Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35322e302f32342d3234203d3e20323633343730.roa
File:                     3139312e3234322e35322e302f32342d3234203d3e20323633343730.roa (raw, json)
Hash identifier:          aaS1XjJ9HCpYLDghauvOzqmyEBAASPnd+79uIFmlIPQ=
Subject key identifier:   61:CB:FB:DB:07:A5:90:76:83:6C:5C:D2:D9:54:C5:B8:3D:56:A1:A2
Certificate issuer:       /CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
Certificate serial:       44708B64EF144C562B2845E00FA144DBBF044BD3
Authority key identifier: AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35322e302f32342d3234203d3e20323633343730.roa
Signing time:             Mon 16 Dec 2024 20:59:43 +0000
ROA not before:           Mon 16 Dec 2024 20:54:43 +0000
ROA not after:            Mon 15 Dec 2025 20:59:43 +0000
asID:                     263470
IP address blocks:        191.242.52.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:70:8b:64:ef:14:4c:56:2b:28:45:e0:0f:a1:44:db:bf:04:4b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
        Validity
            Not Before: Dec 16 20:54:43 2024 GMT
            Not After : Dec 15 20:59:43 2025 GMT
        Subject: CN=61CBFBDB07A59076836C5CD2D954C5B83D56A1A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:67:dd:91:df:36:2d:58:ab:89:9e:28:10:91:
                    3c:85:3a:3d:e9:50:96:be:1c:e4:aa:af:c9:57:5c:
                    f7:60:0a:16:c3:d1:2c:e9:b7:f2:62:15:bc:6e:13:
                    96:be:e2:f4:45:40:6a:7c:0d:00:f1:e2:1f:6b:62:
                    6c:b2:41:6a:4e:b9:19:f6:f7:9a:0c:dc:2a:03:d0:
                    70:74:5f:80:1a:06:e6:f5:86:6a:2b:51:5e:ef:e9:
                    c7:3b:a7:3c:79:59:3d:e0:25:ad:f5:79:79:d1:e6:
                    43:0a:9c:d0:55:5c:5b:cc:05:82:ac:e3:b3:5d:5f:
                    30:2b:54:00:49:8b:fc:7a:4c:82:62:4d:a4:8d:a4:
                    ac:5a:44:69:f2:86:c1:8d:14:18:10:88:db:f2:62:
                    8e:14:e5:03:43:2e:94:22:3f:8d:da:55:e0:a6:e1:
                    fa:7b:c2:c6:5a:cd:83:e0:af:ed:07:7f:32:4a:3f:
                    a6:34:07:d9:53:dc:72:d4:8d:19:f1:07:d2:3c:3e:
                    54:8f:57:ec:dc:d1:39:14:e4:32:38:e2:28:29:f0:
                    2c:03:13:d4:fb:69:ab:3e:8a:d9:b5:82:6f:1e:19:
                    7d:94:e5:93:b0:f9:8e:d3:2b:28:7c:4e:9b:b1:0f:
                    bd:63:84:0c:ba:30:4b:7b:98:2d:03:41:57:10:be:
                    ad:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CB:FB:DB:07:A5:90:76:83:6C:5C:D2:D9:54:C5:B8:3D:56:A1:A2
            X509v3 Authority Key Identifier:
                keyid:AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35322e302f32342d3234203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:7a:d3:e1:12:7c:1c:f5:66:e7:97:f9:70:38:40:35:16:c6:
         5e:64:f8:66:b6:6a:cb:40:80:21:ed:0c:b8:e2:e4:e8:b9:cc:
         eb:ef:3e:fd:69:f9:c3:f6:ed:89:e0:52:9e:2e:09:5c:b0:25:
         41:db:37:c0:e8:38:15:f3:2d:25:54:4e:6e:68:3d:75:62:f9:
         a4:48:d4:7b:ac:b9:51:16:e4:8b:74:0e:b9:50:2c:4b:a5:f0:
         62:51:d1:b7:24:81:ff:5f:16:0f:e4:fa:05:a9:fc:a5:71:5a:
         48:f9:70:14:60:5f:54:dc:af:57:a4:4e:de:42:65:bc:04:2c:
         13:c9:3b:f2:b7:99:11:39:1d:2e:a0:8b:ff:06:8d:1d:0c:08:
         d7:e8:b5:2d:4e:08:dc:31:fa:b4:35:fc:c3:42:2c:a7:24:38:
         ee:57:66:bd:97:77:34:ef:64:85:c7:e5:33:0a:46:51:e7:f6:
         96:29:98:28:14:b1:1b:9b:95:0f:24:d9:1a:79:60:15:77:19:
         36:70:72:25:a5:c2:71:57:19:1a:7e:37:09:96:cd:4d:e4:4a:
         ae:17:c0:54:77:c9:62:d4:54:ed:fa:e7:85:f1:30:12:34:93:
         72:8c:0c:d2:d3:fa:4c:d3:2d:25:15:1e:ea:a5:a8:2a:ba:e1:
         91:ee:17:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:11:00 2025 by rpki-client