Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35302e302f32342d3234203d3e20323633343730.roa
File:                     3139312e3234322e35302e302f32342d3234203d3e20323633343730.roa (raw, json)
Hash identifier:          QnvzSTiXXjfBVXkAgyk9cOU/4JRQ2Gc2x4vTPEi6jNQ=
Subject key identifier:   D4:33:09:C8:6A:20:A3:ED:22:E9:E1:43:CF:4B:A4:A7:15:D4:B5:24
Certificate issuer:       /CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
Certificate serial:       1E5B7D9E6EF000AE20E04CB9ED6778DFB1699FBD
Authority key identifier: AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35302e302f32342d3234203d3e20323633343730.roa
Signing time:             Mon 16 Dec 2024 20:59:37 +0000
ROA not before:           Mon 16 Dec 2024 20:54:37 +0000
ROA not after:            Mon 15 Dec 2025 20:59:37 +0000
asID:                     263470
IP address blocks:        191.242.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5b:7d:9e:6e:f0:00:ae:20:e0:4c:b9:ed:67:78:df:b1:69:9f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
        Validity
            Not Before: Dec 16 20:54:37 2024 GMT
            Not After : Dec 15 20:59:37 2025 GMT
        Subject: CN=D43309C86A20A3ED22E9E143CF4BA4A715D4B524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:ce:84:0d:50:63:2d:a1:a3:ef:35:2f:60:
                    c6:9e:2b:42:0c:54:9d:00:d8:53:ca:07:0a:06:33:
                    46:4d:7e:56:c8:55:fa:90:b1:51:cc:a4:0e:10:b7:
                    53:b8:81:52:00:da:e8:84:98:9e:ee:c3:72:0b:bf:
                    30:19:e4:46:09:fd:5d:77:e6:df:09:e2:77:e4:ec:
                    05:44:59:a9:07:6e:24:c4:95:92:e4:84:f5:5f:f9:
                    4b:29:f7:78:2b:c8:36:5a:ac:75:07:a7:c6:63:86:
                    43:18:b8:74:cb:fa:89:3d:bf:5a:c6:ef:12:e0:34:
                    05:36:2b:ce:5c:8e:a8:d5:24:eb:73:2f:6b:59:19:
                    4f:f3:74:b5:84:35:c1:c4:2d:c8:12:73:db:3d:a8:
                    d6:c3:d7:31:84:26:23:4e:8d:48:7a:78:dd:5b:f6:
                    b2:62:a6:33:2e:f9:af:ac:bc:b4:53:3d:6f:b2:a4:
                    ee:8a:6b:28:5b:b4:78:6d:c9:59:54:fa:39:c8:34:
                    c8:16:b0:42:45:1c:f4:0a:2e:b9:c3:fb:75:27:2a:
                    cc:26:0a:55:dc:d9:a7:ea:d9:41:77:d9:ee:4c:be:
                    a9:1a:bf:a3:83:4f:08:95:91:aa:ac:05:16:10:1b:
                    8f:2b:ee:1b:68:b0:fb:cd:8a:01:9c:c8:01:7b:e5:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:33:09:C8:6A:20:A3:ED:22:E9:E1:43:CF:4B:A4:A7:15:D4:B5:24
            X509v3 Authority Key Identifier:
                keyid:AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35302e302f32342d3234203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:d1:d4:bd:41:af:a9:79:02:17:47:69:99:b6:a5:fa:88:d1:
         da:13:07:33:7f:21:c4:ac:5b:23:ad:bf:0b:af:70:c2:bb:35:
         1d:1a:79:24:70:b4:b3:c0:01:5c:e7:a0:b5:91:f8:ee:88:4c:
         c8:8b:3e:fb:69:93:67:eb:90:73:cc:f8:3b:bf:ac:ab:5b:1a:
         57:ae:74:2f:59:34:e5:8c:d8:52:8a:23:9c:09:a7:86:e6:f0:
         ce:9a:41:43:3a:87:89:9b:5a:40:cc:5b:4b:31:d2:8f:6f:51:
         94:0f:c3:61:6f:9e:a2:d6:b3:7b:38:be:f3:03:37:bd:c0:ed:
         25:7c:d7:81:e2:40:af:74:4b:7c:ed:15:6c:b9:c0:20:55:1e:
         75:75:e9:ab:2c:73:ce:0a:49:9e:10:16:04:4a:7a:9f:8f:a0:
         5c:b8:60:40:98:cc:8b:a6:07:10:27:83:8f:e3:2f:65:09:39:
         84:8c:69:40:8c:b5:39:61:f6:b7:70:0c:ad:91:83:6b:f9:7a:
         4d:11:7d:a5:8b:98:1e:f1:f3:b5:3d:68:a1:91:4b:91:cf:07:
         dd:bc:92:b2:27:60:9c:c4:81:9a:16:94:29:ca:25:fa:8c:37:
         25:1e:fc:da:8b:66:b7:79:c9:ff:dd:5d:38:02:64:74:03:af:
         93:56:9e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:32:26 2025 by rpki-client