Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/3137392e3130392e3130372e302f32342d3234203d3e20323730373339.roa
File:                     3137392e3130392e3130372e302f32342d3234203d3e20323730373339.roa (raw, json)
Hash identifier:          hgZPFwO3EvsqxMHmG5Ykyu+3lWbimAahs0mS4J7I0Rw=
Subject key identifier:   BF:5B:8B:F5:47:0D:70:D5:AC:88:6A:7A:35:9F:0B:9B:7A:09:3D:F8
Certificate issuer:       /CN=FD7602BF76AA1AACD393FB899DDC6086459522CE
Certificate serial:       D10DD4F655A7ED698F35A5973DEEACCCEDF16C
Authority key identifier: FD:76:02:BF:76:AA:1A:AC:D3:93:FB:89:9D:DC:60:86:45:95:22:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD7602BF76AA1AACD393FB899DDC6086459522CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/3137392e3130392e3130372e302f32342d3234203d3e20323730373339.roa
Signing time:             Tue 02 Jan 2024 13:55:41 +0000
ROA not before:           Tue 02 Jan 2024 13:50:41 +0000
ROA not after:            Tue 31 Dec 2024 13:55:41 +0000
asID:                     270739
IP address blocks:        179.109.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d1:0d:d4:f6:55:a7:ed:69:8f:35:a5:97:3d:ee:ac:cc:ed:f1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD7602BF76AA1AACD393FB899DDC6086459522CE
        Validity
            Not Before: Jan  2 13:50:41 2024 GMT
            Not After : Dec 31 13:55:41 2024 GMT
        Subject: CN=BF5B8BF5470D70D5AC886A7A359F0B9B7A093DF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c0:3a:98:a0:76:42:e5:41:25:d7:ae:17:9d:
                    2d:c0:f4:ed:90:b7:2a:a9:f6:54:37:1b:f6:bf:2d:
                    2a:22:53:78:68:52:11:ae:06:b8:53:2c:3e:38:0e:
                    17:56:f1:3a:a4:2f:95:7d:6e:79:4e:4e:02:20:e4:
                    d4:1e:dc:38:b3:85:ef:29:c1:2a:70:a5:fa:9b:00:
                    f6:64:ee:01:2c:2b:43:3a:7e:78:f4:f9:cc:9d:5f:
                    90:94:dd:15:43:0f:c0:78:f5:8b:3e:ce:83:12:1c:
                    60:02:ad:83:d5:26:79:0c:67:62:b9:83:02:cb:5e:
                    33:17:b7:4d:51:1a:52:e8:c5:e7:91:13:62:4b:29:
                    e8:bb:93:2d:64:d8:c6:49:fb:29:ff:26:24:f0:5c:
                    e9:18:8b:ee:cd:9e:49:66:7a:44:cc:95:c9:e8:12:
                    2d:35:e1:b5:b0:79:48:a5:a3:b6:a4:54:c2:ec:0e:
                    2f:34:3e:0d:70:2a:26:16:6d:08:99:cd:aa:c9:78:
                    8f:45:19:c3:c1:8c:c8:59:d9:74:81:8f:a9:88:18:
                    d8:3c:ed:4a:b2:42:4a:fd:eb:fe:f4:85:7f:2a:01:
                    c5:93:0b:05:99:80:0a:ba:88:25:eb:6b:f7:66:3f:
                    cd:17:5a:96:fc:7a:97:b5:1d:a2:d6:0f:b8:51:5d:
                    00:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5B:8B:F5:47:0D:70:D5:AC:88:6A:7A:35:9F:0B:9B:7A:09:3D:F8
            X509v3 Authority Key Identifier:
                keyid:FD:76:02:BF:76:AA:1A:AC:D3:93:FB:89:9D:DC:60:86:45:95:22:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/FD7602BF76AA1AACD393FB899DDC6086459522CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD7602BF76AA1AACD393FB899DDC6086459522CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/3137392e3130392e3130372e302f32342d3234203d3e20323730373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:ae:5c:71:6f:4c:d6:a2:4e:92:d0:90:47:21:55:ac:3f:b3:
         96:e1:0e:b0:39:25:43:e3:4a:ad:fa:4d:36:84:02:72:b9:bc:
         9d:7b:f6:04:cc:9c:26:b8:83:44:16:b9:17:8b:38:7f:eb:be:
         a6:1c:f8:44:f2:9d:bf:26:73:ad:78:15:6d:44:f2:4a:cc:1b:
         56:37:96:45:db:55:86:3c:5e:a8:2a:4a:44:78:a5:d0:32:44:
         59:a4:08:77:db:71:d2:b9:c7:6c:6d:2e:a4:fd:2f:14:52:91:
         f8:f7:4b:7f:b3:f7:07:6d:16:e9:5d:c0:77:3a:fd:52:f0:78:
         43:60:d0:1b:68:4b:5d:2b:7e:dd:6c:95:a9:35:6d:9d:15:b4:
         55:de:a9:96:a6:70:fb:78:39:de:bc:3f:63:55:56:9e:bd:a2:
         60:32:9a:43:69:59:2e:98:ba:3b:7f:32:49:8a:de:69:e4:4e:
         5b:0f:de:2f:05:04:b9:2d:1e:56:0d:19:99:b9:c2:eb:0a:17:
         19:5b:ba:db:5f:dc:57:3b:7e:85:c0:58:e1:94:da:10:7c:2f:
         79:57:0e:d1:29:10:93:f4:25:bf:86:3f:5c:dc:60:0b:4c:15:
         81:a9:c5:5a:7f:98:e7:17:30:2d:7c:ec:88:4d:d1:26:4c:14:
         58:a4:40:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:19 2025 by rpki-client