Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39382e302f32342d3234203d3e20323633363036.roa
File:                     3137372e3133362e39382e302f32342d3234203d3e20323633363036.roa (raw, json)
Hash identifier:          pUm4tCCr+aSzBu7fEDMt+O2Xd5w0+twG2iwRYyHIHO0=
Subject key identifier:   66:9A:39:5A:B9:E5:D2:D8:80:46:F3:AB:32:6C:AB:F7:36:25:0A:B5
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       4BE33F2878A277D88EE5306E8E744DC1BC1FD734
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39382e302f32342d3234203d3e20323633363036.roa
Signing time:             Mon 23 Dec 2024 13:17:55 +0000
ROA not before:           Mon 23 Dec 2024 13:12:55 +0000
ROA not after:            Mon 22 Dec 2025 13:17:55 +0000
asID:                     263606
IP address blocks:        177.136.98.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e3:3f:28:78:a2:77:d8:8e:e5:30:6e:8e:74:4d:c1:bc:1f:d7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: Dec 23 13:12:55 2024 GMT
            Not After : Dec 22 13:17:55 2025 GMT
        Subject: CN=669A395AB9E5D2D88046F3AB326CABF736250AB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c9:91:46:d6:a2:0b:6b:c0:1b:60:54:33:db:
                    2f:e4:0f:76:47:98:31:1a:bb:04:46:cc:2b:29:d5:
                    56:a7:da:09:8b:16:f0:e6:6d:16:68:d3:bb:f0:27:
                    ef:8f:62:5f:bc:52:07:b5:e9:9b:01:eb:38:84:79:
                    6d:44:6c:f2:33:17:16:2f:40:f6:47:02:f8:d2:a8:
                    ec:6f:62:4d:36:19:05:d8:37:27:a4:bf:76:73:94:
                    c9:dd:62:20:a4:46:4e:6c:fc:ae:05:8b:e9:4f:92:
                    7e:3e:6d:05:d2:99:53:03:29:b8:1a:3f:1c:37:f8:
                    b7:f5:f0:17:8b:46:1f:63:69:0e:08:64:3e:c0:b0:
                    f1:22:d5:72:ef:b1:bd:1b:e9:93:3c:45:b2:67:e2:
                    ff:4f:04:2d:e7:db:ed:a4:c6:ce:7f:f5:56:62:d9:
                    7b:6e:d5:06:8b:de:a5:bd:84:98:06:bc:31:47:03:
                    bc:8b:99:dc:97:9f:a5:84:64:f2:b5:32:0e:37:35:
                    c8:49:77:2d:36:7d:fb:92:e5:dc:a3:1d:3b:75:27:
                    78:ac:f6:6c:9b:10:dc:fe:96:34:b2:f1:6b:3a:6f:
                    b2:db:ba:bd:9f:7f:21:cb:48:d2:40:a2:67:02:70:
                    0f:44:16:e8:2a:59:9d:71:e7:7f:42:6d:56:a0:a5:
                    f9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9A:39:5A:B9:E5:D2:D8:80:46:F3:AB:32:6C:AB:F7:36:25:0A:B5
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39382e302f32342d3234203d3e20323633363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:78:fd:1b:73:38:b6:21:c5:86:52:cb:5f:5a:a6:27:8e:8e:
         15:ee:9f:b7:36:c9:9e:16:6c:ca:27:d4:57:42:35:7d:2c:4c:
         9f:a2:2b:38:bd:08:f7:37:5a:5d:17:17:e2:5f:79:7b:ba:61:
         55:59:32:1c:2a:b6:d1:79:c0:77:92:e0:43:db:50:03:ea:95:
         77:16:90:0d:85:f2:74:16:6b:20:a9:7d:7d:7f:28:7d:1a:77:
         98:98:de:d6:83:42:e7:5d:6f:3f:8d:7b:fb:7d:c6:f4:0f:f5:
         c6:2e:87:e6:27:b1:b9:ee:eb:23:26:45:85:a9:0d:0c:dc:1e:
         1d:6c:aa:dd:73:92:dd:89:c5:a8:d8:09:65:34:5f:01:20:08:
         11:00:3a:dd:11:f9:6d:c2:7b:93:e5:70:ce:1d:77:81:31:a1:
         58:ea:78:d8:96:28:3f:72:4e:a1:58:54:a9:6c:8b:82:e6:a3:
         8c:12:c3:47:63:1d:d4:71:9d:cf:c6:0c:07:3f:53:09:d6:11:
         7f:6f:59:c2:5f:1b:ea:8d:80:8c:e6:78:1a:17:71:1c:86:7b:
         b3:c5:0e:9d:a3:6a:6b:78:44:a0:0a:a8:ad:78:91:e3:02:4d:
         a3:54:bc:2f:02:77:57:e2:4c:fb:10:ef:21:f1:df:7a:aa:93:
         01:84:f5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:39:53 2025 by rpki-client