Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/3137302e38312e37372e302f32342d3332203d3e20323636333934.roa
File:                     3137302e38312e37372e302f32342d3332203d3e20323636333934.roa (raw, json)
Hash identifier:          ysuir7tvSxaTdOAxDk4kbKS4b+TJaIVYBmK46+CzHJo=
Subject key identifier:   B5:8A:33:85:A2:E4:AC:00:49:95:8A:31:25:C3:3A:94:00:B8:85:3B
Certificate issuer:       /CN=4F987340E53D5A3A07D027B2DACD493A3757DC0F
Certificate serial:       03F71C3E986406B38CDFDC97129B5F3D51DC2E88
Authority key identifier: 4F:98:73:40:E5:3D:5A:3A:07:D0:27:B2:DA:CD:49:3A:37:57:DC:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F987340E53D5A3A07D027B2DACD493A3757DC0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/3137302e38312e37372e302f32342d3332203d3e20323636333934.roa
Signing time:             Tue 30 Jul 2024 17:53:35 +0000
ROA not before:           Tue 30 Jul 2024 17:48:35 +0000
ROA not after:            Tue 29 Jul 2025 17:53:35 +0000
asID:                     266394
IP address blocks:        170.81.77.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f7:1c:3e:98:64:06:b3:8c:df:dc:97:12:9b:5f:3d:51:dc:2e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F987340E53D5A3A07D027B2DACD493A3757DC0F
        Validity
            Not Before: Jul 30 17:48:35 2024 GMT
            Not After : Jul 29 17:53:35 2025 GMT
        Subject: CN=B58A3385A2E4AC0049958A3125C33A9400B8853B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:a8:df:0d:66:c0:26:1b:9a:a1:7d:e7:29:
                    16:dc:dd:0a:58:ba:e7:74:2a:01:09:99:06:b0:b2:
                    06:e6:64:af:80:16:3d:23:cc:3d:d9:23:35:0c:1f:
                    7a:5c:b6:1b:0e:ff:c2:70:bb:0b:e7:01:a8:43:9f:
                    30:b9:f8:fd:76:13:f9:b9:62:a9:ce:72:d3:b1:2d:
                    9a:7a:2e:c8:a8:f2:0a:5a:64:a8:d3:9f:47:7d:48:
                    50:71:36:a0:d4:f3:78:bd:fc:c7:8c:7d:62:30:87:
                    15:77:6a:ac:77:b8:3a:ef:0e:eb:35:b9:75:b7:f7:
                    fc:37:20:83:80:2f:d3:b0:6e:bd:22:85:26:b7:eb:
                    b4:dc:49:bd:e5:09:de:0f:6d:cc:9e:d7:50:e1:de:
                    d6:6a:62:87:64:29:16:dd:0e:ed:c0:2f:31:a2:8c:
                    ab:6a:c5:19:42:12:05:35:60:b4:ad:7b:bc:05:da:
                    18:91:b4:7b:8a:08:ab:c3:7d:eb:8a:08:d9:53:c6:
                    59:4a:c1:d1:02:de:85:75:b4:79:39:5d:ab:79:ba:
                    b4:71:99:c6:5c:45:b9:c3:37:af:4d:cc:26:b9:7c:
                    95:22:a8:fb:75:1c:09:eb:1c:d8:1b:0f:eb:20:d1:
                    db:af:b6:99:ac:6e:2c:9c:ac:51:1d:18:ac:2c:e1:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8A:33:85:A2:E4:AC:00:49:95:8A:31:25:C3:3A:94:00:B8:85:3B
            X509v3 Authority Key Identifier:
                keyid:4F:98:73:40:E5:3D:5A:3A:07:D0:27:B2:DA:CD:49:3A:37:57:DC:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/4F987340E53D5A3A07D027B2DACD493A3757DC0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F987340E53D5A3A07D027B2DACD493A3757DC0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/3137302e38312e37372e302f32342d3332203d3e20323636333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:85:0e:96:87:38:68:f3:95:b7:95:66:ee:54:aa:7a:be:ec:
         2d:f4:58:4b:d1:f3:c5:09:1e:87:1f:ee:37:49:d7:49:49:8a:
         77:dc:1a:22:c1:a0:66:df:92:7a:c2:b5:a0:4f:d2:40:d9:81:
         9f:ae:6a:e3:42:cf:48:8f:9b:36:07:ee:f4:15:69:03:94:87:
         23:2b:a3:fa:70:a0:64:71:37:25:22:d2:5c:0d:fd:9e:f2:39:
         b1:a2:8a:f5:f1:cb:c0:78:7b:92:19:3b:ae:21:dc:eb:68:4d:
         58:b7:c8:d7:8e:8f:57:99:e2:96:80:56:ed:49:03:6b:9d:49:
         d6:76:f6:21:dc:46:47:ea:63:7a:27:42:9c:17:cc:45:b6:41:
         1c:c0:1e:29:a4:9a:2f:f1:92:e3:86:fc:6e:29:01:c7:56:28:
         b3:cb:a9:51:de:9c:91:7e:ea:95:d3:a5:13:ab:7e:39:7d:bd:
         40:1c:94:b1:5f:fe:fa:b4:49:da:96:64:67:f6:ab:e0:8e:c6:
         ad:9a:10:5c:02:2b:0d:63:8a:34:3a:e8:d6:79:33:1c:2a:31:
         71:71:1a:52:37:b4:88:83:ba:03:73:69:f0:15:a2:27:c4:f5:
         29:89:fb:1c:27:6d:92:6e:d8:d3:55:ca:e9:79:04:eb:2d:8d:
         ca:7a:d5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:51:42 2025 by rpki-client