Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32342d3234203d3e20323632353039.roa
File:                     3137302e3234372e35322e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          HIA4/Hyn0peqSkIC4tdm6fak4C0sVMhoHOe51dHuiWg=
Subject key identifier:   97:8B:26:C4:94:0A:91:CC:AE:34:F5:5E:DB:70:99:AE:72:A8:F4:31
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       711F145C73E909415E71A372FB68CF3076C00848
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32342d3234203d3e20323632353039.roa
Signing time:             Thu 07 Nov 2024 20:40:11 +0000
ROA not before:           Thu 07 Nov 2024 20:35:11 +0000
ROA not after:            Thu 06 Nov 2025 20:40:11 +0000
asID:                     262509
IP address blocks:        170.247.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1f:14:5c:73:e9:09:41:5e:71:a3:72:fb:68:cf:30:76:c0:08:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:11 2024 GMT
            Not After : Nov  6 20:40:11 2025 GMT
        Subject: CN=978B26C4940A91CCAE34F55EDB7099AE72A8F431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:0d:80:68:65:f5:16:07:6b:eb:dc:ef:ec:
                    78:87:72:b5:43:ac:2a:74:a9:f8:72:b4:3d:95:47:
                    71:7f:c9:59:13:fa:c1:42:cf:14:b0:32:1f:13:38:
                    eb:a8:5f:c7:99:3e:e6:1e:4d:a8:2c:51:35:e2:a1:
                    37:6f:fe:d3:00:e1:eb:d0:d3:bf:66:62:3a:13:7f:
                    a8:24:09:a0:65:58:1f:1d:14:eb:09:85:1e:4a:a2:
                    6f:7e:89:90:88:e0:bb:76:68:cf:98:46:d9:f2:42:
                    92:90:ea:4b:d3:cb:b7:6c:75:52:09:a6:14:f3:c8:
                    f9:48:3d:b8:72:5d:f9:ac:f3:ab:47:23:d5:79:5c:
                    53:64:78:30:01:2b:b6:39:42:70:f7:42:3e:5b:f3:
                    4f:05:1f:ac:f7:61:c0:73:8d:1f:e6:af:50:11:f7:
                    5b:0e:ed:8a:5e:34:33:e3:9d:b4:f6:1e:f2:4a:57:
                    39:5a:52:55:81:7e:7b:7e:92:92:60:a5:e1:42:cc:
                    b7:73:32:7a:c1:2b:bd:98:cd:07:38:bb:4a:b8:7d:
                    1e:71:c6:ce:c0:92:b6:66:27:67:2b:84:0b:39:0b:
                    1b:f5:5e:50:08:68:c2:fa:40:19:eb:ce:2a:6c:6b:
                    9a:b7:55:6b:b7:2f:e7:e3:a7:17:b9:0a:9d:e4:ba:
                    bb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8B:26:C4:94:0A:91:CC:AE:34:F5:5E:DB:70:99:AE:72:A8:F4:31
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:ec:ef:5a:18:96:c1:28:2b:87:a8:c1:d4:6b:11:f6:04:48:
         f8:dc:5a:33:14:5e:d8:ac:6d:59:26:a5:ce:0c:66:67:2d:57:
         59:19:6f:78:a3:2f:c8:30:92:0f:06:5d:14:75:d8:96:2d:fe:
         35:20:3a:a3:dd:14:0a:44:a2:4f:c8:7c:b0:0a:a8:1b:60:00:
         f1:f6:a4:4a:41:3a:0f:07:8c:d5:76:bf:45:67:8f:13:fa:f9:
         49:91:a3:91:a2:0d:38:af:23:5c:ec:d6:1e:32:a2:f9:c6:8e:
         5d:db:55:9c:96:4f:60:56:f5:25:b3:d1:ac:9c:44:72:32:40:
         c1:8b:99:51:a1:1d:72:82:f2:d0:ee:0a:e7:7a:d6:92:98:27:
         cd:4c:2f:3f:cb:e2:65:c7:f4:ab:f2:e6:f8:b2:9a:a6:96:a1:
         a2:32:c3:b6:ad:7c:14:ad:bb:ac:3b:6f:b6:6d:37:30:ae:7b:
         b0:d9:c4:c1:5d:85:e9:a7:5e:5b:cb:c9:19:c0:3a:62:65:57:
         08:1a:08:4c:42:ab:10:cc:3e:97:03:f6:08:8e:67:a3:b3:68:
         e1:a2:21:50:df:37:c9:9c:3d:13:2a:b7:15:e1:6e:03:19:51:
         a5:90:83:4e:00:cb:ec:c6:b0:b0:83:0b:45:14:33:4c:fc:c0:
         64:8d:f7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org