Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39362e302f32312d3231203d3e20323633363038.roa
File:                     3137372e3133362e39362e302f32312d3231203d3e20323633363038.roa (raw, json)
Hash identifier:          jT5aijpX6NmrEYCUVFc4/sniPQWIcP2erbhPrErDtKk=
Subject key identifier:   46:3F:8F:10:41:E3:E6:5C:56:36:A7:50:62:74:6A:E8:E6:61:A0:15
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       09FB903C5D0A04FFDE14797FFDD3F1B3B666D42C
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39362e302f32312d3231203d3e20323633363038.roa
Signing time:             Mon 23 Dec 2024 13:18:55 +0000
ROA not before:           Mon 23 Dec 2024 13:13:55 +0000
ROA not after:            Mon 22 Dec 2025 13:18:55 +0000
asID:                     263608
IP address blocks:        177.136.96.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fb:90:3c:5d:0a:04:ff:de:14:79:7f:fd:d3:f1:b3:b6:66:d4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: Dec 23 13:13:55 2024 GMT
            Not After : Dec 22 13:18:55 2025 GMT
        Subject: CN=463F8F1041E3E65C5636A75062746AE8E661A015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:78:47:96:af:87:4e:52:be:9f:c3:d5:85:93:
                    03:c9:8b:16:bd:f6:ab:3d:10:b3:a5:72:46:88:b2:
                    01:7c:e7:95:c0:df:93:01:68:14:4c:c0:79:be:65:
                    93:b6:be:14:3b:8f:9d:c8:8c:ae:d9:d7:0b:ee:fc:
                    5d:79:c4:8f:7d:bf:35:7f:7e:d7:ee:53:71:a0:03:
                    8f:2a:74:19:89:7d:d8:5e:0b:2f:11:d1:0e:93:8d:
                    30:64:ca:a3:5a:78:3b:a0:bf:8a:b9:8b:7d:e9:78:
                    28:0e:a9:41:80:3e:af:91:b1:4c:1e:7a:d4:4d:89:
                    04:c7:25:ea:25:33:28:13:6e:40:32:18:bd:d0:e8:
                    0c:80:cb:c6:07:5a:05:91:91:fc:f3:c2:93:01:cc:
                    a8:a6:8f:41:21:c3:f9:8f:38:7c:84:98:26:dc:51:
                    12:8f:62:4f:0b:cf:09:08:fa:39:5c:d5:d8:1a:a2:
                    64:9d:3e:7c:4d:7e:a2:d5:d8:4c:31:e8:f9:29:87:
                    43:d6:69:2e:59:79:19:c2:72:2b:70:be:fd:94:2c:
                    11:04:08:04:a2:fd:ed:65:75:e4:03:5a:80:c7:c5:
                    c7:d2:f7:dd:1d:9c:28:05:e7:b1:f7:7e:24:3e:42:
                    9c:59:b9:27:65:ff:9e:8d:85:70:cb:9e:29:b3:7b:
                    61:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3F:8F:10:41:E3:E6:5C:56:36:A7:50:62:74:6A:E8:E6:61:A0:15
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39362e302f32312d3231203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         27:45:8f:63:60:7b:67:e9:ad:d4:4e:08:5a:6c:63:07:1f:50:
         71:9c:bd:55:a9:bc:31:7f:86:37:81:39:bb:fb:c4:01:d9:4d:
         90:ee:43:49:a6:89:f2:d5:67:db:37:b7:a5:1f:27:07:10:3e:
         f3:60:f8:f2:47:53:05:4c:dd:ac:52:a8:e1:1d:a6:80:ed:b6:
         de:28:ce:2a:73:12:53:ab:f6:e7:aa:28:ac:e3:fa:87:db:78:
         15:85:2c:ee:6f:5b:54:39:ed:31:60:cb:58:2b:c2:62:ab:8e:
         22:43:95:ff:a9:ff:6b:02:cc:0e:f6:93:ab:92:a6:01:c5:16:
         8f:24:b4:e3:ca:20:37:ad:69:5e:67:83:b3:e6:2f:fd:9b:76:
         69:72:43:30:92:86:9c:75:95:78:de:16:f2:c7:c5:8f:38:8c:
         13:bd:0c:fe:11:f8:85:2e:47:c0:f9:05:17:89:58:63:b6:ea:
         6f:d3:14:7a:16:c8:64:aa:18:3e:54:b4:75:b2:5d:74:0a:52:
         16:3e:cd:03:c1:0f:2f:94:40:87:81:f8:05:72:71:6d:fd:48:
         e3:12:83:d7:68:1d:54:36:37:ea:43:50:73:1b:c4:0e:c8:dd:
         8f:4a:a6:6f:e9:73:d7:73:12:1b:30:85:fe:84:60:bb:cb:df:
         e2:8b:78:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:34:58 2025 by rpki-client