Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3139312e362e34382e302f32312d3231203d3e20323633303733.roa
File:                     3139312e362e34382e302f32312d3231203d3e20323633303733.roa (raw, json)
Hash identifier:          D9sq4Zdots9dMPy0vkcBvhegZmWsmbU4psIt+oVfueU=
Subject key identifier:   C3:5C:70:33:EF:13:36:6E:AE:84:52:47:3C:B7:3E:3E:EB:35:46:F2
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       37879636FDBD7BD2132DFCE47C2381FA26B4B997
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3139312e362e34382e302f32312d3231203d3e20323633303733.roa
Signing time:             Wed 05 Mar 2025 22:10:20 +0000
ROA not before:           Wed 05 Mar 2025 22:05:20 +0000
ROA not after:            Wed 04 Mar 2026 22:10:20 +0000
asID:                     263073
IP address blocks:        191.6.48.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:87:96:36:fd:bd:7b:d2:13:2d:fc:e4:7c:23:81:fa:26:b4:b9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar  5 22:05:20 2025 GMT
            Not After : Mar  4 22:10:20 2026 GMT
        Subject: CN=C35C7033EF13366EAE8452473CB73E3EEB3546F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:b9:e9:71:67:77:1f:4e:ac:4d:a5:88:c6:
                    33:ee:ab:8d:8b:df:83:b1:6b:6b:a0:61:81:db:fe:
                    40:39:c7:36:ee:84:5d:61:39:c5:ed:2b:4b:07:d7:
                    6e:6a:26:20:b6:b9:cd:7a:d6:b8:60:f0:7d:86:62:
                    90:22:7d:ba:bb:42:06:49:f0:41:da:33:7a:ab:58:
                    dc:6b:37:13:bd:18:59:42:29:02:7b:f4:2f:b8:21:
                    83:9e:8d:99:9a:7f:63:b6:a7:e2:25:2d:2d:0b:50:
                    cb:02:11:d1:c5:a3:a3:e6:89:97:b8:75:c9:81:49:
                    ea:e0:21:cd:4d:94:18:15:b0:45:23:eb:14:d0:20:
                    a9:73:9a:ec:7f:fc:f2:99:80:16:71:2c:3f:5d:99:
                    e0:8f:87:a7:64:1a:43:f9:b1:cd:48:25:cf:23:d6:
                    e0:55:fb:e9:78:56:09:f9:96:8b:27:ac:00:91:1f:
                    7a:74:7e:16:ca:c5:c8:b8:95:6c:c2:b2:70:ca:39:
                    e5:82:b5:92:1e:42:10:19:5b:d5:20:2a:cf:38:c6:
                    9b:0a:3c:14:21:b7:49:91:3c:f9:e5:b0:ca:89:18:
                    a2:55:68:38:01:7e:28:76:51:df:bb:cb:88:8c:b8:
                    f1:8f:10:82:c4:ca:64:40:65:ef:bb:f4:bc:f2:4c:
                    59:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5C:70:33:EF:13:36:6E:AE:84:52:47:3C:B7:3E:3E:EB:35:46:F2
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3139312e362e34382e302f32312d3231203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:c8:34:42:3b:d1:64:ac:57:9f:76:5d:bd:7a:2a:f1:5f:3c:
         01:6a:4a:62:78:56:89:0e:18:06:8c:82:dd:58:ea:54:24:0b:
         7d:07:b0:d6:2f:25:51:46:12:4a:5a:96:f0:78:31:d2:3d:cd:
         38:f2:96:3c:93:b5:40:be:04:64:21:87:a2:1e:08:62:6e:93:
         94:f5:82:24:5a:ba:37:26:50:1b:a9:ad:30:2e:ad:16:d9:ae:
         7c:23:58:98:69:35:43:48:68:8e:1d:96:5a:79:44:08:a4:70:
         3b:a2:9e:98:b9:dc:f5:87:68:a7:38:9b:32:fc:8f:d0:1d:b3:
         a6:c1:03:98:a7:32:ff:1b:9d:e1:e1:ca:be:56:7a:3a:93:a6:
         f6:64:7e:10:3a:54:78:85:04:93:ae:82:a7:80:5b:08:9d:b9:
         b4:cc:06:04:04:cd:ef:27:83:45:61:77:82:ff:f6:74:ce:5d:
         d8:34:b6:91:b8:83:c7:03:28:6c:da:c5:7e:13:cc:70:1f:48:
         70:f4:23:2c:18:38:80:d9:13:6f:b0:c0:b9:90:39:3a:36:70:
         d7:5b:67:64:57:a3:a5:09:ae:fb:92:49:13:99:dd:21:e8:d1:
         ba:6b:7d:3d:2a:0e:63:16:46:a7:e7:19:a4:f4:68:f1:91:d4:
         b9:c3:26:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:59:15 2025 by rpki-client