Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/3139322e3134312e3139322e302f32342d3234203d3e20323637343735.roa
File:                     3139322e3134312e3139322e302f32342d3234203d3e20323637343735.roa (raw, json)
Hash identifier:          l466izTZDxBFG0JJToJy9RXBkdkbG+FvKhPjHnVmKgU=
Subject key identifier:   D6:28:D0:08:63:F8:8D:34:73:0F:44:67:6B:07:AF:58:F1:4F:2E:AA
Certificate issuer:       /CN=27431F298D6DFE8179639FE397D34A2A47E96D15
Certificate serial:       715155A9399B11756C218932F6D86CACFA3465FB
Authority key identifier: 27:43:1F:29:8D:6D:FE:81:79:63:9F:E3:97:D3:4A:2A:47:E9:6D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/3139322e3134312e3139322e302f32342d3234203d3e20323637343735.roa
Signing time:             Fri 17 Jan 2025 19:17:11 +0000
ROA not before:           Fri 17 Jan 2025 19:12:11 +0000
ROA not after:            Fri 16 Jan 2026 19:17:11 +0000
asID:                     267475
IP address blocks:        192.141.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:51:55:a9:39:9b:11:75:6c:21:89:32:f6:d8:6c:ac:fa:34:65:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27431F298D6DFE8179639FE397D34A2A47E96D15
        Validity
            Not Before: Jan 17 19:12:11 2025 GMT
            Not After : Jan 16 19:17:11 2026 GMT
        Subject: CN=D628D00863F88D34730F44676B07AF58F14F2EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:26:b5:15:4d:c5:c9:06:ec:73:03:d3:f5:fb:
                    1e:7d:3b:1f:90:08:2f:7b:11:b3:73:9c:22:30:ff:
                    c5:7d:42:82:dd:f3:e3:8a:ab:c9:36:da:5f:16:81:
                    09:41:f0:17:33:36:16:15:fc:63:44:18:c6:a4:48:
                    6b:a7:72:d6:7f:ed:96:16:a0:1e:61:26:76:75:cf:
                    f5:d0:13:09:64:14:e8:99:30:de:ef:44:db:5b:37:
                    db:ab:a0:41:85:97:e4:e7:e0:f2:69:2e:8b:a5:54:
                    10:51:47:4d:e7:5d:02:3b:56:5b:f1:a1:70:69:93:
                    ba:d6:7b:72:54:d4:ac:b1:07:d7:b8:cf:ea:38:23:
                    7d:5e:04:cd:b6:8f:2f:ad:f9:07:fc:31:35:19:d8:
                    85:40:21:10:fb:00:cf:ad:46:04:e3:f1:a0:6c:ff:
                    46:01:00:e9:1b:47:02:d8:b3:c1:b4:ae:df:83:8a:
                    98:65:c8:5c:3e:e0:ef:06:0f:f9:d7:9b:58:26:cf:
                    8c:75:ce:05:bd:b3:f3:29:af:f3:58:68:9e:87:f8:
                    c6:bb:96:b2:17:b8:89:2d:9b:2e:5c:50:29:6d:69:
                    47:da:3d:37:5a:e3:a8:3a:33:23:6e:05:1d:8f:d4:
                    9c:ba:8c:70:8e:8c:b0:0e:dc:be:ad:29:ca:82:5d:
                    14:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:28:D0:08:63:F8:8D:34:73:0F:44:67:6B:07:AF:58:F1:4F:2E:AA
            X509v3 Authority Key Identifier:
                keyid:27:43:1F:29:8D:6D:FE:81:79:63:9F:E3:97:D3:4A:2A:47:E9:6D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/3139322e3134312e3139322e302f32342d3234203d3e20323637343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:fc:c6:41:2c:f2:03:d2:f9:7c:0e:cb:7f:c3:7a:67:8b:e4:
         8e:df:6a:22:d4:70:91:30:77:0f:1d:6d:72:6b:db:49:ac:56:
         e4:0c:3b:78:dc:09:12:b4:25:02:9a:29:bf:a7:fa:ce:8e:3d:
         a3:dc:18:be:4a:c2:f2:34:f6:19:ba:7a:91:3a:ab:c8:cf:34:
         a5:2f:a6:ec:3c:62:42:a0:3e:b6:78:fd:74:14:27:e7:af:42:
         cf:a5:7d:4d:9f:c4:b5:fd:29:4b:c8:cd:bf:24:3a:dd:46:a1:
         d7:c7:37:0f:4f:7e:a9:94:57:f5:75:39:b1:b5:b8:17:1f:7c:
         2b:86:03:cc:47:98:cf:8a:9b:d9:c1:9d:80:fa:2a:dc:99:c5:
         0a:1b:ef:ed:a5:61:64:61:74:0b:26:04:38:25:0e:69:d7:65:
         c4:d0:14:75:24:33:68:e5:c4:ba:af:40:85:7f:06:dc:78:7b:
         da:51:1d:5e:e9:de:7f:de:e0:2b:4c:62:37:7f:93:1c:c8:49:
         06:aa:c6:54:18:9b:c4:67:4b:47:fe:40:d8:0f:42:ac:11:f1:
         4b:ad:64:66:c3:c0:bf:9c:b0:d0:64:9a:b1:d4:ea:59:23:a3:
         0e:4a:15:83:8e:24:60:04:8e:aa:cb:f0:ac:f3:db:e0:96:7a:
         65:59:2a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:38:46 2025 by rpki-client