Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3137372e3132382e3137342e302f32342d3234203d3e20323731343239.roa
File:                     3137372e3132382e3137342e302f32342d3234203d3e20323731343239.roa (raw, json)
Hash identifier:          BuOT6hndipkOg/hhHBjf53lE1qKLBRWg629eg0wgOuc=
Subject key identifier:   8E:00:9F:C5:A2:A5:40:B3:A1:E4:85:31:96:99:3F:B6:56:82:45:BB
Certificate issuer:       /CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
Certificate serial:       34FE4BBCAE5A4D65A7687D329D8C41D67809EE45
Authority key identifier: FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3137372e3132382e3137342e302f32342d3234203d3e20323731343239.roa
Signing time:             Mon 08 Jul 2024 12:41:39 +0000
ROA not before:           Mon 08 Jul 2024 12:36:39 +0000
ROA not after:            Mon 07 Jul 2025 12:41:39 +0000
asID:                     271429
IP address blocks:        177.128.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fe:4b:bc:ae:5a:4d:65:a7:68:7d:32:9d:8c:41:d6:78:09:ee:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
        Validity
            Not Before: Jul  8 12:36:39 2024 GMT
            Not After : Jul  7 12:41:39 2025 GMT
        Subject: CN=8E009FC5A2A540B3A1E4853196993FB6568245BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:40:cc:00:2e:2d:e3:a7:e9:ad:47:21:9d:52:
                    e9:f8:05:45:e5:93:b8:ae:2c:64:cd:04:51:a2:06:
                    c3:7f:bf:f7:a2:19:6e:a5:b2:b5:51:c5:8f:29:f3:
                    ad:2c:42:2f:98:4e:92:83:80:a5:00:97:d2:a2:77:
                    47:32:9c:67:86:e3:15:eb:2a:e2:09:37:fc:79:86:
                    fe:1d:ea:d2:ea:eb:26:95:5b:fe:c9:99:c8:aa:c0:
                    21:2d:65:4c:3d:0b:a1:b5:f7:ef:9f:2b:56:a5:db:
                    8b:35:cb:05:b8:f4:d2:cf:ff:2c:63:06:c8:c0:d5:
                    1b:c4:b1:92:79:b3:73:7d:eb:0b:48:bc:97:de:1a:
                    c6:cb:73:01:80:e7:99:e8:d4:08:78:b1:7f:57:8c:
                    8b:1b:06:25:3c:cb:3c:a2:0d:5c:9d:4c:a7:97:93:
                    65:6d:3f:56:c3:fd:ac:4c:1b:ef:c9:95:b1:37:6f:
                    72:cb:97:ab:24:8d:a7:b2:40:cb:2a:37:b1:ea:31:
                    29:fc:cf:2b:9d:99:e7:f3:cb:d3:0c:3f:14:36:47:
                    c1:c6:6a:1b:16:7a:e0:58:e3:1c:70:b5:29:61:79:
                    9d:b0:0f:31:09:65:a3:73:4c:47:06:15:f2:e4:21:
                    db:f0:07:61:8d:7e:29:2d:31:09:bf:2b:7e:50:fc:
                    e8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:00:9F:C5:A2:A5:40:B3:A1:E4:85:31:96:99:3F:B6:56:82:45:BB
            X509v3 Authority Key Identifier:
                keyid:FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3137372e3132382e3137342e302f32342d3234203d3e20323731343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:84:93:b1:2a:e6:f9:b4:39:c0:02:c9:51:db:31:fc:8d:9c:
         73:e6:55:1b:b2:40:3d:b7:d0:31:12:f0:98:9e:f1:9c:6f:e2:
         7e:9e:01:12:d2:45:c3:c1:d8:2c:9d:36:18:db:84:d8:83:a3:
         84:cc:60:6e:7e:3d:11:3a:59:2d:40:5a:ca:be:6b:4d:fd:98:
         ec:b8:2a:38:bf:4d:fe:fb:f6:28:4a:f6:2f:3a:dc:88:04:05:
         8d:80:a3:5a:61:73:08:b4:59:a3:e4:cb:00:d7:d7:b6:63:42:
         a4:a4:35:17:b4:54:b4:fa:a0:6c:e9:5b:f9:1c:a6:62:fd:f5:
         f4:d9:19:c3:b5:6a:f5:9c:2f:cb:e8:82:a3:ef:c6:32:11:e9:
         8a:4a:60:1b:80:39:5a:68:ab:87:36:f6:41:7b:9a:9e:d3:a5:
         a4:84:a1:66:95:1a:3f:fb:2c:85:f9:1b:01:1f:93:2b:4e:ea:
         cf:47:12:6f:5a:41:4a:66:ba:c8:ee:b1:e6:08:60:c1:f1:27:
         e3:bc:97:34:81:e1:77:06:a8:d4:aa:3b:be:67:1d:f3:50:fe:
         ce:b7:6c:03:48:9f:4b:3c:88:7b:b5:18:69:e3:3a:99:45:bf:
         bd:c5:8b:59:0e:a0:ad:24:69:da:fa:b1:49:07:cd:46:06:91:
         52:8a:e8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:06:00 2025 by rpki-client