Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138382e302f32322d3234203d3e20323633353039.roa
File:                     3139312e3234332e3138382e302f32322d3234203d3e20323633353039.roa (raw, json)
Hash identifier:          yRy8udZ/wqUbda66/jwbds0x62IXiL1Sjt4Bh8Mor3w=
Subject key identifier:   27:94:D8:AD:E5:B8:5F:97:99:3A:84:73:73:33:A7:F9:9B:1B:F6:B5
Certificate issuer:       /CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
Certificate serial:       6EE4A0DF84684D824AFEA75D69F74A0A1C8732A0
Authority key identifier: D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138382e302f32322d3234203d3e20323633353039.roa
Signing time:             Sun 15 Oct 2023 06:34:21 +0000
ROA not before:           Sun 15 Oct 2023 06:29:21 +0000
ROA not after:            Sun 13 Oct 2024 06:34:21 +0000
asID:                     263509
IP address blocks:        191.243.188.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e4:a0:df:84:68:4d:82:4a:fe:a7:5d:69:f7:4a:0a:1c:87:32:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
        Validity
            Not Before: Oct 15 06:29:21 2023 GMT
            Not After : Oct 13 06:34:21 2024 GMT
        Subject: CN=2794D8ADE5B85F97993A84737333A7F99B1BF6B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:52:d1:76:e9:5d:69:6c:dc:af:c5:b0:8c:56:
                    47:8e:17:b3:f4:a1:f9:58:7d:c4:d7:3c:0a:98:de:
                    4f:ab:f1:d8:54:56:39:2f:94:9a:ba:c4:eb:16:d0:
                    63:5c:38:b1:ac:89:42:c1:44:28:ab:12:00:af:56:
                    54:bf:28:55:e0:26:ac:6a:ab:ab:71:d1:15:b7:64:
                    a8:c0:8b:81:06:17:30:34:eb:9f:59:2d:b9:38:1a:
                    f5:29:50:c4:27:9c:aa:4c:88:f9:99:73:fb:63:b0:
                    79:ef:22:08:bb:17:6d:31:88:07:3f:63:26:56:92:
                    a4:1a:a1:b4:92:58:7e:15:72:be:45:2e:8a:26:c9:
                    11:b9:53:b2:2e:66:db:b1:3a:74:64:33:01:8a:dd:
                    fb:6b:35:0c:e6:12:6b:9d:d5:d0:4d:fa:b9:5c:b4:
                    e0:1c:44:dd:a7:06:32:e1:bc:a2:1b:55:94:b5:6b:
                    87:6e:d4:60:ec:c5:8d:f9:78:37:38:00:35:a5:aa:
                    e0:59:e8:8d:d4:e2:76:f0:38:aa:2b:6a:de:86:d7:
                    38:6a:fc:83:9f:a5:55:45:46:e6:49:b6:4a:b3:bb:
                    5e:7f:3a:d7:43:0b:59:84:14:ab:61:10:1e:ef:09:
                    f7:1a:fd:aa:cc:6b:46:c1:83:f6:59:88:da:cd:c7:
                    21:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:94:D8:AD:E5:B8:5F:97:99:3A:84:73:73:33:A7:F9:9B:1B:F6:B5
            X509v3 Authority Key Identifier:
                keyid:D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138382e302f32322d3234203d3e20323633353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:b2:b3:b5:9b:37:32:e9:49:c6:7a:6d:3b:01:32:e0:f4:b0:
         bb:58:c6:ba:a2:b8:3f:61:06:d3:7f:77:a2:37:54:01:43:23:
         c6:7f:28:9f:01:87:ed:df:a7:f4:2a:10:07:24:22:47:bc:b3:
         ea:c9:9f:ff:8f:a1:bc:2a:c6:1f:ee:08:dc:71:b4:2f:52:68:
         b8:0b:91:a1:26:bd:90:e6:4e:61:6b:e6:5a:8d:6b:99:a1:67:
         73:8b:22:bd:85:83:b4:fa:5c:31:1c:6a:97:c5:7b:4e:a3:dd:
         d7:b7:0b:3b:f7:bb:6b:47:0f:e1:36:fa:37:01:76:35:fe:d3:
         74:0d:be:9a:91:3a:3a:6f:03:16:20:8a:02:ae:a4:d8:73:47:
         db:28:f3:1e:c3:ff:91:41:06:ed:7f:08:5c:57:d9:46:81:3d:
         45:ea:05:e4:5e:41:e1:09:92:ae:7f:a1:e9:85:ec:fb:3f:01:
         4f:08:c3:6b:7a:6b:de:b7:fe:0e:1d:83:84:67:4b:56:83:86:
         0b:2d:42:72:c0:67:d7:aa:ac:28:9d:03:8e:cb:0f:e8:4a:89:
         e4:c5:72:7d:06:40:ef:f8:58:ea:8d:6e:b4:9a:17:7c:71:43:
         05:10:90:c4:52:95:c7:68:95:7d:79:7e:ea:84:5c:c0:68:7e:
         d5:10:22:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 22:33:25 2025 by rpki-client