Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32332d3233203d3e20323633343133.roa
File:                     3137392e39372e38382e302f32332d3233203d3e20323633343133.roa (raw, json)
Hash identifier:          Kq1k0K+hHksAFxS4kh7iFqcQAlMMvGHp7T9E5/pHzSo=
Subject key identifier:   BA:72:08:F7:44:C8:B6:8F:5A:34:BD:C9:19:D5:0D:6D:BA:57:B3:D9
Certificate issuer:       /CN=1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6
Certificate serial:       354198E92DDAAC42F490C136B1F9DD8785CBEFD5
Authority key identifier: 1F:9E:BA:1C:25:67:EA:0F:9A:BC:83:9B:D5:DE:FA:B0:CC:4A:4A:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32332d3233203d3e20323633343133.roa
Signing time:             Fri 01 Mar 2024 11:12:48 +0000
ROA not before:           Fri 01 Mar 2024 11:07:48 +0000
ROA not after:            Fri 28 Feb 2025 11:12:48 +0000
asID:                     263413
IP address blocks:        179.97.88.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:41:98:e9:2d:da:ac:42:f4:90:c1:36:b1:f9:dd:87:85:cb:ef:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6
        Validity
            Not Before: Mar  1 11:07:48 2024 GMT
            Not After : Feb 28 11:12:48 2025 GMT
        Subject: CN=BA7208F744C8B68F5A34BDC919D50D6DBA57B3D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:d5:6a:68:65:1e:df:03:26:c5:03:9b:cb:
                    b2:a5:fc:68:a3:0a:3f:dc:30:9c:74:fe:f2:d0:cf:
                    dd:37:33:9d:6c:6f:5f:24:98:4f:fb:1e:50:af:73:
                    6d:0e:ec:32:92:55:bd:30:f7:ab:51:65:98:a2:19:
                    7e:47:5f:0f:e5:23:95:38:97:18:63:bf:c1:30:92:
                    2a:af:fb:f6:6d:16:6e:ec:82:39:4b:86:52:9b:9b:
                    04:6f:cb:f1:d0:b2:ef:3f:cd:c6:bc:63:ac:55:e6:
                    c2:61:7a:bc:69:0a:97:95:b9:d7:46:c8:8d:2d:f2:
                    fd:72:bb:ed:44:db:a4:b7:69:81:d7:ec:90:16:ed:
                    59:e4:35:c9:75:06:c7:fc:db:54:f5:da:aa:e6:dc:
                    ca:91:72:0f:4f:ea:e4:c7:f3:26:98:ca:30:ed:91:
                    c5:8e:6d:8d:3a:d2:54:72:c4:2c:0f:aa:72:90:12:
                    93:2e:0f:4c:fe:36:b2:da:9b:7d:bf:ae:5d:01:f8:
                    e0:f4:95:a5:38:99:40:d6:b5:a1:27:c0:40:7a:4d:
                    79:df:c8:a3:6a:be:6f:98:70:8e:97:96:e9:93:45:
                    98:73:67:66:7c:bc:48:bb:bb:7e:ef:5f:c5:a3:04:
                    ac:e8:29:26:9c:6f:ca:a1:35:72:1f:06:ab:bc:c0:
                    f1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:72:08:F7:44:C8:B6:8F:5A:34:BD:C9:19:D5:0D:6D:BA:57:B3:D9
            X509v3 Authority Key Identifier:
                keyid:1F:9E:BA:1C:25:67:EA:0F:9A:BC:83:9B:D5:DE:FA:B0:CC:4A:4A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32332d3233203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:38:25:c2:bd:d8:46:db:38:ad:e9:7b:9c:29:02:96:b0:79:
         cd:1d:2c:7e:19:0d:1a:eb:08:28:be:61:7b:d3:98:dd:03:ed:
         b6:23:3e:4e:03:a5:f8:26:8b:a2:bb:38:8e:13:44:4b:9a:fe:
         96:df:37:f7:e0:a1:5b:1f:0d:15:55:4d:08:7a:30:67:6b:c1:
         cf:20:70:59:50:8b:ef:c8:e6:a4:8d:34:39:09:25:a9:fc:03:
         f1:77:4a:2a:ba:b5:06:8a:77:f1:b2:a2:2a:32:6e:b8:15:39:
         bb:39:74:dd:00:bf:3b:26:e2:7b:d3:f9:3a:94:6d:d6:1f:fd:
         87:86:ad:01:2f:12:ad:28:39:aa:89:9d:37:66:24:60:4d:61:
         f7:63:97:87:5c:e0:6d:31:e6:a3:39:ea:df:ca:bd:f8:7f:9c:
         0f:60:7d:7f:c6:ee:fe:9f:f7:e6:a1:83:81:c8:b1:34:d2:73:
         78:f0:5c:79:49:82:74:d2:6c:3a:83:39:d0:22:c3:74:b5:2f:
         04:d2:7b:05:ea:7b:15:bb:19:c7:ae:aa:c9:2d:08:f0:ce:09:
         69:bb:a9:ce:87:00:04:7e:a9:d2:5e:ae:4f:ab:19:6b:22:db:
         39:a0:95:27:3a:71:3a:b0:28:75:6d:95:4b:6f:55:82:bb:71:
         55:32:56:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:38:05 2025 by rpki-client