Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/0/3139312e3234302e3230382e302f32312d3234203d3e20323731313833.roa
File:                     3139312e3234302e3230382e302f32312d3234203d3e20323731313833.roa (raw, json)
Hash identifier:          fjwDBiJ62Kfoh4il7/GwWK7tazrFbNkrL8oqcJht6ys=
Subject key identifier:   91:35:83:FB:F8:16:12:73:44:15:81:D3:CA:CD:22:D5:E1:DC:11:6F
Certificate issuer:       /CN=439FF6311D69FD8E0CED053845878C844A00FE9F
Certificate serial:       6365F1047C6C22CD5BB4263457454C4D20294CB9
Authority key identifier: 43:9F:F6:31:1D:69:FD:8E:0C:ED:05:38:45:87:8C:84:4A:00:FE:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/439FF6311D69FD8E0CED053845878C844A00FE9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/0/3139312e3234302e3230382e302f32312d3234203d3e20323731313833.roa
Signing time:             Tue 19 Sep 2023 19:37:27 +0000
ROA not before:           Tue 19 Sep 2023 19:32:27 +0000
ROA not after:            Tue 17 Sep 2024 19:37:27 +0000
asID:                     271183
IP address blocks:        191.240.208.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:65:f1:04:7c:6c:22:cd:5b:b4:26:34:57:45:4c:4d:20:29:4c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439FF6311D69FD8E0CED053845878C844A00FE9F
        Validity
            Not Before: Sep 19 19:32:27 2023 GMT
            Not After : Sep 17 19:37:27 2024 GMT
        Subject: CN=913583FBF8161273441581D3CACD22D5E1DC116F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:19:62:a9:a7:3f:23:c1:20:2b:01:c9:3a:cd:
                    fa:4c:97:c3:9b:20:58:11:db:88:09:25:bc:43:96:
                    8b:dd:83:68:fb:8c:ea:7e:16:7e:09:7f:40:91:e3:
                    76:1d:43:6f:9f:e6:96:35:f0:b7:a5:91:94:61:d1:
                    44:cc:42:84:26:2d:3a:4e:6e:50:d5:97:14:99:87:
                    44:2c:66:6d:76:3c:3a:91:ad:86:71:ec:58:81:c3:
                    9c:a8:c9:97:76:3d:bc:c5:3d:84:cb:10:e7:a2:c8:
                    4f:8e:58:b9:07:bf:b6:8e:b7:74:47:89:a0:82:9e:
                    46:12:6b:87:cc:8e:1a:54:98:54:de:40:9c:27:14:
                    12:16:8d:6a:55:4d:02:0e:78:83:9d:03:2b:03:53:
                    ca:6f:f1:ef:4e:5c:df:ad:ae:25:c1:84:17:84:e0:
                    7f:1d:81:23:11:b9:5e:42:18:c6:04:d1:72:8b:61:
                    52:1b:93:7d:21:86:a4:60:ea:34:5b:7d:4a:e3:ea:
                    0b:0b:40:2b:71:a2:c0:80:2c:62:1b:50:fe:0f:e9:
                    18:4d:b5:d0:99:03:37:d8:8d:ab:0f:ba:fc:c8:45:
                    fd:2a:70:d0:20:90:24:75:a3:d1:15:7e:ac:da:ef:
                    59:c1:16:28:65:88:db:ea:e9:71:9e:c5:7f:a3:e3:
                    5f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:35:83:FB:F8:16:12:73:44:15:81:D3:CA:CD:22:D5:E1:DC:11:6F
            X509v3 Authority Key Identifier:
                keyid:43:9F:F6:31:1D:69:FD:8E:0C:ED:05:38:45:87:8C:84:4A:00:FE:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/0/439FF6311D69FD8E0CED053845878C844A00FE9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/439FF6311D69FD8E0CED053845878C844A00FE9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/0/3139312e3234302e3230382e302f32312d3234203d3e20323731313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:e4:16:5f:15:44:69:88:a3:35:53:70:fb:38:2c:95:32:b9:
         c4:c9:af:e9:a8:36:5c:17:a5:31:05:d1:68:3e:1d:6f:8b:48:
         88:35:62:41:31:ca:d4:d8:8d:a4:2a:84:4c:dc:64:16:65:d1:
         79:86:85:fd:d8:0c:13:2d:3a:20:2e:5c:ca:dc:40:ec:78:a2:
         fe:5b:ca:09:9e:99:20:e9:06:ee:6e:94:1c:3c:92:71:ec:c9:
         5a:42:38:be:1f:85:f3:8b:37:a5:73:99:2c:d9:d9:8f:59:5f:
         2d:b1:c1:a4:66:5d:15:60:c5:5b:1a:bd:b5:9d:ed:2a:53:86:
         62:88:ea:8e:8f:cc:21:83:4b:db:8b:57:98:79:75:81:46:fe:
         8a:5d:ba:ed:1c:df:df:01:ee:7c:ff:b3:a7:a4:a3:1b:79:ae:
         19:bf:42:43:f0:43:33:93:bf:5a:d3:4c:7c:a8:57:13:48:d4:
         b4:fd:82:57:a4:b2:83:73:f4:8f:b5:d3:7b:b2:29:19:90:b1:
         a4:e8:e4:a8:7f:27:00:e2:26:26:53:e0:f8:21:ce:51:a3:98:
         d6:a1:aa:e1:8e:89:67:c2:49:54:15:ce:e5:54:f6:b1:60:ef:
         ad:f5:a3:ac:df:fb:ec:82:3f:c3:c0:f9:fc:ac:96:91:9d:ab:
         07:74:ac:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:06 2025 by rpki-client