Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/3139322e3134302e36342e302f32342d3234203d3e20323636353530.roa
File:                     3139322e3134302e36342e302f32342d3234203d3e20323636353530.roa (raw, json)
Hash identifier:          J7wwlKDt7+XxE3jI0YxOJKrX1G0KhOlj89F8qE8FURQ=
Subject key identifier:   2B:E3:FE:B9:E6:DF:E8:B8:95:1B:D6:F5:62:41:EE:E1:74:1D:94:C6
Certificate issuer:       /CN=003207C75EB18F584535FB5AB89F4EFAFBE7FD31
Certificate serial:       5C2BFFDA1439BD5FD3F4E1D0A6F98452D5061CEA
Authority key identifier: 00:32:07:C7:5E:B1:8F:58:45:35:FB:5A:B8:9F:4E:FA:FB:E7:FD:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/3139322e3134302e36342e302f32342d3234203d3e20323636353530.roa
Signing time:             Mon 10 Jul 2023 13:27:10 +0000
ROA not before:           Mon 10 Jul 2023 13:22:10 +0000
ROA not after:            Mon 08 Jul 2024 13:27:10 +0000
asID:                     266550
IP address blocks:        192.140.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2b:ff:da:14:39:bd:5f:d3:f4:e1:d0:a6:f9:84:52:d5:06:1c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003207C75EB18F584535FB5AB89F4EFAFBE7FD31
        Validity
            Not Before: Jul 10 13:22:10 2023 GMT
            Not After : Jul  8 13:27:10 2024 GMT
        Subject: CN=2BE3FEB9E6DFE8B8951BD6F56241EEE1741D94C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:4c:90:c1:ef:91:d0:3c:13:88:64:ce:44:
                    f5:08:9e:b1:03:f5:d8:d8:00:81:e6:7c:8c:b7:f4:
                    73:43:9a:ed:be:ff:c8:fd:cd:3c:e5:30:ed:c5:08:
                    52:f4:cd:da:96:f7:af:df:88:84:43:e7:47:1d:3b:
                    03:89:8e:42:7f:73:7f:30:70:d0:29:0b:bd:27:2a:
                    ee:41:68:08:f0:cf:eb:8c:74:ec:80:e4:88:cd:22:
                    81:2e:d2:6b:88:c7:31:a2:24:72:a0:af:7f:44:f5:
                    a6:f2:e5:ca:12:b8:05:d4:26:6b:f9:d4:40:0c:37:
                    da:3d:f3:4a:44:33:3c:8a:05:31:be:58:dd:fb:56:
                    f4:0a:10:e9:5e:69:75:72:59:8f:a4:45:d2:9e:d2:
                    73:4e:05:67:d8:93:8d:44:78:79:2a:d4:aa:dc:82:
                    44:83:ad:f3:0d:5e:23:81:0a:5d:cb:94:7e:17:5b:
                    eb:ca:13:b7:d2:58:c9:24:6e:d4:c4:60:53:cd:ed:
                    ad:d8:d2:2e:c6:7a:e6:ae:bf:b9:b4:6a:26:b0:f4:
                    40:56:05:dd:60:0d:49:4b:c9:12:ee:b2:83:a7:dc:
                    88:95:72:ff:69:f4:2a:d1:fe:25:75:bd:5a:47:63:
                    54:3c:a5:af:ac:55:9e:ef:4a:4e:53:ce:da:14:3a:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E3:FE:B9:E6:DF:E8:B8:95:1B:D6:F5:62:41:EE:E1:74:1D:94:C6
            X509v3 Authority Key Identifier:
                keyid:00:32:07:C7:5E:B1:8F:58:45:35:FB:5A:B8:9F:4E:FA:FB:E7:FD:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003207C75EB18F584535FB5AB89F4EFAFBE7FD31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/3139322e3134302e36342e302f32342d3234203d3e20323636353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:08:95:da:36:c2:66:17:9a:2d:be:18:b5:9b:ea:c5:12:b4:
         97:02:fd:74:4f:d1:f3:30:ba:2d:08:e7:e9:d2:79:2e:4d:e8:
         f1:9c:2f:3f:a0:23:e0:93:38:db:00:78:f9:ca:35:71:f5:eb:
         51:93:fa:a9:25:c9:5c:bd:86:c7:3b:1f:89:15:7c:90:cd:75:
         e6:23:0f:c4:98:97:e2:e3:a2:5c:80:d0:f4:7c:cb:35:b2:71:
         a7:02:3b:a2:73:7e:14:d7:87:8f:59:65:e1:e1:84:57:da:9b:
         ae:99:80:de:dd:ba:71:49:40:10:31:11:49:df:2a:95:86:c3:
         80:43:f7:5d:56:ca:1c:e5:01:c2:7d:7e:26:65:29:ce:6a:99:
         99:c6:5d:2a:8f:3b:c5:7f:ee:e2:cc:8a:8c:80:24:80:c4:0f:
         ce:37:0c:ea:4a:da:82:2e:74:a4:d9:bc:0f:f7:51:60:8c:e7:
         50:40:c5:ad:40:fd:8f:97:73:f7:7b:60:ce:46:83:75:4e:cf:
         09:09:40:97:ef:44:cd:ef:93:a6:a2:aa:1b:df:95:a7:c4:34:
         39:10:80:5a:0c:26:86:8d:d2:3a:eb:30:cc:07:6d:b6:63:15:
         78:9a:35:22:ea:78:e0:aa:ca:67:73:3e:18:50:97:94:96:5f:
         e6:66:a3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:16 2025 by rpki-client