Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/3139322e3134312e31322e302f32342d3234203d3e20323637343531.roa
File:                     3139322e3134312e31322e302f32342d3234203d3e20323637343531.roa (raw, json)
Hash identifier:          v6ko8qbkCKQSGUBH8YZlj6xZ9lya8XvWjXR6UpV61m4=
Subject key identifier:   CB:DD:5F:C7:99:6E:1A:CB:B9:A4:A2:C3:59:AC:83:38:43:85:9E:83
Certificate issuer:       /CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
Certificate serial:       7C39786D40AD8E0F4D2284513B1389DF268B2F73
Authority key identifier: 9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/3139322e3134312e31322e302f32342d3234203d3e20323637343531.roa
Signing time:             Tue 13 Jun 2023 17:25:31 +0000
ROA not before:           Tue 13 Jun 2023 17:20:31 +0000
ROA not after:            Tue 11 Jun 2024 17:25:31 +0000
asID:                     267451
IP address blocks:        192.141.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:39:78:6d:40:ad:8e:0f:4d:22:84:51:3b:13:89:df:26:8b:2f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECE9497765CBFF5ADF188D9EAED33445844495D
        Validity
            Not Before: Jun 13 17:20:31 2023 GMT
            Not After : Jun 11 17:25:31 2024 GMT
        Subject: CN=CBDD5FC7996E1ACBB9A4A2C359AC833843859E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8b:27:20:9f:9d:77:2d:45:ad:ed:03:58:51:
                    45:1b:cd:9e:8d:aa:48:25:f6:ca:57:aa:82:75:7a:
                    8b:2a:2c:00:51:48:49:87:e2:3a:44:ee:28:2f:b9:
                    67:49:5d:ef:60:7d:c3:1a:79:2d:31:c2:91:46:f0:
                    82:46:f7:88:da:5c:2f:28:f5:41:a5:a4:2b:38:cd:
                    d3:e9:bb:cf:3e:f5:aa:9a:d2:73:b9:f6:de:d2:52:
                    9c:01:6a:89:b8:85:5c:98:c8:3b:12:d2:69:03:6c:
                    10:22:39:90:f5:0b:94:3d:59:f2:92:2f:c1:ef:c3:
                    84:32:ec:d1:41:c5:42:f2:14:0a:0b:ba:36:61:b0:
                    25:7a:5c:86:3f:2f:9d:58:76:c7:e2:bc:7b:a9:ac:
                    63:58:75:fa:7d:66:73:d4:7d:80:15:55:43:f2:46:
                    96:9e:2b:76:70:2d:66:f1:1b:3e:c7:e6:b4:b3:14:
                    4f:a0:f3:d4:74:cd:60:6e:74:54:cf:86:5d:75:06:
                    94:d9:4a:ae:3e:d2:42:5b:0a:19:77:90:d3:c8:39:
                    77:e9:ee:54:15:f9:bc:58:8e:69:36:dd:77:46:e7:
                    16:e1:41:3d:7f:7d:e2:7a:a7:1a:f0:cc:6a:a2:c5:
                    04:b6:2c:77:13:f8:ab:25:9b:5e:d1:1e:7a:c0:8d:
                    f6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DD:5F:C7:99:6E:1A:CB:B9:A4:A2:C3:59:AC:83:38:43:85:9E:83
            X509v3 Authority Key Identifier:
                keyid:9E:CE:94:97:76:5C:BF:F5:AD:F1:88:D9:EA:ED:33:44:58:44:49:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9ECE9497765CBFF5ADF188D9EAED33445844495D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/0/3139322e3134312e31322e302f32342d3234203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:d4:b4:a9:96:b3:f1:aa:b4:c9:10:5e:f1:01:7e:aa:d8:37:
         e9:6c:b4:62:8d:d0:6b:a5:8f:90:37:d8:47:68:e2:73:43:2e:
         62:f3:46:11:9b:cb:bc:9f:bd:e9:68:54:59:11:bd:71:f4:3b:
         73:02:f2:2a:bc:5b:c0:e9:29:d2:86:04:73:cd:ef:be:a6:29:
         83:80:82:3b:72:d4:55:08:d5:54:eb:96:0f:7a:46:68:f5:29:
         80:96:10:09:26:05:a6:7f:c1:6e:68:2d:aa:90:1c:b5:a4:e5:
         87:f5:92:06:c6:57:2d:e9:37:49:c3:fb:e6:34:c1:b9:1f:e1:
         95:62:4f:e2:a9:7c:f9:d7:a7:73:e8:19:88:7a:92:9a:d7:4d:
         ac:01:e8:93:41:45:ca:e1:55:9d:b0:32:6e:f8:49:f7:a6:14:
         16:c0:30:8e:9b:3d:75:8b:9c:e2:a1:d1:ac:1d:ee:0e:65:a0:
         0d:01:41:40:40:8f:e4:f6:63:c9:2e:fd:cd:da:c0:7a:e5:20:
         2e:f6:b2:5a:5d:3a:99:fe:b3:04:9e:66:d0:10:f9:d4:fb:e7:
         32:78:6e:55:7a:57:f2:31:f8:d2:d0:b2:4c:79:5b:38:bd:55:
         e3:f3:6c:19:78:48:74:53:90:d1:1d:8c:b0:d8:20:b5:51:a0:
         b6:e2:56:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:24 2025 by rpki-client