Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35342e302f32342d3234203d3e20323633343730.roa
File:                     3139312e3234322e35342e302f32342d3234203d3e20323633343730.roa (raw, json)
Hash identifier:          B/5QI9RH0jyJ4hyVkDht4nFIbz+1GBdtDxFK3hRv2Ps=
Subject key identifier:   03:B1:F9:CB:1E:5D:97:40:00:CD:41:80:39:9E:1D:48:2A:F7:39:EE
Certificate issuer:       /CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
Certificate serial:       7EC14919D55B1FE6496F6E83427E3DA9E655D3D2
Authority key identifier: AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35342e302f32342d3234203d3e20323633343730.roa
Signing time:             Mon 16 Dec 2024 20:59:47 +0000
ROA not before:           Mon 16 Dec 2024 20:54:47 +0000
ROA not after:            Mon 15 Dec 2025 20:59:47 +0000
asID:                     263470
IP address blocks:        191.242.54.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c1:49:19:d5:5b:1f:e6:49:6f:6e:83:42:7e:3d:a9:e6:55:d3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
        Validity
            Not Before: Dec 16 20:54:47 2024 GMT
            Not After : Dec 15 20:59:47 2025 GMT
        Subject: CN=03B1F9CB1E5D974000CD4180399E1D482AF739EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:61:cc:1d:83:c9:a4:9d:ef:6c:2c:ec:ad:b5:
                    c9:e9:66:0b:d7:1f:0a:2e:9a:d3:60:06:27:e5:c5:
                    41:39:af:45:3c:b4:32:59:5f:37:46:a9:f9:f7:5a:
                    46:42:34:f3:ec:dc:66:4d:71:fa:98:33:3f:7f:21:
                    5d:f1:d8:8b:c3:95:17:49:80:08:d4:c5:bd:98:7e:
                    3d:5a:99:7f:ec:7c:8f:ec:ed:13:56:c5:47:19:50:
                    08:91:41:fe:5b:74:0c:56:03:7a:3b:36:bf:c3:84:
                    5b:f2:b0:ae:e7:ba:31:de:ab:9e:3e:4d:53:5c:98:
                    23:33:64:35:9a:3a:be:d9:7c:b3:e8:c4:78:87:9e:
                    a5:87:2f:83:66:6a:ee:98:67:f9:85:0f:ae:cc:7f:
                    17:79:f4:f1:1e:ae:29:44:6b:47:29:55:15:4f:e2:
                    82:23:f3:2d:79:92:b1:d7:3d:67:5c:e2:52:a5:a9:
                    6f:65:67:b3:54:c0:48:8f:eb:e3:7f:96:6f:3f:ae:
                    81:4c:2d:8d:41:8c:8d:75:5d:ed:a1:84:10:09:8d:
                    ef:af:10:d5:35:7d:8b:7e:7b:9c:04:56:16:d0:5f:
                    e1:36:47:76:e4:d2:07:34:a5:20:11:f5:e2:0e:f6:
                    27:8a:b6:93:b1:61:9d:e7:ae:92:f2:04:3e:07:c9:
                    4f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B1:F9:CB:1E:5D:97:40:00:CD:41:80:39:9E:1D:48:2A:F7:39:EE
            X509v3 Authority Key Identifier:
                keyid:AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3139312e3234322e35342e302f32342d3234203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:c3:bd:f2:97:97:da:ee:40:bc:88:04:55:2a:8a:71:86:83:
         96:2d:cb:f5:1e:ab:ac:5b:62:47:21:b7:56:57:f3:38:96:1d:
         18:76:32:fc:51:1e:3c:c1:dd:af:5c:0d:f6:bc:8a:be:83:f3:
         13:d7:bc:f9:9d:47:ff:2e:c7:b0:30:e6:40:54:ca:22:ec:ba:
         f2:bd:24:51:17:cb:26:60:86:b4:08:5d:13:53:db:6f:2d:6d:
         56:c7:98:fe:c2:6d:b9:d8:c7:c2:59:4b:7d:5f:16:f6:4c:c0:
         7c:e9:d6:a7:1c:fb:fc:32:aa:d9:62:96:60:0c:d5:14:59:42:
         bb:a8:79:d4:74:bd:91:ca:ea:aa:7d:d3:b1:35:b8:3e:73:b0:
         45:d0:57:b9:ed:fb:5c:d9:f6:03:e8:4f:38:09:27:fd:d7:fd:
         07:ef:65:34:30:af:f2:cd:6d:7a:39:42:92:e7:c0:8f:a0:a2:
         1d:c9:03:52:e6:ae:65:27:df:12:4e:cc:96:59:6d:fb:7e:8e:
         1f:c3:32:81:df:fa:e1:75:72:19:ec:da:76:d3:39:36:62:af:
         51:3b:a9:28:b2:b9:b9:58:4f:94:55:a6:fb:c7:ed:52:2a:5f:
         3c:33:8f:5e:8b:4c:d9:4b:97:c0:6f:76:0f:1d:f6:95:89:93:
         c8:dc:bd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:11:16 2025 by rpki-client