0:F9:66:C5:FF:61:0F:7C:CE:E5:E3:24:2A:D3:CE:E4:16:40
Certificate issuer:       /CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
Certificate serial:       0961BCB4AB21BA3270770DB561F628246318429E
Authority key identifier: 4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38342e302f32332d3233203d3e20323731313131.roa
Signing time:             Thu 06 Mar 2025 18:54:59 +0000
ROA not before:           Thu 06 Mar 2025 18:49:59 +0000
ROA not after:            Thu 05 Mar 2026 18:54:59 +0000
asID:                     271111
IP address blocks:        192.140.84.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:61:bc:b4:ab:21:ba:32:70:77:0d:b5:61:f6:28:24:63:18:42:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
        Validity
            Not Before: Mar  6 18:49:59 2025 GMT
            Not After : Mar  5 18:54:59 2026 GMT
        Subject: CN=CDB4F0F966C5FF610F7CCEE5E3242AD3CEE41640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2c:f9:96:13:1f:ce:38:7f:91:b1:99:e3:75:
                    32:f0:3a:67:0f:2a:1d:82:a0:dd:45:f7:1e:08:13:
                    5d:17:9a:e8:0b:7d:c4:34:bd:dd:05:21:dd:5c:e7:
                    b4:84:48:a1:73:41:b9:23:9f:a6:10:05:4a:05:7b:
                    35:11:55:3b:ca:c5:6b:85:92:5e:f0:53:6c:ef:64:
                    5f:6e:0d:29:13:3c:a2:c0:5d:00:77:b1:55:be:10:
                    12:85:83:91:df:46:be:45:12:c8:7c:ea:65:90:bb:
                    f2:9e:e1:96:af:03:cb:e4:41:eb:a3:15:75:6f:c7:
                    8a:0e:91:5c:7a:c6:9d:0f:89:14:5e:84:87:72:20:
                    fb:d1:f4:82:d8:d0:87:9d:67:ef:11:05:2d:89:96:
                    64:d9:65:fe:3d:dc:43:1f:00:2c:04:54:36:d0:15:
                    be:5e:e1:fe:ac:2d:99:33:1c:99:3f:e4:c4:93:80:
                    39:cd:28:bb:9a:91:78:56:79:dd:6d:0c:93:8d:80:
                    a4:65:db:f0:01:2c:4d:ff:3c:f2:19:eb:6e:52:f2:
                    ba:fc:28:dd:80:a5:54:ba:fd:98:99:4a:81:c4:3a:
                    15:9b:32:da:11:0b:0d:73:17:d2:01:2f:d1:07:1f:
                    5d:f6:9f:5b:30:91:6f:cc:fa:06:d2:db:f0:60:cb:
                    d5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B4:F0:F9:66:C5:FF:61:0F:7C:CE:E5:E3:24:2A:D3:CE:E4:16:40
            X509v3 Authority Key Identifier:
                keyid:4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38342e302f32332d3233203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:43:81:64:68:22:4f:26:64:bf:d3:4d:b0:db:a8:54:f0:e7:
         c3:75:87:06:99:be:97:cb:27:a6:68:6e:46:db:74:b6:ed:30:
         17:f0:23:ba:df:2c:87:6d:e7:44:20:f5:c8:cd:bc:22:79:cf:
         5d:03:83:47:ab:3a:ca:39:64:8c:74:49:c2:83:f5:75:e6:59:
         63:fa:d9:5a:58:6e:c9:db:94:9f:1e:e6:2f:8c:c1:4d:82:cc:
         25:43:5e:0a:72:ed:b4:27:16:be:dc:53:7f:ee:48:ea:97:0b:
         bc:9f:33:ef:ac:0c:46:93:25:15:76:d8:0d:f3:f3:e3:ce:91:
         ab:4c:54:dc:48:82:3a:2e:13:78:40:d4:85:23:0f:95:64:68:
         bb:b1:a3:93:99:e9:f5:29:9d:7c:e8:6c:b2:00:03:31:c2:54:
         7d:b9:45:1f:64:19:ae:7f:3d:2a:5a:ab:50:d4:8a:d8:f5:c2:
         cb:80:f5:e7:a0:5f:e1:a7:57:c1:cf:de:74:9d:87:1a:50:a2:
         96:06:b1:48:2e:38:44:e0:f5:83:a6:20:2b:a5:37:5c:41:f3:
         c1:67:d1:a1:6c:c1:5a:9e:38:2f:fb:ec:69:24:d2:e8:4d:eb:
         f5:1a:b9:89:a2:24:4b:2a:bf:1b:fb:4a:ee:33:a4:82:66:79:
         a3:45:40:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:21:28 2025 by rpki-client