Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa
File:                     3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa (raw, json)
Hash identifier:          oC6zLXk1a5br06e6KPClMlQgp5HjO7sSayMQVfVT1cU=
Subject key identifier:   FF:79:E4:87:CD:39:92:E4:66:C3:C6:50:81:16:5C:D7:1E:76:DB:86
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       7F09667F2516991EA90037AB72545CA5F1B8ECA2
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa
Signing time:             Thu 31 Oct 2024 17:24:32 +0000
ROA not before:           Thu 31 Oct 2024 17:19:32 +0000
ROA not after:            Thu 30 Oct 2025 17:24:32 +0000
asID:                     28287
IP address blocks:        167.249.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:09:66:7f:25:16:99:1e:a9:00:37:ab:72:54:5c:a5:f1:b8:ec:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:19:32 2024 GMT
            Not After : Oct 30 17:24:32 2025 GMT
        Subject: CN=FF79E487CD3992E466C3C65081165CD71E76DB86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d8:c9:9b:e3:7f:49:f0:48:1f:12:da:5b:1e:
                    75:4d:3d:f5:62:45:35:2f:c5:d6:ad:d9:2e:de:56:
                    91:91:6d:3a:5d:9b:ca:6b:19:ff:fa:46:fc:5a:9e:
                    f6:57:b1:45:cd:09:1a:df:fc:75:7b:2e:81:ef:09:
                    98:8c:33:53:39:22:6e:e6:65:fd:b0:8e:25:29:c2:
                    aa:4e:05:f2:3f:a3:53:23:42:b9:9d:50:85:43:17:
                    c5:1b:21:cf:94:1c:ea:38:42:99:db:c1:e3:66:13:
                    24:65:35:3a:be:f0:2a:6d:fe:70:06:10:3b:56:45:
                    72:5d:8d:23:37:6f:91:dc:3d:d9:8f:84:80:43:78:
                    b0:3a:95:8a:0f:cf:4d:ae:2a:7f:e7:ef:4f:75:a4:
                    cf:64:80:c5:e0:d8:22:c7:04:a6:cf:cd:18:2d:5c:
                    2d:7c:44:ef:e0:5f:be:b7:35:3d:6e:fb:10:d5:37:
                    fc:eb:6e:e7:83:fb:0b:44:a9:82:07:78:29:13:28:
                    11:18:b1:d6:67:cc:3e:3b:0d:43:0a:0f:f5:b6:56:
                    26:32:12:13:78:f0:54:2a:c3:66:bd:37:4e:51:0b:
                    85:6a:21:c2:3c:d9:4c:44:6e:d6:bd:c3:a8:f0:23:
                    9f:89:d8:15:44:18:1d:84:89:a1:51:1d:dd:c8:fb:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:79:E4:87:CD:39:92:E4:66:C3:C6:50:81:16:5C:D7:1E:76:DB:86
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:19:e9:b7:a7:60:ba:d4:85:0d:39:18:b4:80:21:b7:99:c4:
         00:33:0c:cc:78:0b:33:fd:42:82:54:1b:53:e8:72:ce:30:7e:
         69:bf:3f:9e:fc:42:15:f8:0e:f5:e4:31:94:62:bf:9c:73:58:
         5d:58:1a:19:1c:e2:2c:a4:7b:f6:bc:7e:56:65:2a:df:72:73:
         53:7b:b5:0c:44:4b:18:e5:01:09:42:eb:de:d5:e2:81:aa:92:
         58:f7:09:90:d5:d1:9a:79:95:fc:fc:f7:0f:e2:40:1a:5b:8a:
         f3:76:49:d9:ae:a0:84:c0:59:12:77:18:d8:17:3a:48:01:ef:
         fc:87:2e:06:29:5d:a6:37:df:2a:aa:11:2e:85:8c:e4:1a:78:
         d5:18:a4:3f:cd:aa:1a:05:0b:ad:24:b7:28:af:59:ae:78:61:
         8d:6e:9c:55:95:b7:1e:54:e4:63:6e:b6:f6:6e:e5:6f:d6:f8:
         32:ed:6a:58:17:ba:45:d9:19:c6:33:f1:46:45:87:87:41:ba:
         c4:a4:b9:46:17:29:d2:47:ac:15:db:a0:8e:a4:b4:63:35:52:
         75:5f:4c:cf:e8:30:f6:45:8f:bd:a7:08:d0:0d:87:22:4b:b8:
         22:7e:51:4e:85:e5:51:d6:1b:6f:81:8c:3e:84:f4:20:f8:67:
         9b:11:8d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:13 2025 by rpki-client