Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e34392e302f32342d3234203d3e20323633343730.roa
File:                     3139312e3234322e34392e302f32342d3234203d3e20323633343730.roa (raw, json)
Hash identifier:          O1/7JBMMclA7PkyCD9ymZSTbHBPdTwnqXYnYXPOGnJk=
Subject key identifier:   D1:53:84:2B:91:0C:48:4D:B2:DA:D6:EA:4B:16:83:A7:00:AC:10:1F
Certificate issuer:       /CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
Certificate serial:       2962A37A26373B14BA20337A7C12D51A0A03C384
Authority key identifier: AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e34392e302f32342d3234203d3e20323633343730.roa
Signing time:             Mon 16 Dec 2024 20:59:35 +0000
ROA not before:           Mon 16 Dec 2024 20:54:35 +0000
ROA not after:            Mon 15 Dec 2025 20:59:35 +0000
asID:                     263470
IP address blocks:        191.242.49.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:62:a3:7a:26:37:3b:14:ba:20:33:7a:7c:12:d5:1a:0a:03:c3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
        Validity
            Not Before: Dec 16 20:54:35 2024 GMT
            Not After : Dec 15 20:59:35 2025 GMT
        Subject: CN=D153842B910C484DB2DAD6EA4B1683A700AC101F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:86:37:51:3d:e3:6a:73:a6:20:97:b1:1d:75:
                    db:8e:62:c2:0f:e6:4c:45:4d:19:e6:cb:65:10:f0:
                    1c:f9:03:5a:41:af:58:64:8a:c6:d5:be:17:b5:1e:
                    cf:eb:33:c9:3c:47:ea:55:bd:1a:b0:d4:a9:cc:98:
                    7e:45:a6:b8:25:d7:70:53:fc:ed:51:c8:cf:bd:b1:
                    74:10:1a:49:61:fc:60:2e:07:4e:9e:87:c6:45:7c:
                    2a:ed:a0:ce:7b:92:f4:c3:1a:5e:d5:f3:cb:fa:8d:
                    5c:39:ea:8c:35:25:74:f2:d7:56:99:56:30:87:cf:
                    f7:33:2c:ec:41:ad:f8:d4:69:25:83:ba:d1:02:5d:
                    ff:5b:c1:d1:5a:55:7a:73:11:44:a9:a9:d0:cd:a7:
                    e6:96:89:99:c5:a5:43:67:98:96:43:86:1a:f8:b2:
                    5d:f1:8b:aa:b4:d9:d7:d7:95:fa:ea:4f:f3:ff:51:
                    98:a8:5a:60:1a:ca:87:e4:3a:52:3c:10:fa:89:69:
                    37:33:48:71:a4:8d:15:e1:b1:2a:1a:3e:38:ac:c6:
                    47:49:b7:42:63:2e:10:6e:e8:8b:3e:7b:3d:9f:6d:
                    3a:8d:40:de:ae:68:8b:44:d4:0d:14:2d:e5:5b:e6:
                    cb:ec:5b:b0:0f:15:a3:fd:20:76:d9:70:28:93:e6:
                    6e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:53:84:2B:91:0C:48:4D:B2:DA:D6:EA:4B:16:83:A7:00:AC:10:1F
            X509v3 Authority Key Identifier:
                keyid:AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e34392e302f32342d3234203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:3c:59:f5:9a:41:95:45:0c:d0:a3:27:ce:21:53:75:ed:ed:
         b4:45:98:2f:39:a6:d9:49:07:e5:d7:52:82:2f:f4:94:42:d0:
         a3:be:e8:78:2c:69:68:06:29:6f:79:db:27:4c:fb:fd:4b:9c:
         56:5b:54:2b:33:06:f7:a8:08:07:46:81:19:02:18:b0:86:5f:
         ba:7e:7a:e8:05:e3:e8:1d:bb:c5:c0:00:12:d8:9e:0e:62:1c:
         18:0e:4a:0a:bc:a3:cf:05:56:ca:fd:87:23:0c:48:b1:11:5e:
         1c:02:ea:3d:c3:bc:55:f4:e9:b7:47:72:cf:0d:89:f2:3d:86:
         6d:1f:08:c4:df:ef:ea:12:21:42:e3:b3:05:37:b7:d9:87:75:
         f5:92:a0:7f:0b:fb:a3:43:43:1b:26:23:87:e5:1f:b0:9c:dd:
         ef:1f:53:2b:d5:e9:fe:7f:73:05:fa:41:1f:e5:fa:84:d8:51:
         5d:fd:e0:a6:74:92:db:fb:62:34:ab:a4:6d:e8:06:73:9b:d7:
         74:88:b5:0e:3a:62:97:fc:16:78:a0:20:8e:0e:cc:47:df:0a:
         19:f6:dd:95:f0:26:8d:9d:32:bb:61:d6:d0:57:96:64:90:f4:
         77:cd:c9:15:25:57:86:bc:3c:ce:7e:41:3f:87:d4:e9:d8:a4:
         a2:3a:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:16:11 2025 by rpki-client