Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130352e302f32342d3234203d3e203238313234.roa
File:                     3136372e3234392e3130352e302f32342d3234203d3e203238313234.roa (raw, json)
Hash identifier:          3HSqORVW7QP16MNN3q3tG7mxVuaTq0urMobK/VRgVHU=
Subject key identifier:   F4:E2:28:4C:C4:6C:6E:D6:EA:41:1E:5C:96:BD:6A:DD:F9:BE:82:45
Certificate issuer:       /CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
Certificate serial:       3403126E6644FE0D981D6F5EA17FD68363942714
Authority key identifier: AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130352e302f32342d3234203d3e203238313234.roa
Signing time:             Thu 02 Feb 2023 20:00:02 +0000
ROA not before:           Thu 02 Feb 2023 19:55:02 +0000
ROA not after:            Thu 01 Feb 2024 20:00:02 +0000
asID:                     28124
IP address blocks:        167.249.105.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:03:12:6e:66:44:fe:0d:98:1d:6f:5e:a1:7f:d6:83:63:94:27:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB9B3905E93FDE63A41BF51929A3CADCCA064AB
        Validity
            Not Before: Feb  2 19:55:02 2023 GMT
            Not After : Feb  1 20:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:7f:a6:c2:d7:fc:54:4a:a8:5e:69:ed:b9:
                    a1:46:5e:26:f8:bf:1d:df:a5:96:5b:f5:8f:8b:bd:
                    96:a0:1f:cc:60:19:35:62:ab:92:bc:a3:a5:ca:14:
                    88:b0:8f:ea:f4:2f:0f:3d:da:50:b1:09:73:e7:4d:
                    5b:8a:1c:0c:d2:9d:b6:05:9e:63:fd:d3:ce:45:8b:
                    11:54:89:61:74:ff:60:89:da:69:35:d8:e7:47:aa:
                    a8:96:7e:cf:9f:ab:be:2c:f5:4f:bc:46:14:3f:8c:
                    2e:68:08:b6:21:8a:55:1c:70:a3:e3:2c:a4:95:21:
                    59:09:70:00:a7:49:2c:c6:7b:7c:fe:ce:be:d4:ff:
                    75:e0:e0:69:73:18:1a:49:66:13:9c:2f:da:1d:3c:
                    81:29:ce:e2:c3:63:e8:96:36:e6:0c:11:35:52:c1:
                    4a:d5:2f:eb:4b:8f:05:6e:a9:9c:72:bd:ae:f2:9a:
                    cf:8b:27:ea:9a:69:b3:6b:a6:1a:0b:13:2f:0c:c7:
                    fd:de:e0:b6:44:c0:6c:e1:27:3c:02:9b:43:43:a4:
                    10:6a:a1:39:5a:27:d3:f4:9a:c4:f0:d1:04:df:ef:
                    15:9b:4c:5a:8e:b5:eb:2b:2a:b4:19:3d:d3:db:11:
                    07:91:0a:b9:e5:10:c7:4d:b9:6c:67:23:90:72:31:
                    c8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E2:28:4C:C4:6C:6E:D6:EA:41:1E:5C:96:BD:6A:DD:F9:BE:82:45
            X509v3 Authority Key Identifier:
                keyid:AA:B9:B3:90:5E:93:FD:E6:3A:41:BF:51:92:9A:3C:AD:CC:A0:64:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AAB9B3905E93FDE63A41BF51929A3CADCCA064AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/0/3136372e3234392e3130352e302f32342d3234203d3e203238313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:25:94:41:3f:74:42:27:ae:e3:01:32:63:c4:8e:fb:81:4c:
         05:65:6c:e1:e1:08:99:75:09:50:86:ee:ec:5d:d1:53:2f:18:
         8a:4b:07:42:33:2c:ea:3f:24:20:cf:73:84:18:42:0c:5e:f9:
         7c:71:98:08:c0:d7:9b:d9:b0:cd:29:6a:3f:a1:b5:85:da:42:
         06:54:55:59:b6:a9:69:a6:8e:b4:50:8f:3b:c7:cb:d2:32:67:
         3f:1a:fa:12:b9:39:93:b5:3d:e3:31:f0:32:7a:42:8b:78:c9:
         22:d5:2c:cd:1d:f1:63:d2:df:8b:74:de:90:e1:a0:47:fb:5c:
         08:ac:cc:8b:6b:a4:b0:b9:e8:35:3b:64:32:dc:08:ae:40:b5:
         6f:43:5c:50:52:86:ba:ae:09:ff:69:e2:77:03:8b:ad:7d:9f:
         fe:93:4f:05:d9:d3:5e:e9:7f:0d:3c:5d:8b:2c:00:6f:ba:a9:
         7c:8b:36:18:4c:2a:d9:0b:a5:d1:14:4c:8c:aa:e0:7f:bf:04:
         d6:b7:ae:99:9c:1c:14:09:51:90:35:3e:4e:05:b5:ea:6c:34:
         61:75:34:7b:19:a3:d4:c3:f4:ae:af:cf:b9:52:b0:23:90:91:
         b2:77:af:53:46:a4:19:2f:d6:31:7f:cb:4d:37:48:5b:f3:98:
         7e:ec:c7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:10:50 2025 by rpki-client