Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          MCM4YyXReSp4DAYWaYFfHo89hywqaCd9QBOefrmY6w8=
Subject key identifier:   83:BE:47:B7:42:96:D4:BF:BC:98:03:8A:97:43:A4:72:A6:39:93:92
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       43B4F17E8DB3F02D4E171F3B7ADECFBFC2550809
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa
Signing time:             Thu 27 Mar 2025 17:28:52 +0000
ROA not before:           Thu 27 Mar 2025 17:23:52 +0000
ROA not after:            Thu 26 Mar 2026 17:28:52 +0000
asID:                     263518
IP address blocks:        191.243.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b4:f1:7e:8d:b3:f0:2d:4e:17:1f:3b:7a:de:cf:bf:c2:55:08:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Mar 27 17:23:52 2025 GMT
            Not After : Mar 26 17:28:52 2026 GMT
        Subject: CN=83BE47B74296D4BFBC98038A9743A472A6399392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:97:d6:d0:4f:6e:03:07:b6:fb:20:b3:ea:
                    47:8e:c9:2c:00:36:19:5f:31:4e:9f:7a:a7:c3:57:
                    f8:8d:7e:9d:0e:a1:9e:f8:43:06:25:49:6b:66:6b:
                    80:54:d0:1a:24:07:6b:67:28:6a:51:fb:44:14:c2:
                    6c:37:e4:6a:1c:52:73:14:ae:4c:ea:4c:80:b6:d2:
                    b4:96:dc:30:d3:46:e3:8e:61:68:de:47:1f:7c:f3:
                    81:75:05:ea:ca:d7:cd:45:b5:4a:64:1d:fb:8c:04:
                    69:7d:5a:65:39:bc:c5:d2:e4:03:e1:c1:aa:89:0a:
                    22:90:67:05:e7:07:85:56:c0:92:ac:fa:46:ae:c1:
                    f5:73:34:cf:1b:35:de:aa:18:1a:21:ac:e5:59:b8:
                    9d:5c:7d:07:b8:11:e1:a4:52:d8:09:ab:32:f8:2b:
                    4a:5c:57:fa:28:18:0c:6a:97:8f:0c:c9:65:92:98:
                    14:77:09:7a:1f:35:cb:e8:e7:26:e1:9b:fa:56:d6:
                    8c:bd:f0:0a:9a:6f:52:5d:ae:1e:48:f8:4f:1a:63:
                    dc:5d:c2:17:86:47:1e:0d:6c:d7:d0:5a:00:9e:7d:
                    12:0e:7b:d6:df:66:61:de:12:e5:18:55:3d:f5:76:
                    ec:35:c9:f6:01:5d:2b:e5:78:a8:27:3e:a8:00:46:
                    03:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BE:47:B7:42:96:D4:BF:BC:98:03:8A:97:43:A4:72:A6:39:93:92
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:39:36:5f:60:74:e1:7d:42:b1:74:f1:a6:72:98:9f:ca:25:
         f5:a5:de:72:83:76:5d:a8:79:c2:aa:e1:26:4f:28:c3:78:e7:
         6f:f9:72:19:3f:6d:a4:6b:da:94:f1:b7:d7:96:fc:09:82:7d:
         77:d4:95:93:da:c5:5e:7f:f4:53:c3:32:fd:d3:b7:ba:5b:03:
         92:86:9b:83:82:42:1c:28:cc:66:01:da:10:16:e1:74:90:ae:
         57:5d:3f:be:7a:83:8e:d5:56:72:a4:3c:e9:28:ba:42:9a:d3:
         7d:44:86:8b:17:df:2f:97:2a:38:05:0b:74:7f:4f:6f:6b:d9:
         cb:65:66:62:d4:7d:a6:7a:d5:fb:42:f0:99:13:9d:33:fa:d7:
         85:47:50:78:fd:34:2c:29:de:f2:6e:fd:0e:49:78:b4:42:7a:
         32:48:da:83:47:74:5f:85:07:f6:0c:44:2b:cf:e2:52:87:aa:
         2e:ea:18:4a:61:d8:a8:7f:b1:55:0e:2f:51:da:64:ec:8e:63:
         4a:ff:08:ce:21:05:e3:fd:9e:a1:93:0c:29:c3:a8:9c:c5:5a:
         9d:2d:9b:ec:7d:56:a5:d7:d1:b7:11:f2:7e:20:b2:00:4a:25:
         4e:e1:2e:12:6d:ed:17:f6:39:44:a1:e6:51:eb:3a:2a:73:ba:
         c6:b9:7c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:11:05 2025 by rpki-client