Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RfkqXxtrU5n1i6iYSLTVxWhKed7XY7qmbYuSdGBS1Wj/0/3139312e362e38302e302f32312d3231203d3e20323633303730.roa
File:                     3139312e362e38302e302f32312d3231203d3e20323633303730.roa (raw, json)
Hash identifier:          e8+jVam5fUnEP4MtGs5fqDB6qkK4O549pfzYmXUk5hg=
Subject key identifier:   50:E9:C0:A2:90:C0:47:79:A7:E4:BA:2E:A0:F3:B7:37:69:31:10:24
Certificate issuer:       /CN=041A69A55C8D8C4A7E6DF1F299FE21B2F26AE8DC
Certificate serial:       13D8D6C0A924A709CE7FE432DAD5F33866B255B4
Authority key identifier: 04:1A:69:A5:5C:8D:8C:4A:7E:6D:F1:F2:99:FE:21:B2:F2:6A:E8:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/041A69A55C8D8C4A7E6DF1F299FE21B2F26AE8DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RfkqXxtrU5n1i6iYSLTVxWhKed7XY7qmbYuSdGBS1Wj/0/3139312e362e38302e302f32312d3231203d3e20323633303730.roa
Signing time:             Tue 13 Sep 2022 09:05:30 +0000
ROA not before:           Tue 13 Sep 2022 09:00:30 +0000
ROA not after:            Tue 12 Sep 2023 09:05:30 +0000
asID:                     263070
IP address blocks:        191.6.80.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d8:d6:c0:a9:24:a7:09:ce:7f:e4:32:da:d5:f3:38:66:b2:55:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041A69A55C8D8C4A7E6DF1F299FE21B2F26AE8DC
        Validity
            Not Before: Sep 13 09:00:30 2022 GMT
            Not After : Sep 12 09:05:30 2023 GMT
        Subject: CN=50E9C0A290C04779A7E4BA2EA0F3B73769311024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:64:8c:37:83:0a:55:53:cd:44:02:18:bd:fd:
                    aa:d3:49:28:b5:1f:1d:ed:e2:1e:7c:5a:8d:0d:5a:
                    eb:7a:63:d8:f7:fd:15:53:d0:22:ce:c6:b5:96:49:
                    a6:64:84:94:8c:91:c1:0c:21:55:7a:d5:6e:a4:d9:
                    bd:a2:2e:9d:83:dd:92:d2:6a:34:49:ca:06:69:97:
                    ba:89:3c:87:a9:f1:22:7c:5f:8b:18:81:42:b3:96:
                    17:ea:8c:49:8a:d0:74:30:0e:f5:80:01:1f:c1:64:
                    55:bd:6f:59:0d:d2:2b:04:28:f0:0a:72:bb:55:25:
                    61:20:cf:f1:30:a1:85:6a:ff:65:c1:18:10:21:84:
                    f2:64:2c:9d:09:78:e1:16:2a:de:18:7d:b3:20:ee:
                    fa:4b:47:ae:d6:24:4d:a4:9a:b5:22:09:02:36:05:
                    25:29:20:aa:bd:35:77:e0:2b:2a:94:12:51:38:3c:
                    5f:37:84:7b:fe:95:19:67:1f:3f:83:a3:65:83:89:
                    a3:d4:89:16:35:14:dc:20:18:81:17:c4:0f:eb:e5:
                    68:47:5c:fc:6a:ad:e9:19:ed:5f:66:e3:24:c7:3d:
                    e7:16:f6:d9:5a:db:10:62:bb:c0:5d:eb:c3:6f:94:
                    1e:90:17:b6:b5:d7:5d:75:98:47:74:21:fb:9f:2c:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E9:C0:A2:90:C0:47:79:A7:E4:BA:2E:A0:F3:B7:37:69:31:10:24
            X509v3 Authority Key Identifier:
                keyid:04:1A:69:A5:5C:8D:8C:4A:7E:6D:F1:F2:99:FE:21:B2:F2:6A:E8:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RfkqXxtrU5n1i6iYSLTVxWhKed7XY7qmbYuSdGBS1Wj/0/041A69A55C8D8C4A7E6DF1F299FE21B2F26AE8DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/041A69A55C8D8C4A7E6DF1F299FE21B2F26AE8DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RfkqXxtrU5n1i6iYSLTVxWhKed7XY7qmbYuSdGBS1Wj/0/3139312e362e38302e302f32312d3231203d3e20323633303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:f8:4b:08:85:a4:f5:2c:9d:84:33:55:ea:0f:f0:d6:8e:3b:
         ff:ed:9b:bb:15:66:6b:f1:3f:ce:7d:1e:05:52:31:8b:33:44:
         fd:59:09:eb:89:41:23:93:06:99:69:a6:3a:f7:e9:a0:4c:bd:
         fe:f3:6e:f0:94:92:97:ce:ed:13:39:ac:7b:e0:78:f4:2b:a8:
         3c:99:1b:d7:81:24:43:82:df:fc:b7:6d:ba:9e:6d:cd:97:b4:
         c8:c5:0b:85:9b:2a:53:2f:b1:19:f7:be:80:be:ee:07:76:b8:
         de:b8:29:61:d1:36:ae:ee:76:b7:38:91:db:fa:ed:f3:2e:96:
         7e:bd:8e:94:54:90:36:c7:55:71:5f:4e:e5:0d:97:07:d5:21:
         7b:af:7c:0e:c9:79:75:c0:f4:a2:4f:6a:59:3d:b1:44:2b:9b:
         0b:bf:a7:b5:96:90:f9:43:28:6d:3c:de:b6:6f:86:6d:a0:32:
         b3:98:9b:5b:99:9f:b9:3e:01:aa:ba:8c:99:72:25:3f:b6:ea:
         67:c8:4c:6c:9f:d4:d1:e3:80:57:a6:84:7e:1c:1a:b4:6d:d7:
         00:ae:fc:6f:47:f9:dd:2f:a3:3f:4d:81:8e:78:c2:5a:0c:a6:
         d7:40:8b:1e:15:b2:f0:54:0b:5d:4c:27:dc:72:43:af:0c:6c:
         23:91:95:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:25:03 2025 by rpki-client