Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130302e302f32342d3234203d3e203631383731.roa
File:                     3136372e3234392e3130302e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          JmvlseV70pMuOART5OyUT5LaOSltpt4gc2jB87muAAQ=
Subject key identifier:   84:A5:0D:6A:46:BB:30:F8:DF:E7:D3:1D:08:9B:3F:B6:DD:6D:91:87
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       61315AD8E61A974BEC30BE1B4571536DBDF87C7F
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130302e302f32342d3234203d3e203631383731.roa
Signing time:             Fri 20 Oct 2023 15:06:07 +0000
ROA not before:           Fri 20 Oct 2023 15:01:07 +0000
ROA not after:            Fri 18 Oct 2024 15:06:07 +0000
asID:                     61871
IP address blocks:        167.249.100.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:31:5a:d8:e6:1a:97:4b:ec:30:be:1b:45:71:53:6d:bd:f8:7c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Oct 20 15:01:07 2023 GMT
            Not After : Oct 18 15:06:07 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:d2:27:0a:c4:5f:24:45:ba:1a:62:e9:a5:
                    7e:4c:54:08:fe:bf:34:46:4c:3f:83:b1:40:a6:57:
                    29:94:79:7c:03:94:e5:7a:f7:40:95:d8:ff:4a:f1:
                    93:78:4a:74:8f:00:f5:e5:dd:d6:19:18:e2:34:52:
                    12:fa:ac:a9:9a:3c:91:7a:2b:7b:a2:76:7b:02:18:
                    fa:79:45:30:c3:1b:b1:34:ed:c7:6a:d7:99:3a:23:
                    33:38:95:08:18:16:04:68:d4:85:cf:f8:ad:3c:65:
                    7c:3e:da:c2:f3:1b:35:ba:fd:3b:99:3e:bc:17:3a:
                    72:24:ae:42:b0:a3:6d:be:4b:69:43:9e:46:16:13:
                    00:b6:8b:dc:4e:a7:ba:4c:db:c6:72:7a:47:79:e7:
                    1d:01:c3:63:13:7a:06:92:ba:d0:89:22:bd:2d:fa:
                    d7:38:cd:f9:f2:f8:41:31:fe:c5:05:72:af:04:b4:
                    e1:51:07:27:0b:3f:4b:4c:98:da:96:ba:6e:97:1b:
                    9b:ca:0c:92:f4:68:7c:5d:25:92:11:5e:8e:60:0f:
                    86:cc:10:a2:68:bb:86:7b:1f:eb:e1:83:be:dd:26:
                    ae:5b:dc:81:56:fb:b9:36:84:e1:cd:cb:91:9d:52:
                    4d:80:34:63:05:04:cd:08:ec:03:bc:49:46:61:bc:
                    21:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A5:0D:6A:46:BB:30:F8:DF:E7:D3:1D:08:9B:3F:B6:DD:6D:91:87
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130302e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:a8:97:2e:fb:da:8c:6b:9e:41:dc:64:c6:ce:22:58:a0:41:
         0c:b2:64:87:cc:d5:ec:69:3a:0b:7a:84:59:f3:5e:b6:6c:49:
         cb:17:51:b9:bf:43:88:7b:14:52:18:7f:de:f7:5b:f7:bd:93:
         7d:17:f0:db:1a:41:62:30:e8:01:7f:ff:f0:35:e7:1e:4a:cf:
         af:be:83:96:5d:b5:25:85:36:79:35:c1:8e:f7:87:5d:e1:39:
         77:0c:28:74:c0:36:3a:e8:00:c0:14:99:56:02:c7:8b:da:58:
         c6:33:d9:68:4a:16:f4:7c:79:1d:ee:16:a2:a3:53:a5:0c:e3:
         21:22:69:fd:a2:16:b1:b7:ec:0e:6f:e9:78:b0:68:9a:e8:60:
         75:4e:11:f9:be:b7:31:fc:88:75:35:8f:7b:9c:c4:ff:56:e8:
         71:f8:fa:07:5a:a2:3c:0b:e2:1b:e3:fe:48:da:dd:a6:84:76:
         db:65:33:df:94:2d:ae:41:3f:7b:65:f1:63:c3:61:71:57:a1:
         5d:43:3e:e1:60:ab:40:39:46:34:88:9c:3d:0b:23:5e:da:14:
         fc:36:77:29:91:dd:20:03:10:c5:70:f7:1f:94:de:81:11:16:
         56:67:6f:a5:c6:2d:43:32:9f:36:39:5a:e6:fc:10:1c:66:d6:
         a4:8f:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:38 2025 by rpki-client