Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38362e302f32332d3233203d3e20323731313131.roa
File:                     3139322e3134302e38362e302f32332d3233203d3e20323731313131.roa (raw, json)
Hash identifier:          DsvL/tc3lh8v4S5/Q+V5JmyKm33cU0gNgktyavqjuhg=
Subject key identifier:   E1:0F:B2:18:FB:4E:6C:1D:18:DA:8B:EA:25:17:93:8E:59:CE:6E:50
Certificate issuer:       /CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
Certificate serial:       3F76865E21BDE5163BD54A863364CA984C34DB6F
Authority key identifier: 4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38362e302f32332d3233203d3e20323731313131.roa
Signing time:             Thu 06 Mar 2025 18:54:58 +0000
ROA not before:           Thu 06 Mar 2025 18:49:58 +0000
ROA not after:            Thu 05 Mar 2026 18:54:58 +0000
asID:                     271111
IP address blocks:        192.140.86.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:76:86:5e:21:bd:e5:16:3b:d5:4a:86:33:64:ca:98:4c:34:db:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
        Validity
            Not Before: Mar  6 18:49:58 2025 GMT
            Not After : Mar  5 18:54:58 2026 GMT
        Subject: CN=E10FB218FB4E6C1D18DA8BEA2517938E59CE6E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:d0:93:92:98:84:42:4a:34:3c:c4:39:0a:
                    d2:86:9e:96:fd:de:eb:33:7d:e0:c6:f1:ba:f4:79:
                    43:84:95:41:ce:64:81:88:70:91:bb:68:ff:40:06:
                    d9:82:d4:c2:22:25:03:53:48:0b:26:1f:48:0a:58:
                    a8:00:b8:fd:0b:a0:cc:3a:c8:32:0e:23:1e:ab:3f:
                    c4:ea:32:22:54:6f:a9:a9:fa:c3:d8:4b:99:f7:48:
                    c6:4c:48:0c:bf:15:54:c6:27:5f:89:ae:7b:1a:6b:
                    a8:34:93:9b:e8:49:99:df:0a:b8:37:47:05:ed:b0:
                    a3:40:be:ae:d2:45:35:43:75:da:bb:a3:4a:48:8a:
                    39:1c:9d:c9:e2:b0:19:4d:2e:1b:18:22:df:d6:9d:
                    88:53:d1:ab:b1:ee:80:b3:3b:89:40:e0:c4:0f:70:
                    4b:16:e7:6a:99:1b:16:b1:e0:43:06:47:d5:bd:f7:
                    37:8c:bb:9b:ce:35:09:20:7d:7e:f1:44:11:85:77:
                    7a:c5:5b:40:de:f8:2c:7c:cb:5c:05:21:8b:78:4e:
                    5e:fc:98:91:31:c6:12:0c:f6:6b:5f:86:56:e4:08:
                    3a:cd:25:e1:19:ae:f2:8a:df:0e:f1:33:ea:a6:75:
                    23:f5:20:88:c2:c6:48:39:47:c2:c2:31:ee:57:f0:
                    3b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0F:B2:18:FB:4E:6C:1D:18:DA:8B:EA:25:17:93:8E:59:CE:6E:50
            X509v3 Authority Key Identifier:
                keyid:4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/3139322e3134302e38362e302f32332d3233203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:59:d8:bf:46:fe:21:b7:92:c6:6b:6d:45:91:83:5c:16:13:
         b9:22:2c:fa:98:9f:d0:48:94:6c:c1:bd:57:7d:a2:ec:2e:db:
         c0:d2:c8:c1:e0:0a:58:82:02:a7:9a:07:c8:07:34:4d:5d:2a:
         46:52:65:7c:b8:13:9d:fe:63:55:dc:e7:b1:63:94:12:38:f3:
         3f:b7:e3:7e:b5:44:b4:a5:99:f0:e3:f8:56:0f:30:af:c7:09:
         f7:a3:90:e0:12:4d:45:83:7e:fd:68:db:f6:ef:ca:ea:e9:c5:
         22:fa:1f:12:d8:77:d0:c0:de:99:96:c8:25:94:b5:24:73:ac:
         a0:db:3a:99:48:ec:16:41:57:04:c2:c5:01:82:65:7a:f0:3b:
         dd:3f:83:1e:e8:63:fb:88:17:67:f6:d6:64:eb:f5:59:e3:c7:
         68:50:5c:64:25:fb:5d:54:3b:48:8e:c3:9e:ec:07:28:ca:4a:
         1c:0b:e4:51:b6:ca:90:be:e9:a8:0d:78:b6:47:a8:cb:c1:f7:
         33:76:9e:8e:74:d1:fb:c4:ac:67:46:f6:cb:66:0b:de:57:e8:
         c2:d7:86:2b:35:60:5b:28:72:95:16:77:91:74:ed:7b:aa:b0:
         42:aa:27:84:97:51:13:67:22:0d:9e:bc:eb:ef:c7:e9:18:6a:
         2d:1e:06:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:16:13 2025 by rpki-client