Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3234203d3e203532363031.roa
File:                     3137302e38332e3130302e302f32322d3234203d3e203532363031.roa (raw, json)
Hash identifier:          mjNFNMImMudqohoLeQSUp1SblTeGIMzfEFV/XL8bHtw=
Subject key identifier:   8E:E7:88:E1:56:EA:5F:59:F5:AD:DB:61:7B:C8:A5:FF:56:C3:0D:F5
Certificate issuer:       /CN=96F3E99149446CE908CDA1678FD9180CD4020D16
Certificate serial:       10DACB6F4872E7FFC83F1EF916EBFB8C27A5C424
Authority key identifier: 96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3234203d3e203532363031.roa
Signing time:             Tue 03 Dec 2024 18:43:15 +0000
ROA not before:           Tue 03 Dec 2024 18:38:15 +0000
ROA not after:            Tue 02 Dec 2025 18:43:15 +0000
asID:                     52601
IP address blocks:        170.83.100.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:da:cb:6f:48:72:e7:ff:c8:3f:1e:f9:16:eb:fb:8c:27:a5:c4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F3E99149446CE908CDA1678FD9180CD4020D16
        Validity
            Not Before: Dec  3 18:38:15 2024 GMT
            Not After : Dec  2 18:43:15 2025 GMT
        Subject: CN=8EE788E156EA5F59F5ADDB617BC8A5FF56C30DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:13:20:05:53:d4:af:19:56:c6:0f:7d:98:
                    c9:f3:31:b3:11:91:89:31:63:bb:e7:44:92:19:2f:
                    26:f8:ee:44:44:21:5a:5e:18:d6:60:1a:b3:77:8d:
                    76:7f:8e:35:65:5e:8e:d6:58:33:59:c8:df:ca:93:
                    b3:02:68:9d:d4:5b:d9:cd:05:a8:80:9c:27:8d:b4:
                    b3:40:95:c6:39:9b:61:24:2a:9d:1b:06:12:23:2b:
                    3f:41:56:55:06:22:be:0d:76:4e:3c:e1:ca:a1:27:
                    7c:68:4b:19:b2:e1:fb:64:0d:d5:33:c3:e1:1d:a6:
                    ca:e8:f1:1e:c1:7e:0c:d5:d1:bb:4c:33:59:09:46:
                    79:98:b8:33:aa:01:1b:3a:31:3c:25:5a:bd:33:56:
                    37:d5:9e:e4:05:4a:94:ef:90:a1:0f:14:47:be:23:
                    1b:be:f1:2e:2d:46:c7:73:d4:07:45:e6:ed:46:2e:
                    4d:c3:38:16:2a:97:3b:e7:4d:bd:a2:27:98:4d:2c:
                    a7:22:b0:c6:bb:43:9f:20:2d:00:17:c8:03:37:6f:
                    26:3e:cb:40:1f:75:95:c5:11:0d:7a:0a:79:83:e1:
                    f9:91:aa:0b:44:a4:e0:a5:c2:b8:89:fe:8c:13:db:
                    04:a5:14:63:9f:80:02:87:5b:f2:97:8b:ae:05:62:
                    c6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E7:88:E1:56:EA:5F:59:F5:AD:DB:61:7B:C8:A5:FF:56:C3:0D:F5
            X509v3 Authority Key Identifier:
                keyid:96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/96F3E99149446CE908CDA1678FD9180CD4020D16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3234203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:40:68:fd:24:35:32:36:a1:f2:2d:61:80:a8:75:43:a3:fc:
         8a:dd:5e:1f:c7:a2:e1:b0:93:ad:8c:5e:68:1c:ee:81:8a:53:
         10:68:a4:73:16:3d:f7:70:10:89:e6:fc:2b:f1:2f:48:52:35:
         5a:ca:d7:98:e6:0e:8e:37:da:71:f4:6c:65:1c:3b:9e:53:fe:
         a3:8e:a3:1c:1d:6c:a1:3b:b0:b8:2b:a2:00:4c:b6:2d:b5:60:
         70:3c:64:8c:cd:12:a0:36:aa:bc:be:87:f5:ba:bf:ba:fc:e6:
         fb:e2:ae:41:74:b4:23:bf:b3:68:19:36:e9:ec:33:ac:ca:8d:
         d3:e6:9b:43:82:91:2d:57:59:02:ce:bb:91:f0:fd:36:95:4d:
         ea:a1:58:4d:1c:ed:77:c2:74:db:fd:33:ff:73:7d:db:3e:46:
         df:90:7d:b2:35:72:08:36:61:6e:01:49:ce:a2:ba:44:7f:dd:
         2d:24:3e:fa:88:90:d6:b9:ca:d2:bb:e3:08:26:c9:62:b0:8d:
         cf:16:08:a6:1f:99:6f:64:55:df:d8:0b:a5:4d:2d:14:5a:56:
         f4:ee:25:18:98:0a:15:88:b0:19:c4:33:c8:a0:87:f8:40:f9:
         5e:f0:53:0e:af:ad:8a:2c:d3:01:e8:6a:f6:53:62:c5:e9:d8:
         08:17:82:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:24:44 2025 by rpki-client