Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136342e302f32322d3332203d3e203532393531.roa
File:                     3137302e37392e3136342e302f32322d3332203d3e203532393531.roa (raw, json)
Hash identifier:          LOIgQ4TfZdS6VN2ZJt53eDsI1UGouv1JRvJ+hkJeEqA=
Subject key identifier:   51:76:91:44:67:69:C8:EB:60:7E:F1:58:6E:CF:55:BE:76:96:74:12
Certificate issuer:       /CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
Certificate serial:       1C234BFA5532D41303CC09655B7D6807DBABA842
Authority key identifier: F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136342e302f32322d3332203d3e203532393531.roa
Signing time:             Thu 28 Sep 2023 18:01:54 +0000
ROA not before:           Thu 28 Sep 2023 17:56:54 +0000
ROA not after:            Thu 26 Sep 2024 18:01:54 +0000
asID:                     52951
IP address blocks:        170.79.164.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:23:4b:fa:55:32:d4:13:03:cc:09:65:5b:7d:68:07:db:ab:a8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180440007ACD4BF8D9621EF7C7DC2C848175CD3
        Validity
            Not Before: Sep 28 17:56:54 2023 GMT
            Not After : Sep 26 18:01:54 2024 GMT
        Subject: CN=517691446769C8EB607EF1586ECF55BE76967412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:51:66:e2:76:90:b2:89:3d:3f:01:76:3c:
                    61:ae:52:52:8c:c7:14:96:0c:a1:c6:6a:15:77:b5:
                    18:6c:80:3e:af:43:76:6d:a8:f4:fb:e7:2d:67:c8:
                    c0:7a:c1:e2:74:f6:0e:9c:2a:ac:0a:e3:2c:11:f0:
                    32:fd:36:b7:e0:f7:6f:32:c7:44:90:1e:48:d9:9d:
                    19:65:9d:34:01:8c:77:fe:9f:6d:6d:a2:0d:32:52:
                    1c:5b:5f:47:93:58:b2:ea:53:e3:48:16:8e:97:7e:
                    95:99:cb:f8:db:97:72:be:f5:c1:22:b9:39:c5:ca:
                    f8:68:e8:08:68:fe:5b:7c:8c:f3:66:27:1f:3c:f7:
                    48:8d:77:12:82:05:09:0c:0f:af:83:da:60:3b:b6:
                    32:f5:5c:bf:bf:53:67:d3:60:83:93:29:23:d4:a9:
                    12:aa:cb:65:3c:d0:b0:29:d8:09:aa:b3:4a:60:3d:
                    d9:a0:42:e7:47:e7:58:3b:0c:5c:c3:1c:1a:3f:16:
                    e3:5e:fe:ce:61:98:cc:1a:16:71:c9:10:5d:85:aa:
                    a2:26:6b:2a:d9:2e:b8:cf:e8:ce:bb:03:a2:90:80:
                    4e:ab:5f:12:43:2a:14:c3:ff:02:4e:6f:6a:ef:76:
                    ea:17:5b:2e:07:a8:1b:21:4a:f7:87:5d:d7:90:55:
                    8a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:76:91:44:67:69:C8:EB:60:7E:F1:58:6E:CF:55:BE:76:96:74:12
            X509v3 Authority Key Identifier:
                keyid:F1:80:44:00:07:AC:D4:BF:8D:96:21:EF:7C:7D:C2:C8:48:17:5C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F180440007ACD4BF8D9621EF7C7DC2C848175CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3137302e37392e3136342e302f32322d3332203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:34:56:3e:16:f8:f8:4c:cf:59:19:1a:5f:5d:7f:c1:5b:3b:
         a9:14:d4:31:77:dc:d3:cd:71:f0:c3:42:a4:57:20:96:7a:23:
         03:14:10:81:05:60:92:c2:5a:d9:54:ef:83:ac:fb:4a:d9:76:
         66:a6:11:c2:61:51:dd:28:78:05:f5:3a:7c:72:bd:00:82:77:
         98:03:98:51:b6:6f:ca:73:6a:d9:1d:9a:a8:bd:94:61:8e:cb:
         19:6b:9f:e6:a5:c4:bb:ca:02:d6:3f:83:44:f8:1b:d4:2b:5b:
         e1:3a:55:de:f7:73:80:9b:e8:a7:2a:d7:0c:54:aa:94:db:6b:
         ae:f8:f4:9a:3a:41:b4:f0:5a:c7:d7:d9:70:7d:de:58:6d:dd:
         b4:dd:3f:5f:2b:1a:b1:14:e4:dd:57:f1:5f:26:98:df:57:3e:
         e8:15:19:83:d5:f5:21:cd:8e:19:3d:95:cc:21:bc:92:6c:4a:
         d9:5c:57:c2:22:05:be:02:3d:68:6c:76:3d:c7:f3:7c:1b:37:
         31:67:02:64:2d:1e:75:fa:19:7c:b3:63:75:ed:97:50:3c:03:
         58:1d:67:7d:88:db:62:ec:e3:c4:69:b3:d3:4a:e3:86:df:ee:
         a6:08:08:f5:d9:56:b4:79:de:21:cf:05:e6:45:1b:98:b5:c5:
         b2:8d:1f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:04 2025 by rpki-client