Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa
File:                     3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          objQXfFV4WtRMPL1C2Mz+igz4eMnQOhkN9GdEGhGeug=
Subject key identifier:   F9:B5:BD:A2:E6:36:C8:2A:2F:AC:39:E4:CB:AA:BB:6E:99:7E:FB:0F
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       146D952BCC81F34738DAAEFE12DE57A8A1427BA3
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa
Signing time:             Mon 14 Oct 2024 01:49:51 +0000
ROA not before:           Mon 14 Oct 2024 01:44:51 +0000
ROA not after:            Mon 13 Oct 2025 01:49:51 +0000
asID:                     271724
IP address blocks:        179.191.128.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6d:95:2b:cc:81:f3:47:38:da:ae:fe:12:de:57:a8:a1:42:7b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:51 2024 GMT
            Not After : Oct 13 01:49:51 2025 GMT
        Subject: CN=F9B5BDA2E636C82A2FAC39E4CBAABB6E997EFB0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:09:c2:b7:fd:c2:77:b5:ae:c9:be:cd:59:
                    26:e9:40:ce:56:54:02:11:55:19:a2:1e:d3:10:17:
                    d4:dc:de:ff:09:78:7a:23:c6:52:87:df:ea:cb:bc:
                    68:a8:95:68:9c:81:06:51:cf:cf:0d:3d:5e:8b:5e:
                    3f:68:2b:54:4b:ee:e6:a4:73:64:54:e8:fa:85:c0:
                    bc:9c:f9:8d:06:f1:c6:71:28:b5:c0:87:ba:de:13:
                    f4:91:14:cc:fb:a0:82:a0:07:d1:df:ca:92:92:9a:
                    0b:09:33:80:52:1d:3e:19:1d:eb:08:db:c7:b1:9d:
                    9b:9a:d9:68:db:5e:8e:3a:44:5b:7f:28:2d:30:02:
                    28:0c:74:87:8a:76:a4:9c:96:86:1f:21:cc:a1:85:
                    b1:62:81:38:b0:8f:25:a4:b5:07:5e:e1:c0:65:76:
                    2d:c0:d9:50:a2:6a:37:aa:d0:db:55:8c:66:ea:07:
                    ed:d6:8e:84:06:79:a0:88:be:d0:b9:19:87:48:04:
                    e3:37:1d:1e:7b:45:ed:e1:f9:05:68:db:33:f1:30:
                    21:c9:b0:7b:a7:f7:d8:cd:a4:4d:b3:b2:0e:96:9b:
                    61:ec:9c:31:99:1f:8b:31:96:28:83:58:93:5d:d1:
                    37:ef:0c:59:1f:c7:1e:a9:61:1e:0a:0e:a7:e6:13:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B5:BD:A2:E6:36:C8:2A:2F:AC:39:E4:CB:AA:BB:6E:99:7E:FB:0F
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:fb:02:45:26:ee:d0:4c:c8:67:a2:21:37:43:94:b8:f9:99:
         db:db:d8:29:86:a7:6e:68:b8:30:e2:11:35:38:a7:c2:01:97:
         6a:ca:dd:c2:2d:9f:61:89:48:ec:1d:25:4c:2a:c0:6e:32:c9:
         ff:47:92:18:9e:d7:03:f3:07:66:a5:58:43:8e:10:d8:ec:6d:
         86:87:cb:ca:04:8f:17:4c:db:bc:84:2f:18:de:2b:c3:46:7a:
         88:05:5e:de:6f:b1:d6:3a:38:53:cd:f9:d0:ee:8f:76:2a:5b:
         c6:e9:ff:cc:c5:4b:6f:07:c0:98:32:2d:91:56:83:a1:c5:5a:
         1a:42:b0:e9:d2:8d:14:85:81:ba:4f:bb:cd:29:5a:ed:c0:76:
         c7:d8:5b:d9:ce:7e:b8:4c:37:91:f8:54:32:71:0e:08:ad:b6:
         ab:71:c2:07:a8:17:7c:6e:a6:88:16:0c:40:28:5e:c2:f6:3e:
         75:69:dd:3c:5c:fd:e9:4c:a1:b7:d7:eb:c9:1e:50:76:fd:ae:
         a3:9c:e3:e7:3d:4e:e1:b4:0f:f2:25:cb:f0:38:21:f0:d9:c4:
         ca:d9:29:d0:87:69:38:55:ad:0e:3e:47:a2:f2:60:97:8a:18:
         18:1a:7f:90:b8:75:c4:27:b1:79:f1:57:b2:d8:2d:07:a8:08:
         86:44:9d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:14:39 2025 by rpki-client