Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e33312e302f32342d3234203d3e20323633363038.roa
File:                     3137302e3234342e33312e302f32342d3234203d3e20323633363038.roa (raw, json)
Hash identifier:          foqCkkexHAuu3ghvQTzDTxfCnpC9DNuBmnr+KSCOsGo=
Subject key identifier:   D7:00:A3:A8:ED:7E:ED:8F:51:C7:40:01:35:CE:C8:55:4F:F5:3B:B7
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       63589123F4556AF5C302AAC00034A16979F1252A
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e33312e302f32342d3234203d3e20323633363038.roa
Signing time:             Mon 23 Dec 2024 13:18:50 +0000
ROA not before:           Mon 23 Dec 2024 13:13:50 +0000
ROA not after:            Mon 22 Dec 2025 13:18:50 +0000
asID:                     263608
IP address blocks:        170.244.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:58:91:23:f4:55:6a:f5:c3:02:aa:c0:00:34:a1:69:79:f1:25:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: Dec 23 13:13:50 2024 GMT
            Not After : Dec 22 13:18:50 2025 GMT
        Subject: CN=D700A3A8ED7EED8F51C7400135CEC8554FF53BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:05:aa:3a:9b:00:bd:ea:19:67:69:31:be:bb:
                    60:c6:d3:56:46:9b:b8:f5:69:41:00:ed:bc:66:b4:
                    ff:bd:54:3e:b1:a9:dc:e8:87:06:2d:ad:96:c3:44:
                    61:f9:da:05:3e:99:fb:17:63:0b:b8:79:ff:93:71:
                    65:ad:1c:56:f7:2e:36:5c:85:87:a0:2e:28:a0:0f:
                    fd:5d:2b:a8:2b:48:19:5d:0f:4f:ef:9f:a1:66:87:
                    bb:95:d6:3b:9c:0a:45:e7:ca:dd:a0:ee:2d:34:ad:
                    23:96:3a:54:37:5c:89:10:5b:fc:ec:d9:e9:ea:ba:
                    2c:b9:63:f4:73:af:8b:50:8c:77:4d:d7:24:13:d7:
                    be:e4:f4:d9:2b:e2:c6:87:4f:98:7f:2f:25:5e:88:
                    4a:d3:b2:29:9b:58:6b:e8:7b:c6:3a:bd:50:53:53:
                    0a:7c:2c:0e:4d:12:b3:51:7d:0e:69:80:a9:7c:47:
                    1b:be:62:10:9a:8b:e2:66:19:09:4c:ef:f6:d0:6a:
                    9b:18:2a:26:f9:2a:89:63:6d:0a:51:03:25:9c:42:
                    ad:3e:f1:5a:97:34:f6:ec:dd:53:13:1a:34:24:8e:
                    2a:35:7a:c2:f4:37:83:99:2a:bd:3d:2f:6a:cf:61:
                    a8:5d:9c:11:aa:88:17:eb:97:c6:35:d3:aa:02:55:
                    02:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:00:A3:A8:ED:7E:ED:8F:51:C7:40:01:35:CE:C8:55:4F:F5:3B:B7
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137302e3234342e33312e302f32342d3234203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:6f:10:aa:3e:55:70:e9:1a:dc:22:43:11:aa:92:f4:7c:9d:
         74:d4:09:ed:c5:7e:fc:a6:01:0a:fc:6f:e8:cc:7d:80:af:1f:
         23:4c:ad:1a:73:67:89:fb:bd:a6:3e:76:d4:74:a6:41:70:1b:
         d9:d9:00:9e:a0:c6:b1:95:52:86:cf:f7:86:34:e7:66:10:7d:
         77:03:64:8c:d2:ed:f9:0a:2a:e7:eb:ef:0f:10:e1:54:2e:bc:
         c8:8a:84:ec:f7:e4:32:28:ee:4e:21:3a:8c:46:4f:0b:16:48:
         5c:09:a6:54:28:c4:5d:31:5f:62:c7:39:e4:b0:a7:59:34:6a:
         29:f6:b0:43:32:48:78:5b:0d:1e:80:be:30:37:bd:d3:f2:55:
         f6:87:1b:6f:5f:ca:10:14:58:1c:45:71:a9:95:42:4c:95:df:
         ae:60:32:e8:81:11:ae:fb:a7:08:75:43:2f:59:c2:0a:51:5c:
         8f:19:65:ed:91:74:dc:72:e6:f9:b7:dc:77:08:7d:18:49:90:
         57:c2:53:33:53:6d:b0:48:fa:28:49:35:b9:d8:d1:19:8c:57:
         1d:24:07:1b:78:a9:ea:36:05:59:ea:87:6f:94:7a:1e:42:7e:
         bf:2a:ec:12:a4:49:38:bc:e5:fd:96:61:fc:2e:61:d1:59:ef:
         26:b7:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:08:18 2025 by rpki-client