Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3137302e37392e3234322e302f32342d3234203d3e203631353739.roa
File:                     3137302e37392e3234322e302f32342d3234203d3e203631353739.roa (raw, json)
Hash identifier:          H/P+15ZRpbyi5wAT76QjPRalStA2KnRTz8QhqnUPSBc=
Subject key identifier:   47:33:18:9A:3D:52:F2:0E:53:A9:2A:36:B5:15:32:2F:6C:42:49:91
Certificate issuer:       /CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
Certificate serial:       2B1E1F4BA14EA842371EFC4A548A0169D957E05E
Authority key identifier: A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3137302e37392e3234322e302f32342d3234203d3e203631353739.roa
Signing time:             Tue 06 Feb 2024 12:01:39 +0000
ROA not before:           Tue 06 Feb 2024 11:56:39 +0000
ROA not after:            Tue 04 Feb 2025 12:01:39 +0000
asID:                     61579
IP address blocks:        170.79.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1e:1f:4b:a1:4e:a8:42:37:1e:fc:4a:54:8a:01:69:d9:57:e0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
        Validity
            Not Before: Feb  6 11:56:39 2024 GMT
            Not After : Feb  4 12:01:39 2025 GMT
        Subject: CN=4733189A3D52F20E53A92A36B515322F6C424991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:0e:ce:7a:87:ff:b3:00:aa:60:65:79:60:
                    ac:2e:85:df:d3:a6:cb:94:21:78:89:f4:71:2a:6d:
                    81:49:05:b4:41:74:be:21:92:77:2f:f6:30:64:aa:
                    6d:70:9b:a4:fa:c4:60:f4:fb:50:66:4b:11:16:80:
                    08:a5:79:a7:46:aa:f8:c5:76:0b:5b:03:f7:17:1e:
                    cb:68:ec:a3:13:97:f3:c8:dd:45:da:a6:ba:b3:9e:
                    81:01:ad:ab:c1:31:05:2e:94:1e:a0:f3:41:da:30:
                    38:33:10:27:d9:7d:b4:1e:a7:f4:1b:37:5e:15:95:
                    31:dc:48:88:49:2c:8a:74:4b:73:b5:02:38:e9:5c:
                    c5:a8:90:c9:70:3f:36:a7:5c:a9:82:87:3b:9b:4a:
                    69:fe:ab:3e:ec:0b:ec:a2:f0:dd:34:a8:cc:ac:d3:
                    01:0d:f1:17:8b:e6:2c:85:a5:92:1a:bd:e4:e6:93:
                    8a:ae:c1:99:25:61:e9:69:9f:78:2d:7a:fc:4b:57:
                    8d:03:51:b0:79:e1:fc:5a:de:9b:59:92:7a:a1:1a:
                    a1:a6:a7:e0:82:ad:33:d4:62:2f:3a:37:b4:9b:80:
                    b3:db:6e:4a:9c:f0:a2:e8:51:64:2b:f5:58:ec:bb:
                    f0:17:2f:e5:c9:12:12:22:ef:bf:b8:ef:4d:96:74:
                    ab:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:33:18:9A:3D:52:F2:0E:53:A9:2A:36:B5:15:32:2F:6C:42:49:91
            X509v3 Authority Key Identifier:
                keyid:A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3137302e37392e3234322e302f32342d3234203d3e203631353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ca:55:f2:b7:3c:16:4d:d8:76:51:22:4d:da:bb:c1:19:bf:
         c4:3b:4f:a0:3a:86:7e:83:12:a7:3c:9d:7e:39:3e:e4:53:c2:
         25:d3:0e:bc:50:2f:89:bb:dc:0b:c9:a9:83:6e:fd:83:2b:05:
         40:3e:a2:f7:be:b7:f8:22:cc:5e:b8:cd:f1:a5:a4:b8:a2:fb:
         51:63:61:3d:43:8d:51:75:5f:d6:f2:da:cd:7e:88:99:64:ce:
         f7:3b:3e:3c:bb:3c:fd:86:09:c2:d7:dc:c5:1f:fe:37:69:48:
         8b:fe:37:d0:96:7b:ab:2e:65:48:ce:a1:46:11:b5:d5:b3:78:
         e1:60:e5:99:97:21:39:14:f0:89:95:53:91:45:d2:53:db:51:
         cf:34:aa:2d:ac:23:06:4c:d2:e6:91:33:06:d4:ba:dd:72:47:
         31:14:8e:31:84:7f:9f:64:58:9e:b9:b9:ba:48:2b:5b:5d:ce:
         7e:a6:2f:c3:cf:02:5b:63:ed:14:8d:ff:fa:30:1c:85:92:85:
         6d:e8:05:27:f2:04:db:2c:59:6f:17:cf:a8:1e:25:dd:a4:f8:
         22:0c:56:de:1b:bb:05:5f:7a:b7:18:8d:ce:b4:1e:36:87:9b:
         de:f1:7f:97:e7:33:d8:a8:d2:ae:82:19:6b:1f:16:81:ef:0c:
         02:ac:5d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:20:54 2025 by rpki-client