Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa
File:                     3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa (raw, json)
Hash identifier:          K//Pa4hV5RhcHo7AtAyHCFEJlD0g0sAZ8Pg1GW88W1k=
Subject key identifier:   AA:66:31:F4:3C:86:DA:D6:F0:D5:9F:4D:3F:83:28:1E:09:76:41:C8
Certificate issuer:       /CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
Certificate serial:       7835A5FD05DB5ACAB155369A1AD1477C4DF1031C
Authority key identifier: 4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa
Signing time:             Thu 06 Mar 2025 18:54:59 +0000
ROA not before:           Thu 06 Mar 2025 18:49:59 +0000
ROA not after:            Thu 05 Mar 2026 18:54:59 +0000
asID:                     271111
IP address blocks:        192.140.85.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:35:a5:fd:05:db:5a:ca:b1:55:36:9a:1a:d1:47:7c:4d:f1:03:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
        Validity
            Not Before: Mar  6 18:49:59 2025 GMT
            Not After : Mar  5 18:54:59 2026 GMT
        Subject: CN=AA6631F43C86DAD6F0D59F4D3F83281E097641C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:49:83:df:3a:10:13:14:4c:c3:38:8f:e6:
                    b7:86:9b:45:b0:14:ce:e8:75:3d:4a:ce:f6:8e:38:
                    e0:80:54:7e:53:74:ee:7a:5f:d2:73:f4:d8:06:07:
                    af:b3:9b:fe:35:b9:57:55:6d:d8:52:eb:0a:67:19:
                    e4:3d:78:b6:75:6f:ea:39:30:e6:91:3e:11:b5:8b:
                    a2:cf:5f:17:a6:66:d1:ea:f9:a8:84:bd:18:5a:76:
                    ff:08:82:71:0d:ca:0a:46:82:82:b7:a3:6e:b0:4a:
                    19:30:0b:1a:f3:09:c8:32:0e:8d:20:ed:64:cb:9f:
                    ec:16:f2:ac:5c:a3:1d:71:fb:3c:dd:a2:de:dc:6d:
                    ef:75:c8:5f:ca:5b:ac:5d:87:19:ae:83:7c:0e:97:
                    2b:3c:33:b0:c9:16:8b:09:03:9f:83:de:d2:58:e2:
                    04:58:26:94:76:20:4a:df:ef:cd:5d:15:3b:bf:a3:
                    6b:58:7d:5c:0c:c5:6d:28:b2:42:92:7f:57:77:f4:
                    a7:95:05:9d:31:26:c5:6d:d6:a5:52:51:98:22:27:
                    82:c7:25:5b:ea:bc:8d:49:be:5a:a5:11:a0:01:4c:
                    42:d7:c9:53:7c:8a:cf:e7:4c:a8:bf:f3:cd:fc:af:
                    14:87:9e:db:49:a4:07:04:88:44:76:c3:ab:d7:cd:
                    20:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:66:31:F4:3C:86:DA:D6:F0:D5:9F:4D:3F:83:28:1E:09:76:41:C8
            X509v3 Authority Key Identifier:
                keyid:4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:f4:30:32:12:ca:8c:d6:ba:a3:85:4f:3a:cc:1b:19:94:ef:
         50:5f:bb:94:4d:31:cc:23:c9:e6:5f:90:ee:ff:21:8f:90:36:
         a1:30:6e:5a:cd:10:3f:ff:0e:8f:b8:d4:d8:b0:09:11:64:32:
         c1:0a:24:92:e1:65:71:e4:6d:34:4c:5d:c0:9d:fd:5c:45:80:
         3c:34:9f:31:2c:46:0b:17:a3:fe:ea:80:12:6f:8b:51:5a:f8:
         8e:de:94:ea:0a:49:96:73:73:56:c5:37:23:c9:88:89:d0:69:
         0a:09:e9:53:a5:23:91:25:c0:ae:92:ba:12:fb:c5:62:70:33:
         5b:e8:f5:16:c6:dc:f0:cb:78:c7:98:eb:44:f8:1f:94:06:f3:
         c3:8d:29:e5:b5:1d:05:c4:ae:1e:eb:d1:16:4a:ad:fc:31:fb:
         a1:79:95:a6:dc:5d:49:67:ae:89:52:a9:47:07:82:85:6a:c1:
         90:a3:f3:7f:dd:ce:a7:3a:5e:f7:32:75:34:0b:62:64:00:c8:
         38:95:da:fc:9c:f3:30:ae:24:dc:c9:ba:ad:b8:46:c7:ae:b3:
         31:a6:c0:0a:61:a8:8a:64:0f:0e:ed:ed:2f:8b:0b:97:af:a4:
         79:02:0e:1b:3c:92:0e:0b:dd:3e:53:36:ee:e3:b0:cc:b6:e9:
         dc:b7:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:34:28 2025 by rpki-client