Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/3139312e33372e3232382e302f32332d3234203d3e20323633333734.roa
File:                     3139312e33372e3232382e302f32332d3234203d3e20323633333734.roa (raw, json)
Hash identifier:          lzn8tgpctnB+PAM+I+hA8fsQwFGkaobOW6PZjzgzWRs=
Subject key identifier:   43:71:5D:AB:BC:5F:69:F2:AE:66:97:FC:08:C5:EB:25:8E:7A:78:90
Certificate issuer:       /CN=1334987718ED4E16EC43102E16C9A8547B52B52F
Certificate serial:       198EE27C332E481CF36BF03ED2B5B97D45FB98F4
Authority key identifier: 13:34:98:77:18:ED:4E:16:EC:43:10:2E:16:C9:A8:54:7B:52:B5:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1334987718ED4E16EC43102E16C9A8547B52B52F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/3139312e33372e3232382e302f32332d3234203d3e20323633333734.roa
Signing time:             Wed 02 Aug 2023 00:20:02 +0000
ROA not before:           Wed 02 Aug 2023 00:15:02 +0000
ROA not after:            Wed 31 Jul 2024 00:20:02 +0000
asID:                     263374
IP address blocks:        191.37.228.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8e:e2:7c:33:2e:48:1c:f3:6b:f0:3e:d2:b5:b9:7d:45:fb:98:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1334987718ED4E16EC43102E16C9A8547B52B52F
        Validity
            Not Before: Aug  2 00:15:02 2023 GMT
            Not After : Jul 31 00:20:02 2024 GMT
        Subject: CN=43715DABBC5F69F2AE6697FC08C5EB258E7A7890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:75:38:65:d7:29:f3:cf:6a:3d:eb:cc:82:c9:
                    24:c8:09:53:1c:ff:6b:cf:0f:cf:42:23:6b:00:a7:
                    9a:b5:99:70:5e:b6:aa:e0:33:0b:1a:28:b9:e8:b7:
                    0f:f0:91:86:60:ba:de:d7:8a:ba:50:01:36:b5:60:
                    2c:28:9b:e7:10:5a:e0:74:c4:89:66:7a:01:a8:af:
                    38:22:1a:8e:4e:0d:84:9a:29:f5:d6:38:11:5a:9f:
                    97:f6:19:47:5e:28:10:6b:a6:21:9c:ad:19:f6:31:
                    e2:e9:ee:6e:3a:2d:ac:25:79:41:dd:51:98:14:78:
                    49:86:53:e6:82:fd:12:83:71:b5:7e:c2:cb:a4:4e:
                    af:0a:fc:1b:e5:f1:5c:a8:bf:d9:a2:5e:84:ca:0f:
                    44:57:a6:f9:b7:38:a3:24:2e:70:4b:1a:25:cb:bf:
                    4f:3d:99:6c:42:b3:6c:08:b4:8b:3b:aa:12:5d:c0:
                    0d:2e:60:d6:53:0c:a2:48:24:0b:bb:63:a3:ce:1e:
                    f8:38:57:c8:51:a6:6c:7a:1b:80:83:77:3b:92:e6:
                    f1:fe:42:07:d1:78:c5:58:6d:bf:5c:24:b2:cd:23:
                    3f:bd:92:da:2d:82:1b:2e:23:70:30:32:b6:b2:47:
                    69:52:e7:2f:52:ed:f6:fa:da:bd:f9:11:08:28:a5:
                    44:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:71:5D:AB:BC:5F:69:F2:AE:66:97:FC:08:C5:EB:25:8E:7A:78:90
            X509v3 Authority Key Identifier:
                keyid:13:34:98:77:18:ED:4E:16:EC:43:10:2E:16:C9:A8:54:7B:52:B5:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/1334987718ED4E16EC43102E16C9A8547B52B52F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1334987718ED4E16EC43102E16C9A8547B52B52F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/3139312e33372e3232382e302f32332d3234203d3e20323633333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:65:34:a7:83:16:bc:e6:95:0d:5b:86:04:c6:e8:15:cc:72:
         0c:04:82:90:99:2d:b6:20:d7:be:bd:02:4e:1b:b6:e1:c1:24:
         93:15:d4:41:ce:7f:82:aa:78:77:3f:77:a0:7e:7b:5e:27:97:
         db:d9:1e:a6:a4:a3:72:d3:37:c2:1a:fd:0e:1c:a3:62:81:9f:
         a6:33:50:e0:b2:1e:4f:71:bd:fb:0e:27:2d:e5:8a:2f:6e:ee:
         b9:df:d1:29:fc:68:37:45:41:12:c4:18:57:71:43:b2:a8:91:
         27:ef:a2:75:d5:bb:15:c7:cb:1a:0b:9f:02:3e:ce:fd:91:30:
         34:dd:6c:79:90:83:d2:d9:13:10:6f:3e:86:25:b4:38:9d:12:
         41:6f:5a:5b:21:7e:f5:56:ef:31:e7:e1:32:e4:67:b7:72:d6:
         23:36:52:06:84:72:88:3d:af:9d:a9:a9:77:e7:5c:1e:c8:1e:
         ea:84:89:d3:1f:ab:12:2d:20:a5:08:e4:ee:f5:c0:16:c5:b7:
         69:14:4d:fe:ae:1e:68:cb:e3:70:61:d2:d6:0c:22:fc:35:15:
         dd:e5:eb:d0:44:6e:c7:15:30:00:4a:b4:37:3b:18:1f:e7:7c:
         57:cb:82:de:f7:9f:b2:a1:37:cd:82:0e:d8:78:c8:ad:87:53:
         36:a2:ec:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:51 2025 by rpki-client