Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3137392e39362e3137362e302f32312d3332203d3e2033333536.roa
File:                     3137392e39362e3137362e302f32312d3332203d3e2033333536.roa (raw, json)
Hash identifier:          HkSPDVxkkc6He/24nR8dJI5NZYQlA3TO0Jp6X4x1vuU=
Subject key identifier:   2E:C3:1A:49:8E:73:02:ED:D6:9F:4B:F6:00:F8:E3:1E:E0:13:99:4D
Certificate issuer:       /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial:       65E52413AEB2D26A099AECDF8D8A90E38460BC67
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3137392e39362e3137362e302f32312d3332203d3e2033333536.roa
Signing time:             Thu 23 Nov 2023 17:10:15 +0000
ROA not before:           Thu 23 Nov 2023 17:05:15 +0000
ROA not after:            Thu 21 Nov 2024 17:10:15 +0000
asID:                     3356
IP address blocks:        179.96.176.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e5:24:13:ae:b2:d2:6a:09:9a:ec:df:8d:8a:90:e3:84:60:bc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
        Validity
            Not Before: Nov 23 17:05:15 2023 GMT
            Not After : Nov 21 17:10:15 2024 GMT
        Subject: CN=2EC31A498E7302EDD69F4BF600F8E31EE013994D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ff:66:e0:36:bd:d5:e3:6a:51:06:a7:c4:7a:
                    19:03:25:67:87:d6:f9:2d:d0:da:d3:88:bb:3c:2d:
                    2a:b5:e6:ca:45:8d:95:0a:61:7e:78:4e:9a:a7:79:
                    df:4d:d4:8d:8d:67:6a:37:88:d1:39:a7:53:3f:91:
                    f2:f5:fb:bb:14:d3:47:6d:fd:b0:b9:6c:06:1a:55:
                    99:41:e3:ef:cd:d9:52:81:7f:e5:5b:5f:cb:87:a4:
                    da:a9:f8:d5:83:2b:72:9b:a2:7c:6c:e3:89:bb:09:
                    65:1a:5d:ac:af:96:30:f7:b6:12:1b:1f:ba:a0:c7:
                    2c:a4:c0:08:92:2b:25:0e:c1:33:a8:0d:87:de:6f:
                    49:c9:74:65:f9:ab:37:6b:f8:18:db:8e:48:a8:ea:
                    aa:1b:d1:64:ca:70:01:61:79:48:23:49:b2:2f:88:
                    02:1c:a6:8c:94:4d:59:6c:7d:33:1c:9e:f5:ae:a7:
                    2c:ab:61:29:e4:a2:f4:50:0c:ab:ab:b4:f0:88:82:
                    36:39:c0:b2:31:06:93:17:f0:8d:31:07:17:36:f3:
                    75:7c:b8:42:f7:52:58:4f:45:e0:b1:97:9f:ed:f8:
                    67:e9:2b:89:f1:57:a8:dc:b4:db:e6:79:7b:f6:72:
                    57:a9:08:d5:0e:99:eb:eb:36:0e:54:9f:46:79:52:
                    3a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C3:1A:49:8E:73:02:ED:D6:9F:4B:F6:00:F8:E3:1E:E0:13:99:4D
            X509v3 Authority Key Identifier:
                keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3137392e39362e3137362e302f32312d3332203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:6c:aa:f4:60:1f:b2:b1:bf:0a:ab:21:6c:f6:b8:4e:46:68:
         be:9b:24:d4:35:6a:02:05:42:1f:bf:d1:4a:ea:24:4b:39:c1:
         10:70:77:22:ff:e3:dc:27:ca:64:de:6e:67:32:6c:48:24:f4:
         b6:9d:b0:e1:b6:29:90:33:da:44:77:c9:73:d0:4a:32:b4:c8:
         93:d5:1a:73:df:c7:af:85:d4:f9:94:49:12:95:ad:f2:87:6c:
         3d:41:2b:16:08:98:20:e5:fc:cf:8b:a8:73:08:19:a0:3f:9d:
         61:e4:d8:a1:2a:1a:6d:19:e3:2a:eb:41:a4:5c:25:88:f2:fc:
         18:21:af:56:23:ac:6b:b7:09:1b:7d:a0:1f:eb:6c:d5:76:29:
         1f:a0:ee:5b:3a:34:62:ee:10:65:cd:a6:ff:e4:7f:d0:94:4d:
         8e:72:1b:85:43:82:d3:3c:03:62:53:72:48:1d:39:5c:fd:12:
         92:1f:8c:14:ad:15:7b:60:03:1b:90:c1:dd:70:33:b4:0f:03:
         17:25:64:37:0c:3a:ad:21:35:18:ef:db:a8:39:0b:af:7c:19:
         4b:90:70:95:f4:73:7b:d2:56:92:b4:26:5a:56:39:8d:b3:8b:
         64:19:8e:22:2d:73:a3:cd:6f:7d:67:51:32:15:34:b8:39:72:
         3b:95:ca:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:55 2025 by rpki-client