Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/3137372e3130372e33312e302f32342d3234203d3e20323639303336.roa
File:                     3137372e3130372e33312e302f32342d3234203d3e20323639303336.roa (raw, json)
Hash identifier:          ttptpZjEvmFZMni2iU2bCHtJ+zQI6ifwqFtk69z4i3A=
Subject key identifier:   6C:5C:1A:6F:44:75:83:CB:97:70:1C:2C:98:37:CD:BF:64:C7:21:3A
Certificate issuer:       /CN=32B0E6548F3A2FFBFDFF7091C549B32A759B6617
Certificate serial:       515916BE554858A2B21736FDDBDFC68091AB3C6B
Authority key identifier: 32:B0:E6:54:8F:3A:2F:FB:FD:FF:70:91:C5:49:B3:2A:75:9B:66:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32B0E6548F3A2FFBFDFF7091C549B32A759B6617.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/3137372e3130372e33312e302f32342d3234203d3e20323639303336.roa
Signing time:             Thu 21 Dec 2023 17:29:35 +0000
ROA not before:           Thu 21 Dec 2023 17:24:35 +0000
ROA not after:            Thu 19 Dec 2024 17:29:35 +0000
asID:                     269036
IP address blocks:        177.107.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:59:16:be:55:48:58:a2:b2:17:36:fd:db:df:c6:80:91:ab:3c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32B0E6548F3A2FFBFDFF7091C549B32A759B6617
        Validity
            Not Before: Dec 21 17:24:35 2023 GMT
            Not After : Dec 19 17:29:35 2024 GMT
        Subject: CN=6C5C1A6F447583CB97701C2C9837CDBF64C7213A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:62:19:96:df:1b:dd:a3:ce:42:52:cb:75:
                    e0:f0:14:8d:4b:12:83:a0:b9:ae:c1:1b:91:74:8f:
                    13:cc:e7:ea:29:09:81:fc:24:91:55:4e:76:89:1c:
                    f2:5a:6f:ea:1d:e3:bf:a6:79:b6:13:85:85:b8:63:
                    50:d1:cf:c8:ae:75:d3:e1:9b:4c:d7:aa:d0:c8:90:
                    32:bf:fb:21:1e:6e:74:d7:43:c2:3f:eb:06:74:81:
                    8d:28:d3:59:bf:52:fa:5d:ec:a0:2b:e6:ee:44:37:
                    96:b3:b2:0f:5f:e6:a9:b2:3a:af:ba:78:b7:cf:4f:
                    c0:81:ab:43:65:c0:ba:f0:9c:1f:0e:5e:d2:02:f1:
                    3c:3f:ba:5f:99:e2:3d:08:04:d1:d3:0d:3e:1b:70:
                    30:4d:0c:3d:07:18:4c:33:5f:42:af:f9:bd:5b:2a:
                    a3:b1:ee:eb:bb:4b:79:b2:9d:33:33:f1:3b:d9:6e:
                    05:a3:c4:70:50:aa:53:20:9e:b7:7e:87:d7:11:90:
                    60:4f:1e:71:22:c8:8e:54:ab:94:cb:aa:a5:13:9d:
                    24:cf:3e:3f:7b:f4:c5:41:ec:e7:e5:d1:33:ef:1e:
                    f5:e6:d0:1d:d0:21:a9:9e:2f:82:c4:8f:91:f1:cf:
                    83:9f:08:27:bd:e4:57:32:03:75:18:4d:0f:0a:14:
                    8e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5C:1A:6F:44:75:83:CB:97:70:1C:2C:98:37:CD:BF:64:C7:21:3A
            X509v3 Authority Key Identifier:
                keyid:32:B0:E6:54:8F:3A:2F:FB:FD:FF:70:91:C5:49:B3:2A:75:9B:66:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/32B0E6548F3A2FFBFDFF7091C549B32A759B6617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32B0E6548F3A2FFBFDFF7091C549B32A759B6617.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/3137372e3130372e33312e302f32342d3234203d3e20323639303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:15:46:b7:ab:62:37:80:13:2f:df:54:dd:3c:af:b0:d4:03:
         16:0f:ff:76:e1:35:6e:db:7a:f4:28:46:2c:9a:30:ae:b7:51:
         d2:92:fd:6b:ba:57:7d:78:14:68:4b:ee:66:f6:b6:ed:88:f6:
         9f:b2:b7:ae:61:7e:b1:c6:aa:ad:df:84:52:8d:dd:ca:e3:3f:
         61:96:34:f7:ca:29:72:73:8a:c4:af:ca:0a:67:8c:b9:c9:93:
         ea:c9:6d:e3:51:d7:c3:5e:2f:28:0a:8a:6b:10:88:d2:89:7c:
         ec:14:83:4a:73:35:2a:9a:d1:15:45:5e:77:e5:7a:4c:6c:a4:
         46:fa:4c:e0:05:bf:ea:d4:86:df:7e:2c:7b:d3:30:2f:74:a0:
         9f:94:42:db:47:1e:84:f3:78:b2:d3:75:db:26:1c:83:99:c2:
         d6:45:9b:55:c9:13:45:a6:c5:f5:85:58:1f:37:f2:ba:89:35:
         2f:59:3e:08:ea:64:1a:57:bd:14:1c:a4:30:56:ee:8d:04:9d:
         b5:1e:95:2c:5f:25:cc:9e:0c:35:c1:46:17:fc:cc:d8:43:36:
         de:f5:60:9b:ef:52:8a:51:e7:16:1d:95:89:6b:af:73:26:11:
         a7:be:a2:ff:f5:d0:43:8a:fe:a6:8c:f2:72:5d:48:48:da:78:
         99:ab:58:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:40:59 2025 by rpki-client