Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136342e302f32342d3234203d3e20323636313936.roa
File:                     3139312e362e3136342e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          6WnnC1TKEjU6cXIQgkyl0cF23Bdpev1zWAQauls5Lo4=
Subject key identifier:   96:C3:67:86:E1:94:3A:FD:F3:9F:E3:64:87:41:14:79:64:61:4B:60
Certificate issuer:       /CN=8723709C4D690CFE7D7971537037FC3C8E195928
Certificate serial:       61B5A783169CA67A74F58D06ED74AC0261D7C295
Authority key identifier: 87:23:70:9C:4D:69:0C:FE:7D:79:71:53:70:37:FC:3C:8E:19:59:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8723709C4D690CFE7D7971537037FC3C8E195928.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136342e302f32342d3234203d3e20323636313936.roa
Signing time:             Sun 29 Dec 2024 13:33:00 +0000
ROA not before:           Sun 29 Dec 2024 13:28:00 +0000
ROA not after:            Sun 28 Dec 2025 13:33:00 +0000
asID:                     266196
IP address blocks:        191.6.164.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b5:a7:83:16:9c:a6:7a:74:f5:8d:06:ed:74:ac:02:61:d7:c2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8723709C4D690CFE7D7971537037FC3C8E195928
        Validity
            Not Before: Dec 29 13:28:00 2024 GMT
            Not After : Dec 28 13:33:00 2025 GMT
        Subject: CN=96C36786E1943AFDF39FE3648741147964614B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:41:75:9f:3c:9b:27:cd:d4:99:69:2b:47:8d:
                    5c:c8:07:35:63:4f:d6:df:38:1f:6f:04:c4:d7:21:
                    aa:17:19:60:95:4d:17:1a:28:a5:92:fd:61:bb:d4:
                    db:c3:38:7f:65:69:ac:88:e1:fd:30:b9:c0:76:77:
                    95:a6:a9:23:f9:c4:9d:f5:59:44:58:9c:22:16:99:
                    33:e0:67:75:ea:8c:a6:87:7c:63:e3:31:83:f5:42:
                    c8:e9:47:f8:5f:8f:5f:20:a0:6e:f9:f6:a6:22:70:
                    ba:50:0f:25:93:c1:21:eb:d8:24:f8:db:11:51:a8:
                    f0:7b:24:06:8d:15:8f:f5:93:50:c8:90:8b:23:97:
                    dc:c1:83:82:4f:be:d4:d2:7f:7b:ab:f3:ba:2b:b9:
                    bf:7d:64:a3:6b:dd:d3:a9:ec:94:e5:0e:07:3a:7d:
                    90:a7:9d:82:d2:d0:11:1c:29:98:22:c7:ca:eb:c9:
                    5d:ac:7b:f6:60:1b:81:a2:76:59:72:f2:71:a0:5e:
                    7c:43:63:74:75:97:10:8e:19:9e:d5:d7:73:b0:f8:
                    4f:e3:08:78:bc:3c:6b:0f:b4:d4:e3:07:63:51:3e:
                    e9:d7:2e:a4:6f:d9:51:3f:d0:f8:60:cc:82:2f:8c:
                    a5:38:57:86:ec:57:18:02:71:00:49:06:62:a1:98:
                    46:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C3:67:86:E1:94:3A:FD:F3:9F:E3:64:87:41:14:79:64:61:4B:60
            X509v3 Authority Key Identifier:
                keyid:87:23:70:9C:4D:69:0C:FE:7D:79:71:53:70:37:FC:3C:8E:19:59:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/8723709C4D690CFE7D7971537037FC3C8E195928.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8723709C4D690CFE7D7971537037FC3C8E195928.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136342e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:38:d9:83:7f:16:0d:aa:bd:77:91:16:48:c0:1d:a1:c2:d4:
         8c:d8:d4:ce:f5:bf:ab:8c:46:7e:3e:85:23:a9:9e:a3:77:c7:
         ee:10:12:2b:18:e2:eb:e3:fe:1a:5f:b2:b6:42:80:95:23:48:
         37:bf:4a:28:3b:5b:8c:27:ea:23:5b:27:29:a5:0f:af:41:ee:
         c1:9b:ea:97:1a:4c:3a:b0:9f:97:f8:94:67:78:e4:25:a6:64:
         90:4a:2e:d3:69:e5:e6:04:6a:cd:ab:54:0d:a7:89:25:9d:8a:
         1a:e3:97:85:2c:51:eb:df:e4:d8:15:e8:58:f4:ff:12:b3:ce:
         48:95:1b:18:37:04:e7:dd:3f:5b:47:81:f3:ac:9e:ca:d6:d0:
         b7:ea:0b:6f:9b:d2:18:68:22:a2:9d:de:b9:ab:3f:cb:9f:30:
         75:d4:3a:12:a4:53:87:d2:57:a3:1b:b2:c7:b3:e7:4d:8d:15:
         a8:1c:40:a0:0f:c0:0d:fb:f7:10:85:30:d6:ae:33:8d:b0:76:
         18:a3:99:6e:42:d4:62:b3:f7:4f:14:8d:ba:dd:e3:13:9c:a3:
         65:25:5b:9a:51:4d:84:dc:76:73:3a:7c:68:5e:aa:aa:14:e1:
         8f:95:c1:ff:3d:51:e6:55:df:14:97:de:1e:05:d6:e2:60:ed:
         f0:3e:1b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:56:58 2025 by rpki-client