Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/0/3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa
File:                     3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa (raw, json)
Hash identifier:          YUTZ3a9x+AxFEXgZlDJiuVBMpTN3T7v5vq0SwL1GuQs=
Subject key identifier:   E0:B2:AD:CB:01:17:A1:0C:93:9B:91:F9:AF:36:72:E0:DA:83:40:4E
Certificate issuer:       /CN=EC63F9E2F3CC53B3BB0BF4E2B9F1A0C1B014E52E
Certificate serial:       7E5407867C901485A3191ABE32F726E1EDAFC7BB
Authority key identifier: EC:63:F9:E2:F3:CC:53:B3:BB:0B:F4:E2:B9:F1:A0:C1:B0:14:E5:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC63F9E2F3CC53B3BB0BF4E2B9F1A0C1B014E52E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/0/3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa
Signing time:             Thu 22 Feb 2024 19:37:18 +0000
ROA not before:           Thu 22 Feb 2024 19:32:18 +0000
ROA not after:            Thu 20 Feb 2025 19:37:18 +0000
asID:                     263492
IP address blocks:        191.243.38.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:54:07:86:7c:90:14:85:a3:19:1a:be:32:f7:26:e1:ed:af:c7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC63F9E2F3CC53B3BB0BF4E2B9F1A0C1B014E52E
        Validity
            Not Before: Feb 22 19:32:18 2024 GMT
            Not After : Feb 20 19:37:18 2025 GMT
        Subject: CN=E0B2ADCB0117A10C939B91F9AF3672E0DA83404E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7c:87:a8:98:b9:24:9f:81:f4:50:d2:66:c7:
                    2e:19:d1:a9:fd:c0:ed:93:af:d1:1b:8c:74:de:53:
                    75:c4:c3:c4:f2:39:28:aa:00:31:aa:e4:50:0c:88:
                    3c:3d:6d:b3:30:65:32:73:55:d5:34:6e:6f:b7:0b:
                    79:0f:2c:7f:68:03:0a:40:1e:25:ad:41:85:9f:21:
                    13:fc:c9:bf:19:ce:21:ba:3d:6b:a1:74:d1:ff:0a:
                    a5:1c:65:36:94:b2:85:f0:b5:50:6d:71:22:bf:71:
                    35:8b:ae:0e:bd:ab:de:ff:83:ff:03:84:36:bf:8d:
                    58:3a:1a:ed:c5:46:eb:53:f4:e6:34:6a:e0:eb:d1:
                    97:dc:64:2e:97:3d:9c:6b:ca:84:f6:3e:3b:87:9f:
                    b6:6b:9f:a6:2d:5e:75:34:10:05:e9:c5:4a:95:1c:
                    d5:3a:39:89:cb:81:d3:10:53:1a:1d:f7:77:fd:e8:
                    29:72:d3:ca:cf:da:10:16:92:2f:24:3d:cc:7f:bf:
                    60:ef:c9:9f:6f:b4:f3:67:73:a8:f8:2d:79:ab:02:
                    a5:8b:1c:7d:fb:a5:82:27:2e:97:ed:0b:c0:20:f6:
                    f8:0c:a7:12:cf:f0:b7:f1:a1:45:c2:13:33:70:01:
                    03:54:2f:6e:3f:73:15:5c:e9:7c:03:f6:48:a1:c4:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B2:AD:CB:01:17:A1:0C:93:9B:91:F9:AF:36:72:E0:DA:83:40:4E
            X509v3 Authority Key Identifier:
                keyid:EC:63:F9:E2:F3:CC:53:B3:BB:0B:F4:E2:B9:F1:A0:C1:B0:14:E5:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/0/EC63F9E2F3CC53B3BB0BF4E2B9F1A0C1B014E52E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC63F9E2F3CC53B3BB0BF4E2B9F1A0C1B014E52E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/0/3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:76:22:a5:4d:54:af:d7:8a:07:fd:33:1d:76:32:9c:72:22:
         c1:54:d3:89:e8:0c:de:20:99:af:46:5d:a5:97:91:9e:dc:21:
         e8:ac:ac:a7:cc:7b:ec:91:b8:76:52:56:dd:e1:14:11:6d:e1:
         d4:cf:c6:a6:f1:63:00:c0:c1:bb:78:d5:3b:17:00:dc:c4:45:
         b3:94:62:04:28:0a:c0:c9:46:0b:62:75:be:c9:8f:6e:97:22:
         9e:b7:77:67:13:30:6f:dd:cd:6d:3c:49:19:c2:50:29:e9:d6:
         d7:76:fb:31:8a:af:be:49:a3:8e:fa:0c:68:b9:28:37:eb:82:
         fe:67:c8:41:7c:30:9b:94:1b:19:bf:db:5a:d5:0e:99:95:89:
         f5:78:57:57:d7:52:2c:0b:f4:bd:a0:b6:50:e1:68:05:48:75:
         23:6d:ff:79:3a:70:8b:48:2f:93:e5:6c:aa:e9:37:88:30:31:
         80:30:b8:72:e0:35:c0:71:84:fa:45:47:6f:98:6a:5a:95:25:
         95:88:f9:74:4c:26:64:e1:ea:b2:60:58:c1:e9:e9:b0:dd:1d:
         63:00:4d:55:d1:62:25:47:ad:f9:73:0a:63:f9:c8:54:bc:6e:
         a3:40:4b:ee:ee:c7:07:b1:33:50:0b:ec:cc:a9:6b:62:1d:b1:
         47:66:d2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:37 2025 by rpki-client