Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/3139322e3134312e3139332e302f32342d3234203d3e20323637343735.roa
File:                     3139322e3134312e3139332e302f32342d3234203d3e20323637343735.roa (raw, json)
Hash identifier:          AdvpPbtzp9c36KCrFnvz51AIwP0vnxnDZidEPmqlNso=
Subject key identifier:   2B:14:B7:FC:AB:89:F1:10:12:E3:B3:03:EC:47:72:D4:8F:E8:48:F4
Certificate issuer:       /CN=27431F298D6DFE8179639FE397D34A2A47E96D15
Certificate serial:       6AAF9220126F1B5F7AC1471B2ED4E8E818D4F32C
Authority key identifier: 27:43:1F:29:8D:6D:FE:81:79:63:9F:E3:97:D3:4A:2A:47:E9:6D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/3139322e3134312e3139332e302f32342d3234203d3e20323637343735.roa
Signing time:             Fri 17 Jan 2025 19:17:33 +0000
ROA not before:           Fri 17 Jan 2025 19:12:33 +0000
ROA not after:            Fri 16 Jan 2026 19:17:33 +0000
asID:                     267475
IP address blocks:        192.141.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:af:92:20:12:6f:1b:5f:7a:c1:47:1b:2e:d4:e8:e8:18:d4:f3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27431F298D6DFE8179639FE397D34A2A47E96D15
        Validity
            Not Before: Jan 17 19:12:33 2025 GMT
            Not After : Jan 16 19:17:33 2026 GMT
        Subject: CN=2B14B7FCAB89F11012E3B303EC4772D48FE848F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c0:d3:71:ac:1d:b3:98:c5:d8:f2:49:48:66:
                    59:74:2e:c3:b1:0c:61:36:7d:77:ee:93:83:30:3b:
                    fb:02:05:fc:d3:fd:68:dd:0a:09:97:76:99:08:3b:
                    4d:36:0c:69:e6:64:6b:13:94:5c:19:8c:b7:dd:e8:
                    b2:c6:42:2b:01:8d:0e:22:a9:9b:a9:60:2f:c3:34:
                    6b:3d:f6:76:72:5f:7c:85:ab:17:2e:5b:aa:1e:ba:
                    b1:d3:71:1d:3e:ed:65:fc:6a:8d:9a:1c:c1:c9:0d:
                    97:b1:71:0b:37:48:6d:00:31:a1:e8:b9:dd:b8:e9:
                    c5:31:79:5e:3f:50:92:5b:19:7c:fb:09:34:45:bd:
                    f7:39:e5:e7:cd:b5:ee:1d:e0:d3:f9:b5:7b:b9:8d:
                    6e:a1:a2:c5:47:f5:5c:76:9c:96:04:b4:39:99:59:
                    e2:2a:df:b4:1a:32:cd:36:85:79:1a:0e:8c:46:88:
                    96:b9:88:d1:05:91:01:23:00:a5:01:10:0e:22:6a:
                    6c:51:d5:97:2b:5e:b4:be:72:ec:bb:07:bb:dd:ef:
                    2a:c5:80:f1:94:b1:41:78:2a:83:25:0c:8c:fe:9f:
                    72:2a:0b:69:d8:d6:3f:8f:f5:27:3f:d8:2f:89:a7:
                    3b:43:06:f8:b7:5e:04:02:d9:8f:87:02:5a:18:42:
                    a6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:14:B7:FC:AB:89:F1:10:12:E3:B3:03:EC:47:72:D4:8F:E8:48:F4
            X509v3 Authority Key Identifier:
                keyid:27:43:1F:29:8D:6D:FE:81:79:63:9F:E3:97:D3:4A:2A:47:E9:6D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/3139322e3134312e3139332e302f32342d3234203d3e20323637343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:18:57:47:af:ee:b0:c5:c6:09:40:d4:74:e3:fe:26:29:ba:
         7f:f8:39:a5:a3:ae:1a:ea:29:bc:07:1f:3d:09:9b:bc:c5:91:
         71:8d:ac:ec:78:1f:f9:df:a7:88:bd:61:a8:cb:49:53:80:42:
         fd:54:7f:09:dd:5c:7b:60:ef:c5:a3:9a:83:e8:f1:40:d1:1b:
         33:a6:2c:eb:15:73:50:e4:5d:8e:11:aa:35:79:c4:ec:0d:e8:
         da:7f:ee:95:3a:db:fb:e1:3c:8b:4b:4e:13:19:40:f3:6d:7d:
         e9:20:fe:04:a9:4f:17:b0:02:35:84:34:da:bb:4e:aa:3d:c7:
         1d:03:9b:b5:53:ee:49:88:75:34:f8:d0:1d:0a:4b:f8:42:b5:
         25:18:75:5b:b7:99:38:77:49:6e:dd:a1:e8:86:cd:9b:f9:54:
         9a:f5:f6:07:88:cb:61:3d:d8:72:34:7f:6f:29:01:7f:24:64:
         3f:b3:2f:bc:5f:2b:47:4b:eb:55:f8:4d:8b:4c:4e:82:7c:a6:
         cf:f8:5a:26:b4:ac:47:9b:0a:f0:b1:7e:05:43:8a:5c:57:18:
         9f:4f:83:d4:7e:a3:20:d2:92:9e:0e:79:64:65:f2:c6:55:f3:
         ff:7e:78:cd:65:4e:ab:ef:ad:bd:7b:70:c9:7f:94:a6:84:5c:
         bf:5e:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:09 2025 by rpki-client