Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3137302e37392e3234332e302f32342d3234203d3e203631353739.roa
File:                     3137302e37392e3234332e302f32342d3234203d3e203631353739.roa (raw, json)
Hash identifier:          2DrnclzBjLk2nJ926Hxsx7vUfszL8PbddNoBO9m9X6g=
Subject key identifier:   62:4C:D1:51:B8:48:A1:34:72:80:9C:DA:E3:A4:FD:50:9C:C8:83:2D
Certificate issuer:       /CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
Certificate serial:       09782884BAEF54507F59923B80A2BD57AE63A76C
Authority key identifier: A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3137302e37392e3234332e302f32342d3234203d3e203631353739.roa
Signing time:             Tue 06 Feb 2024 12:01:38 +0000
ROA not before:           Tue 06 Feb 2024 11:56:38 +0000
ROA not after:            Tue 04 Feb 2025 12:01:38 +0000
asID:                     61579
IP address blocks:        170.79.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:78:28:84:ba:ef:54:50:7f:59:92:3b:80:a2:bd:57:ae:63:a7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
        Validity
            Not Before: Feb  6 11:56:38 2024 GMT
            Not After : Feb  4 12:01:38 2025 GMT
        Subject: CN=624CD151B848A13472809CDAE3A4FD509CC8832D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9b:4d:1e:b1:d2:f4:04:72:98:51:81:f4:0d:
                    55:aa:6f:f9:90:a5:00:78:4f:16:13:d1:bb:fa:2b:
                    6f:05:dd:df:a5:7b:7c:fe:43:4d:58:64:05:c5:0e:
                    47:37:a2:a1:e3:6f:d5:f7:f5:9a:8e:1e:5d:58:f6:
                    f9:1f:5b:d5:15:42:ed:76:6b:b2:5b:4b:12:d6:85:
                    7a:4d:50:e8:c8:b9:c2:be:87:f1:94:c5:1b:87:28:
                    a3:65:23:da:be:29:0b:e3:a3:50:00:ae:33:cd:ee:
                    29:c2:77:6f:42:e0:24:f6:58:7b:bc:0e:cf:8e:d4:
                    df:08:fb:90:99:6e:e2:16:7c:db:74:e6:9b:52:06:
                    09:37:50:a0:e4:95:cc:b6:1e:56:4f:65:0e:b8:6b:
                    de:f1:fc:0c:1d:ff:af:3f:01:55:77:e7:de:a2:e9:
                    f1:85:20:4b:2f:30:ac:ca:25:e9:bf:f4:63:54:ff:
                    c6:3e:98:c0:6e:b5:86:f4:be:9a:47:ec:a2:9b:01:
                    38:a2:60:f1:ec:69:1f:cd:7b:97:46:4f:a3:ca:32:
                    ca:24:e7:ab:59:51:47:0d:73:e6:a6:07:c0:8f:ca:
                    48:fa:a8:27:4e:62:f0:ff:8d:55:5c:d2:0c:ba:a9:
                    62:03:90:95:2e:5b:d5:37:9d:81:85:39:f7:29:e4:
                    31:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4C:D1:51:B8:48:A1:34:72:80:9C:DA:E3:A4:FD:50:9C:C8:83:2D
            X509v3 Authority Key Identifier:
                keyid:A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3137302e37392e3234332e302f32342d3234203d3e203631353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:bb:01:d1:ce:e4:6d:6e:c0:83:2e:e6:a9:d9:9c:47:40:ba:
         df:c0:a5:1b:c2:69:5b:d6:82:02:1b:e9:fb:e4:53:8a:4a:f5:
         b4:d2:32:12:3e:0b:42:03:a6:e4:88:14:33:09:30:90:af:d0:
         e6:1b:ca:34:20:fa:4b:07:77:9a:e5:c1:92:01:24:6c:10:a2:
         b0:4f:40:33:3f:12:ca:e3:93:7c:43:59:12:ff:b5:9d:f0:53:
         cf:b8:cc:f6:da:c5:5a:c1:46:ac:b4:8f:ff:c3:54:59:c2:86:
         50:75:8d:f4:64:17:f8:2d:1e:3d:a4:0e:1e:70:8c:c0:91:ea:
         5b:a7:dc:f9:c9:54:a9:2e:72:06:ac:3d:a6:ae:1c:fc:31:a7:
         28:e0:13:c0:d8:6c:43:27:01:f6:cd:e2:a1:45:4f:16:76:ee:
         37:b6:49:6e:ce:9a:99:b3:81:09:2d:4c:24:1a:3d:8d:68:e1:
         45:c2:e5:1d:31:27:ec:f2:2d:24:dc:24:2b:54:d3:6e:b4:5a:
         86:f4:46:e2:77:66:d1:20:dc:63:e4:d0:9f:1b:0d:e7:f3:4d:
         7a:c2:39:fa:02:65:31:ac:a6:1b:d1:c8:a1:29:25:ff:a1:92:
         8f:bf:3a:53:33:d8:ad:80:29:00:bd:84:6b:8c:99:c0:af:ce:
         a4:13:e5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:29:19 2025 by rpki-client