Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32342d3234203d3e20323632353039.roa
File:                     3137302e3234372e35322e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          1BCWYiufiFX7EtKlnZPGkljOJBd8NZY/YIogRQb9vug=
Subject key identifier:   39:BA:39:AE:45:7A:C8:6C:56:2B:DE:46:5D:60:7B:80:DB:84:A9:5A
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       5DCE308A6272EDD4498667BF90650EBDDDAA37F0
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 14 Oct 2024 01:49:52 +0000
ROA not before:           Mon 14 Oct 2024 01:44:52 +0000
ROA not after:            Mon 13 Oct 2025 01:49:52 +0000
asID:                     262509
IP address blocks:        170.247.52.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ce:30:8a:62:72:ed:d4:49:86:67:bf:90:65:0e:bd:dd:aa:37:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:52 2024 GMT
            Not After : Oct 13 01:49:52 2025 GMT
        Subject: CN=39BA39AE457AC86C562BDE465D607B80DB84A95A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e1:36:8a:f1:c7:26:2a:13:a7:ec:fc:d0:47:
                    f4:7b:32:60:e2:f1:3d:d5:ce:f2:82:23:cc:24:02:
                    68:d7:34:bc:57:97:f7:9e:34:da:09:75:62:59:a0:
                    e0:52:84:af:4e:a9:9c:83:ec:1c:80:7f:2e:9b:b5:
                    13:ba:ed:cf:c5:48:2f:ed:3b:3f:d6:73:6b:de:b3:
                    1b:52:d5:5e:c5:c5:88:84:d6:b0:01:9f:f5:c4:a9:
                    54:48:83:46:f8:c3:24:c3:27:78:a3:d0:93:b5:4f:
                    73:24:d2:dc:fc:0a:f4:be:df:8e:be:cd:ba:60:e3:
                    04:cb:47:df:9b:34:14:a1:c0:ba:0d:3c:e0:a6:91:
                    be:1c:66:51:ab:97:ba:06:c4:2e:3e:a0:a3:aa:b8:
                    b2:34:64:c9:66:54:bf:6a:13:39:38:3e:10:74:8e:
                    51:4a:cc:c8:f3:0a:a2:50:39:a5:d2:9d:3a:b9:85:
                    b7:78:ab:06:98:8d:94:7f:d6:21:0f:93:24:0f:4b:
                    a7:67:61:45:93:21:16:a5:c5:29:0a:60:d8:39:98:
                    11:55:22:e8:3a:bb:ef:00:96:ba:50:81:ab:7c:27:
                    51:e0:50:30:69:c4:bb:f8:b8:8a:81:f0:b6:b7:69:
                    b6:15:64:14:be:53:30:5e:fd:7d:5f:68:5c:e3:86:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BA:39:AE:45:7A:C8:6C:56:2B:DE:46:5D:60:7B:80:DB:84:A9:5A
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:32:7c:c0:0e:2f:c2:79:99:e4:db:f0:7f:07:69:e7:32:fa:
         28:ee:2c:cd:e6:ab:ac:4b:28:f7:2e:06:e1:fc:7f:57:59:ed:
         12:61:b5:22:da:7b:a2:bb:f7:3b:52:a8:51:2c:76:30:29:d3:
         dc:96:a9:dd:73:f3:f4:4d:a1:54:e1:16:fb:1d:ea:5d:76:4b:
         92:b1:05:60:89:59:0f:2d:c3:80:d4:c8:10:47:e8:c3:99:32:
         f9:7d:3a:56:b4:6d:e8:df:28:b6:3a:ca:0d:d9:af:fb:8e:f4:
         9f:29:fe:17:7a:2a:2b:70:42:ec:b8:6d:79:d6:69:66:fc:78:
         32:34:c1:c0:04:7e:70:18:45:91:43:ae:5b:4a:85:1d:36:87:
         c8:78:18:39:d4:f9:3f:fd:c0:53:cb:9d:43:0e:58:11:55:34:
         72:c5:27:a9:ea:ac:4d:67:d8:f6:9a:d2:61:a2:ce:7e:91:9f:
         b9:ec:9a:49:62:c6:71:49:ec:80:4c:52:ec:30:04:20:6c:76:
         44:90:5f:2d:84:99:0d:9f:c3:00:94:fc:34:bb:e9:d7:92:d7:
         e7:72:08:85:6d:d9:63:53:b2:57:4f:1c:2a:8f:55:00:8b:90:
         f6:34:58:86:ee:9c:34:6c:21:03:d4:3c:ef:fd:5d:3f:82:ce:
         74:b0:49:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:20:43 2025 by rpki-client