Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/3139322e3233312e3137352e302f32342d3332203d3e20323731323937.roa
File:                     3139322e3233312e3137352e302f32342d3332203d3e20323731323937.roa (raw, json)
Hash identifier:          OATPWmC0zqHPps2sjsgiCIAR1Dt0ED73SWpRgYaXxlY=
Subject key identifier:   27:D2:8B:8B:F6:0A:5B:97:DA:35:F1:8D:11:0E:0B:37:16:A0:3E:84
Certificate issuer:       /CN=8B9C935129900CA013B11B72F2C6AC009B33E99E
Certificate serial:       6344204425EA39E7B45461AA2AF56874E3CD16B9
Authority key identifier: 8B:9C:93:51:29:90:0C:A0:13:B1:1B:72:F2:C6:AC:00:9B:33:E9:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B9C935129900CA013B11B72F2C6AC009B33E99E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/3139322e3233312e3137352e302f32342d3332203d3e20323731323937.roa
Signing time:             Tue 21 Nov 2023 22:00:59 +0000
ROA not before:           Tue 21 Nov 2023 21:55:59 +0000
ROA not after:            Tue 19 Nov 2024 22:00:59 +0000
asID:                     271297
IP address blocks:        192.231.175.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:44:20:44:25:ea:39:e7:b4:54:61:aa:2a:f5:68:74:e3:cd:16:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B9C935129900CA013B11B72F2C6AC009B33E99E
        Validity
            Not Before: Nov 21 21:55:59 2023 GMT
            Not After : Nov 19 22:00:59 2024 GMT
        Subject: CN=27D28B8BF60A5B97DA35F18D110E0B3716A03E84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:ca:57:f0:e1:ce:26:0a:77:25:7d:e0:fa:
                    b4:49:e3:18:c5:d4:de:54:e3:d5:08:50:77:86:77:
                    27:58:70:e5:0a:91:3f:c1:b4:b8:61:7e:30:96:a8:
                    ab:3b:89:8c:aa:5e:c9:dc:ae:73:72:e1:85:d5:2f:
                    81:30:2c:b2:e7:c0:ac:c9:93:a8:c5:b4:6e:a5:d1:
                    6e:8e:56:dc:ae:50:cb:e9:fa:15:52:67:42:78:d2:
                    f5:c2:f8:8c:4e:15:57:66:d1:16:10:fc:8d:88:ad:
                    74:25:b2:d5:af:3b:92:90:e6:ef:49:56:04:9e:bd:
                    c1:e7:5c:57:1c:f2:67:6a:fe:71:56:43:de:37:b8:
                    95:e3:ed:b0:64:91:0c:b3:e6:b3:78:fd:bc:9d:23:
                    27:b0:9c:6f:99:54:ae:92:95:9d:d8:6d:ab:90:fb:
                    98:45:9f:d3:ab:78:71:29:33:16:9d:dd:a2:af:80:
                    6f:c1:69:23:f9:44:22:f8:db:b5:ca:c9:04:82:a2:
                    2f:45:1a:cd:f1:33:9e:f7:7f:c4:1f:fd:7f:f6:16:
                    58:ea:d0:f0:73:ac:b0:1d:70:45:e9:c7:bc:e0:7e:
                    3b:e5:9e:5e:a2:62:eb:e5:15:50:77:dc:14:46:e9:
                    a8:2a:77:71:9a:a4:14:6f:2d:e5:60:f7:12:e5:db:
                    55:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D2:8B:8B:F6:0A:5B:97:DA:35:F1:8D:11:0E:0B:37:16:A0:3E:84
            X509v3 Authority Key Identifier:
                keyid:8B:9C:93:51:29:90:0C:A0:13:B1:1B:72:F2:C6:AC:00:9B:33:E9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/8B9C935129900CA013B11B72F2C6AC009B33E99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B9C935129900CA013B11B72F2C6AC009B33E99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/3139322e3233312e3137352e302f32342d3332203d3e20323731323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:dd:11:17:c0:69:ed:47:50:88:17:6f:0d:73:4e:04:74:15:
         0c:e9:ec:60:2e:2e:f5:1f:d9:e3:71:be:b3:e1:f7:a7:e2:38:
         bc:c6:35:77:b6:09:4a:6b:ea:9e:3d:2a:89:6d:bc:19:0a:62:
         ba:0f:a6:5a:67:4d:f0:ac:96:fd:64:45:a3:eb:4e:a3:52:f3:
         11:53:de:21:f3:37:fd:df:71:76:63:71:1a:4d:d5:13:a8:1c:
         c3:80:de:84:4b:14:8a:5d:d6:fe:c6:10:43:ca:90:cf:f9:4c:
         03:40:ad:0f:82:38:eb:a2:f9:1a:00:8f:a7:c8:84:9b:dd:33:
         c9:ed:b9:17:8c:d8:43:fa:1b:ac:64:42:28:b3:d6:21:8e:98:
         16:b4:fa:72:7f:73:a2:8d:ad:6e:57:16:2f:82:26:8d:87:f1:
         3d:88:01:b3:d6:31:5c:7d:13:7e:58:e0:c1:43:3c:3a:8d:a4:
         ca:c7:9a:16:41:63:4a:fe:62:91:59:a2:01:95:86:9d:a1:6d:
         fc:e3:56:80:68:3d:99:4b:b8:89:59:b7:2d:d1:30:08:a7:43:
         b7:74:83:dc:78:9a:4d:c5:84:4e:49:ad:ff:bc:49:70:7a:72:
         24:e8:de:c2:ad:1d:d0:bf:0c:bf:f7:87:50:85:68:73:25:a6:
         16:4d:8f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:37 2025 by rpki-client