Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39372e302f32342d3234203d3e203532393737.roa
File:                     3134332e3235352e39372e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          2nfzsggBgphfEIclZe1ftD2+K7tuygVp2TypNkGuHUA=
Subject key identifier:   D7:27:77:2F:4B:39:C1:20:40:84:EC:C2:D3:E3:20:94:C1:98:4F:60
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       657C106DE421006DD17141D1068AC7430E2FB479
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39372e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     52977
IP address blocks:        143.255.97.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7c:10:6d:e4:21:00:6d:d1:71:41:d1:06:8a:c7:43:0e:2f:b4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=D727772F4B39C1204084ECC2D3E32094C1984F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:35:71:7c:3c:80:54:c5:58:4a:71:8b:d6:
                    08:72:34:a3:ab:b8:6a:fb:6c:f4:d1:1a:d2:35:d0:
                    39:c5:33:00:ce:64:ae:da:81:e1:37:38:8a:6c:22:
                    1d:23:4a:a0:f1:bc:03:42:28:a3:8c:14:af:59:5b:
                    1a:c7:32:1b:88:ac:9c:c9:50:f4:6e:25:1f:91:86:
                    60:c4:9e:56:5c:85:fc:85:f1:98:89:1f:d3:6a:94:
                    a5:64:cc:4b:9a:fe:da:90:f4:ce:75:d0:b9:60:09:
                    2c:ef:21:7f:13:61:25:50:f9:d5:df:86:5f:de:eb:
                    a0:d0:93:51:10:83:29:23:0b:af:41:5f:c9:37:a4:
                    65:f5:d0:1c:33:2e:97:90:70:0c:78:5b:b5:02:b6:
                    be:fc:e4:2e:18:0c:8a:f7:03:42:47:4c:11:1a:d0:
                    d1:ee:44:73:fe:36:7a:af:f8:aa:70:b8:63:43:ba:
                    98:75:a7:b6:26:e1:46:2f:7f:08:e9:a6:71:4a:f6:
                    79:17:30:2d:6a:78:ef:d0:b9:f6:eb:3b:f9:a8:a8:
                    5d:e6:f3:3e:db:27:37:97:8f:4c:1f:73:45:72:79:
                    6b:5e:6e:53:97:a0:d3:db:a1:e9:cc:ce:d4:61:16:
                    32:8e:9d:d3:d5:1b:95:cc:35:3b:2f:be:0d:98:e5:
                    bd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:27:77:2F:4B:39:C1:20:40:84:EC:C2:D3:E3:20:94:C1:98:4F:60
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39372e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:87:e1:0a:b5:a6:99:34:2b:27:5a:10:e6:ed:b8:b1:a3:5e:
         1c:d8:8e:13:09:de:74:ef:5e:f4:70:90:63:c4:e1:d2:f7:95:
         be:48:f7:84:4e:f0:c6:66:9a:87:02:be:84:ef:3f:e2:65:94:
         72:60:80:1c:3c:d3:4c:d9:fa:ae:71:9b:96:b5:6d:b4:eb:41:
         cc:2b:e1:9f:a9:7c:fb:ae:8c:8f:de:0c:93:2b:11:18:25:39:
         22:c4:01:81:33:7f:c9:dd:e1:bc:15:d2:13:1a:22:61:86:a3:
         08:50:9c:42:aa:f9:01:09:e3:a0:16:f1:65:8e:6e:7a:62:f6:
         80:27:0e:cd:b3:ee:18:d8:ec:4f:35:43:35:88:cf:c8:7d:3b:
         d0:67:db:df:28:37:74:65:4f:fb:ae:24:96:f0:86:b5:77:d1:
         7a:a5:54:aa:17:f3:cb:19:42:04:63:65:02:67:fa:fc:bd:9c:
         59:d8:8e:c7:11:70:27:f9:6a:3c:f3:27:bd:e9:74:62:36:e4:
         64:11:62:0a:03:bc:fb:df:e1:5c:2d:7a:1f:1e:42:32:7c:0e:
         82:94:34:c0:58:8a:2e:f7:50:7b:15:c1:86:e3:09:bc:d1:29:
         ba:3d:a1:e4:dd:ff:bf:fc:58:3d:73:45:3f:d7:eb:96:d4:0d:
         b7:cc:92:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:15:14 2025 by rpki-client