Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/3139312e33372e3232342e302f32312d3234203d3e20323633333734.roa
File:                     3139312e33372e3232342e302f32312d3234203d3e20323633333734.roa (raw, json)
Hash identifier:          XA3CDHGQzJtVy7KlXD+Ti8xltUzX609QLMhF05gs+Cg=
Subject key identifier:   4F:9E:2E:30:32:64:6F:29:E7:6A:53:FB:03:02:00:C6:47:72:30:59
Certificate issuer:       /CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4
Certificate serial:       5EFC9115CF568B1B5810C523613CD61ADDFFCC95
Authority key identifier: AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/3139312e33372e3232342e302f32312d3234203d3e20323633333734.roa
Signing time:             Thu 06 Mar 2025 14:52:22 +0000
ROA not before:           Thu 06 Mar 2025 14:47:22 +0000
ROA not after:            Thu 05 Mar 2026 14:52:22 +0000
asID:                     263374
IP address blocks:        191.37.224.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fc:91:15:cf:56:8b:1b:58:10:c5:23:61:3c:d6:1a:dd:ff:cc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4
        Validity
            Not Before: Mar  6 14:47:22 2025 GMT
            Not After : Mar  5 14:52:22 2026 GMT
        Subject: CN=4F9E2E3032646F29E76A53FB030200C647723059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8a:48:17:53:a6:a8:7e:e2:2d:a8:2d:5f:ce:
                    13:86:c1:cf:89:fc:21:69:bc:e7:92:45:c6:ae:df:
                    cc:80:6f:75:49:6e:dd:1f:a3:3c:e8:05:92:a6:36:
                    dd:27:ed:b8:fe:c8:74:37:70:d9:3e:a3:d6:ce:c9:
                    47:7d:47:65:7c:01:97:66:b0:4d:77:23:63:d6:a9:
                    d2:e4:b8:89:e0:a7:22:3e:1f:00:70:80:bb:c4:0d:
                    30:75:13:61:c1:a6:b0:4e:f9:1b:bf:36:02:e6:af:
                    47:2d:1c:fa:78:3a:b3:fc:9b:bf:c3:5a:77:3e:4a:
                    d4:52:ab:f6:8d:dd:ec:c6:3e:a5:e9:95:da:4f:81:
                    a3:9b:22:41:30:1a:07:1f:c3:87:92:bb:a8:1d:80:
                    ce:68:d6:32:aa:48:ea:a7:25:ba:51:1d:37:a6:d6:
                    f0:23:e0:88:b8:2e:bc:61:bf:db:35:9f:7e:e5:9e:
                    d7:4a:e5:20:f4:98:86:7d:95:03:cc:a7:d3:db:9f:
                    19:6e:15:2b:14:39:97:71:76:46:44:ad:6d:df:49:
                    35:e7:c8:2d:40:5c:a7:9e:1e:c1:38:3a:3e:bb:92:
                    0b:fb:d0:ef:5b:3d:cf:c9:f1:3a:c9:3e:8f:97:b3:
                    b8:ed:27:8a:ec:6f:ee:e5:fd:d6:09:29:68:f5:45:
                    72:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9E:2E:30:32:64:6F:29:E7:6A:53:FB:03:02:00:C6:47:72:30:59
            X509v3 Authority Key Identifier:
                keyid:AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/3139312e33372e3232342e302f32312d3234203d3e20323633333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:64:5e:f3:e2:78:28:76:29:91:90:3e:b1:40:fc:f6:43:73:
         dd:8f:29:4e:b8:b2:3b:b1:d4:74:6e:fd:b5:85:39:2b:84:ed:
         ad:62:c9:34:6e:f7:be:89:99:6a:a8:fa:b7:51:11:ba:90:5e:
         51:94:28:e0:88:40:40:76:26:45:5a:05:ad:21:3e:f3:77:13:
         20:10:28:90:89:52:c4:ec:12:22:6b:7f:b5:02:16:08:84:ee:
         6a:2c:f4:5b:6f:81:3b:e5:35:c7:bb:b2:2f:48:92:82:db:02:
         f1:66:0e:d2:8c:e7:10:56:e0:64:a5:b1:b3:f0:f2:c7:5a:21:
         80:24:fc:c7:b4:2e:00:c6:9e:17:b5:c8:00:d9:a2:73:a7:e6:
         23:e0:e4:f7:0a:67:c0:70:16:ba:8f:91:67:80:f6:f4:71:61:
         7a:31:81:df:b1:8e:d1:1a:df:80:77:ce:68:60:8e:82:0c:bd:
         43:44:88:64:e4:37:40:d3:ae:cb:bb:c8:1a:31:b1:c9:24:3c:
         c3:bb:84:80:ab:7f:27:65:e3:6c:97:ca:89:d2:c0:11:b8:5c:
         c8:9b:ff:c4:a1:4d:ab:55:34:1f:77:65:66:4a:5c:3f:f5:d9:
         74:56:48:35:9e:91:cb:bb:87:5a:7d:87:f0:c6:2c:9e:e0:5f:
         42:6f:65:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:17:50 2025 by rpki-client