Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/3139322e3134312e31322e302f32342d3234203d3e20323637343531.roa
File:                     3139322e3134312e31322e302f32342d3234203d3e20323637343531.roa (raw, json)
Hash identifier:          BY+UX9aE6EnwK/rYr/DrMLJIoXrZyhx5EQnUaP93p8E=
Subject key identifier:   DD:F9:BD:F8:00:46:40:ED:8B:E3:7F:93:B0:6E:D0:1A:E3:32:3A:85
Certificate issuer:       /CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Certificate serial:       0AE109B06BF77A412EB72A78C3872A859EE38433
Authority key identifier: 40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/3139322e3134312e31322e302f32342d3234203d3e20323637343531.roa
Signing time:             Mon 13 Mar 2023 15:55:36 +0000
ROA not before:           Mon 13 Mar 2023 15:50:36 +0000
ROA not after:            Mon 11 Mar 2024 15:55:36 +0000
asID:                     267451
IP address blocks:        192.141.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e1:09:b0:6b:f7:7a:41:2e:b7:2a:78:c3:87:2a:85:9e:e3:84:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40F0B01508443ECF24946EA682A36F4FC13140B1
        Validity
            Not Before: Mar 13 15:50:36 2023 GMT
            Not After : Mar 11 15:55:36 2024 GMT
        Subject: CN=DDF9BDF8004640ED8BE37F93B06ED01AE3323A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fe:e2:95:2b:32:b0:09:07:2d:80:cb:3d:c7:
                    a3:98:76:3a:10:6e:66:fb:7c:d6:28:d4:4e:f8:84:
                    da:2b:a0:3a:8e:47:f5:0b:46:0b:bc:cf:82:c1:b3:
                    c8:c1:8e:6f:ee:f8:1b:d9:10:d4:da:ac:45:f7:70:
                    47:bf:0c:13:53:6c:92:5d:de:3c:d3:4c:15:d1:c5:
                    ec:d1:e2:7b:9a:38:c9:96:2e:38:9e:e9:57:0c:3e:
                    97:75:d9:66:de:17:c4:dc:a0:8b:fc:a0:83:ed:33:
                    ff:ce:27:ec:67:28:58:d9:58:85:51:ef:2c:3d:96:
                    32:a6:f9:03:40:77:16:df:d4:c0:36:90:23:33:a2:
                    fa:43:bf:2e:f8:7c:5d:43:09:28:a9:48:6f:72:6b:
                    f8:e5:87:84:19:37:22:3c:ed:f4:5a:29:41:38:67:
                    8f:a2:e2:b3:a8:6d:4f:5d:c0:1d:d4:39:7d:07:11:
                    c0:0a:33:71:72:3a:2b:ae:e5:a1:1b:32:4b:be:23:
                    51:35:f4:98:10:18:b1:43:92:2a:04:d9:3d:29:d5:
                    e5:9a:8a:79:e2:8e:d0:45:2c:41:31:39:7c:a4:93:
                    98:1b:4a:cb:88:00:d4:7e:8b:6c:a2:f3:ac:5e:37:
                    2c:96:88:81:d8:cb:48:fb:f2:a7:9e:b2:af:c1:fd:
                    e2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F9:BD:F8:00:46:40:ED:8B:E3:7F:93:B0:6E:D0:1A:E3:32:3A:85
            X509v3 Authority Key Identifier:
                keyid:40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/40F0B01508443ECF24946EA682A36F4FC13140B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/3139322e3134312e31322e302f32342d3234203d3e20323637343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:e2:ac:b2:27:cc:0e:13:21:97:16:aa:06:e5:f4:fa:7b:63:
         ec:cf:8e:d0:16:c4:db:3d:23:ad:85:aa:c2:f4:46:49:b0:ac:
         28:6b:70:75:6b:c1:43:8e:24:2f:a6:aa:41:2a:e2:40:f3:25:
         54:10:4f:31:b0:ca:7d:1a:a8:38:b9:d4:0f:07:ad:fc:b4:94:
         11:1b:03:0d:59:06:d4:0b:b4:06:19:71:8e:95:68:0a:ad:62:
         15:2d:b7:62:c9:89:a7:8d:de:0e:7c:51:45:2e:bf:da:d0:86:
         70:b3:ca:99:af:88:67:08:9f:eb:9b:9c:5f:c8:b4:64:d1:ca:
         88:c5:7c:a0:6c:b0:80:a3:55:61:8f:c7:6a:71:d7:50:21:23:
         b3:da:f5:ae:32:16:e3:e8:73:6c:37:ce:07:5b:5f:4a:62:6d:
         96:69:f5:dd:83:5a:9a:80:24:ca:67:2b:06:c7:45:90:b9:ad:
         43:dc:74:e5:33:dc:d0:87:8b:29:2e:98:e0:db:aa:7a:12:da:
         db:83:1e:c3:01:81:c8:60:bc:2a:e3:64:3a:5d:63:a9:5e:87:
         0f:54:24:94:d5:84:af:a6:5a:e3:3d:13:2f:01:32:8f:dc:d5:
         fe:61:d3:97:54:54:88:4d:15:39:65:b3:4b:4b:a1:82:9c:c6:
         c2:0d:24:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:03 2025 by rpki-client