Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/3139312e33372e3139362e302f32322d3234203d3e20323633343034.roa
File:                     3139312e33372e3139362e302f32322d3234203d3e20323633343034.roa (raw, json)
Hash identifier:          M74WGLwrtjr5QluuL+40/UwPcOArxPvoKoM2/TXXSNc=
Subject key identifier:   C8:02:BF:46:B3:74:BD:8A:4E:05:2A:DE:3F:9A:FD:D6:2E:C8:5A:62
Certificate issuer:       /CN=EA41EA4B343A73C6DA276C8B60D6FF873F791A82
Certificate serial:       062633463B67E24AF2B016B1C19BF5F643A26BC3
Authority key identifier: EA:41:EA:4B:34:3A:73:C6:DA:27:6C:8B:60:D6:FF:87:3F:79:1A:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA41EA4B343A73C6DA276C8B60D6FF873F791A82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/3139312e33372e3139362e302f32322d3234203d3e20323633343034.roa
Signing time:             Wed 18 Dec 2024 02:11:00 +0000
ROA not before:           Wed 18 Dec 2024 02:06:00 +0000
ROA not after:            Wed 17 Dec 2025 02:11:00 +0000
asID:                     263404
IP address blocks:        191.37.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:26:33:46:3b:67:e2:4a:f2:b0:16:b1:c1:9b:f5:f6:43:a2:6b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA41EA4B343A73C6DA276C8B60D6FF873F791A82
        Validity
            Not Before: Dec 18 02:06:00 2024 GMT
            Not After : Dec 17 02:11:00 2025 GMT
        Subject: CN=C802BF46B374BD8A4E052ADE3F9AFDD62EC85A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:50:25:b2:22:1a:49:eb:4e:e5:19:61:83:73:
                    5d:60:63:cb:7b:70:00:18:34:c3:9f:5b:3f:7e:e6:
                    29:5e:98:b9:0c:46:c4:7e:e3:ad:b8:b5:98:cc:5c:
                    30:53:5d:38:5f:74:bf:c5:38:b4:29:c2:ae:38:46:
                    19:a4:1b:1f:fb:09:f2:5a:e7:c3:85:74:8b:24:22:
                    d7:13:8e:4b:af:ed:74:ad:a5:ff:58:33:8f:24:e5:
                    aa:31:fe:0b:e6:e1:ff:f1:d3:f9:a8:24:14:89:39:
                    d6:65:db:e3:6d:e6:19:09:8a:44:a1:02:5f:9f:28:
                    51:1d:e3:a5:4c:f4:f2:11:93:7c:2f:38:7e:f1:06:
                    b9:34:06:53:06:23:93:70:76:04:ee:9a:8a:8c:a0:
                    89:53:67:6d:c9:81:5d:bc:8e:2b:35:87:2b:fa:37:
                    e7:05:6a:89:41:c3:29:ee:1e:28:65:d2:ff:0a:d5:
                    d0:74:cc:ab:a1:c9:c0:9c:c8:b7:1e:6c:54:c2:a4:
                    06:42:80:fd:e7:c0:8a:f7:42:f3:4a:fb:35:9d:ee:
                    b8:da:ca:f9:f9:f9:13:0e:db:19:ed:90:c9:82:d1:
                    99:37:54:1b:70:09:99:0e:ca:e5:38:1a:2c:ae:78:
                    77:a5:84:eb:9a:24:08:cb:e5:d2:ef:6b:49:f5:95:
                    13:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:02:BF:46:B3:74:BD:8A:4E:05:2A:DE:3F:9A:FD:D6:2E:C8:5A:62
            X509v3 Authority Key Identifier:
                keyid:EA:41:EA:4B:34:3A:73:C6:DA:27:6C:8B:60:D6:FF:87:3F:79:1A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/EA41EA4B343A73C6DA276C8B60D6FF873F791A82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA41EA4B343A73C6DA276C8B60D6FF873F791A82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/3139312e33372e3139362e302f32322d3234203d3e20323633343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:37:a7:4a:5f:96:07:e4:be:b6:10:1c:86:c3:93:91:a0:d1:
         cc:c9:3e:38:7f:88:6b:c0:3f:68:62:b3:11:a3:4d:d5:bd:db:
         80:d5:76:71:38:88:2e:07:9c:98:d0:81:8f:34:e2:3a:5b:0d:
         bb:be:96:c6:a6:3a:b2:a4:da:9f:91:d4:b1:af:ab:89:9e:9b:
         43:1b:cb:b1:4e:12:0d:01:28:68:d5:be:ce:a3:04:91:2e:fe:
         3c:89:74:ba:25:b5:cb:11:00:23:59:57:b3:0d:6c:fd:53:f6:
         85:6e:2f:12:4a:ee:22:a8:f1:51:90:2c:55:79:eb:bf:6d:a0:
         ef:ad:de:62:ad:2c:14:71:a6:8a:3b:e5:8a:6e:f4:17:9f:eb:
         dc:c5:fa:1d:31:9a:42:48:7d:c7:27:85:29:17:93:a2:cd:90:
         d6:42:cc:25:cb:4a:d8:2b:e5:ba:42:f9:6f:87:35:8c:db:a4:
         b2:96:04:2c:0f:20:a6:6c:2a:c8:83:4e:a8:b0:3a:6e:cc:f9:
         01:01:5c:59:0a:cf:39:47:d0:85:46:a6:77:b6:bc:73:91:8b:
         04:99:f0:b6:81:f5:e2:1b:ed:c7:7d:72:60:ac:2f:55:d8:ea:
         76:fe:2f:45:ce:f9:fd:66:aa:a4:90:88:cd:ba:d5:20:27:5a:
         fb:a5:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:22:54 2025 by rpki-client