Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/32342e3135322e332e302f32342d3234203d3e20323730343830.roa
File:                     32342e3135322e332e302f32342d3234203d3e20323730343830.roa (raw, json)
Hash identifier:          yLCwQkxDf9BYzvTr9vL4g40yQIWiN3Lz90IP3+yTjTg=
Subject key identifier:   CC:E7:06:69:16:2B:3A:98:C8:CA:9F:DE:3F:5A:37:26:7C:D2:3C:79
Certificate issuer:       /CN=AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E
Certificate serial:       4832404AFCC481F3DF7EEAE9B4EA0117BFD6BE14
Authority key identifier: AF:FD:1A:00:01:4B:E8:25:E2:7B:1D:BE:87:E9:73:BA:D5:D8:1A:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/32342e3135322e332e302f32342d3234203d3e20323730343830.roa
Signing time:             Wed 24 Nov 2021 03:47:21 +0000
ROA not before:           Wed 24 Nov 2021 03:42:21 +0000
ROA not after:            Wed 23 Nov 2022 03:47:21 +0000
asID:                     270480
IP address blocks:        24.152.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:32:40:4a:fc:c4:81:f3:df:7e:ea:e9:b4:ea:01:17:bf:d6:be:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E
        Validity
            Not Before: Nov 24 03:42:21 2021 GMT
            Not After : Nov 23 03:47:21 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:46:79:44:35:57:73:74:5b:97:8b:0c:8d:af:
                    ad:60:8a:28:e8:6c:9a:05:1d:09:61:0a:ed:37:b6:
                    c8:68:14:32:65:c2:cf:9e:7f:fd:1d:2a:39:12:10:
                    b4:b8:f7:42:6d:45:af:eb:19:8a:c3:23:26:58:f6:
                    16:bf:fd:36:49:4d:1b:9c:23:13:f3:29:1e:a7:8e:
                    c0:69:c9:df:b1:e5:9c:44:2b:13:7e:94:49:fb:31:
                    56:c3:40:a6:43:3a:e1:bd:6a:21:44:9b:52:6e:c1:
                    63:b9:ac:9a:77:0a:a6:4a:cd:1f:ad:1c:72:3f:88:
                    05:15:86:50:bf:75:40:44:f9:d6:98:f8:f4:07:c7:
                    be:4e:53:8c:5b:6e:17:d8:45:00:61:26:cd:76:37:
                    4d:42:33:cd:81:31:53:49:ee:64:eb:e2:c0:ed:58:
                    dc:ea:72:d9:b8:92:6d:e5:30:55:e7:52:43:c6:e1:
                    ab:ee:69:66:50:71:13:75:97:38:b3:32:14:55:78:
                    ba:ad:18:e4:ba:8e:e3:f0:53:c2:5f:57:18:9a:2a:
                    14:d1:c6:db:69:03:59:55:b6:9d:11:89:a4:36:af:
                    d4:3c:32:fa:f3:ce:1d:0b:85:78:9d:ba:c3:18:68:
                    5f:e1:73:0c:e0:3a:be:e2:0d:38:94:92:92:51:db:
                    b2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E7:06:69:16:2B:3A:98:C8:CA:9F:DE:3F:5A:37:26:7C:D2:3C:79
            X509v3 Authority Key Identifier:
                keyid:AF:FD:1A:00:01:4B:E8:25:E2:7B:1D:BE:87:E9:73:BA:D5:D8:1A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/32342e3135322e332e302f32342d3234203d3e20323730343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:41:f7:89:a8:39:b1:68:0b:c3:0a:c4:ae:9a:f5:2d:f7:9e:
         5a:58:86:68:0a:20:80:a6:de:43:6c:36:c6:9a:e3:dc:24:11:
         30:10:88:25:d5:91:e1:b8:5b:13:5b:f5:5a:c5:73:a8:76:f5:
         0b:20:74:31:ae:99:6a:27:a3:5b:cb:12:35:98:12:c8:e3:52:
         01:cd:1e:b4:50:14:ee:5c:ea:9b:fc:35:b0:48:07:2c:29:0b:
         ed:b4:ba:cc:ca:4c:be:db:e4:2b:93:fd:42:5d:6b:1c:fd:9f:
         57:c9:4a:5b:7e:b6:c6:03:20:da:8a:ad:ac:43:d9:5c:7c:68:
         3a:6b:e7:21:ee:bd:ed:6b:8f:ef:aa:89:19:50:bc:cf:d4:10:
         f8:48:2f:42:94:f6:31:27:5e:da:b6:68:b9:0c:4c:ca:6f:b7:
         36:e8:81:90:1c:23:a5:6e:f2:4a:aa:4e:4e:18:30:30:56:03:
         2a:48:bc:26:94:58:a6:3c:8f:ac:1a:82:b5:84:48:4e:e6:a1:
         25:55:9e:25:62:08:fe:19:9a:47:36:09:98:40:7d:32:97:b9:
         ba:1b:11:d0:7e:15:ec:68:cc:ff:6d:99:97:4f:aa:9e:e5:a1:
         7d:95:53:98:29:a0:f2:48:2a:7c:bb:ad:e0:e0:66:80:d0:ac:
         61:38:a3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:48:57 2025 by rpki-client