Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130352e302f32342d3234203d3e203533313038.roa
File:                     3136372e3234392e3130352e302f32342d3234203d3e203533313038.roa (raw, json)
Hash identifier:          7kZtXCd/RrBQgzdjUFIxTLwP2IZ1heRbImGQAayjRog=
Subject key identifier:   BB:8E:A0:DC:2D:BF:A9:2B:EA:61:89:B1:68:33:5F:C7:F7:1B:61:92
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       41C8A5D7ACAA0E090A5B23A7591E973AA98CB5C0
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130352e302f32342d3234203d3e203533313038.roa
Signing time:             Tue 04 Feb 2025 02:19:13 +0000
ROA not before:           Tue 04 Feb 2025 02:14:13 +0000
ROA not after:            Tue 03 Feb 2026 02:19:13 +0000
asID:                     53108
IP address blocks:        167.249.105.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c8:a5:d7:ac:aa:0e:09:0a:5b:23:a7:59:1e:97:3a:a9:8c:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb  4 02:14:13 2025 GMT
            Not After : Feb  3 02:19:13 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:c4:9e:05:d3:95:86:5b:7c:34:71:4c:4f:
                    bb:79:b1:ad:4b:ec:f8:9a:52:87:14:13:46:8b:c5:
                    a1:2f:2c:43:ca:4c:53:89:b2:67:d3:12:64:32:35:
                    d6:95:76:4f:4c:e9:cf:59:66:7e:4a:71:66:17:25:
                    eb:de:55:ca:7d:03:4b:fc:f6:a7:45:f0:4b:e4:4f:
                    66:d1:6f:c7:79:96:ec:78:e7:9d:e8:a3:3b:1c:5e:
                    8c:2f:27:de:d9:bc:b0:ff:06:38:cc:b4:3b:ff:81:
                    8b:7f:81:7d:93:c1:14:c2:75:3f:42:d8:d1:97:25:
                    28:78:4c:7a:7e:7e:b0:83:68:26:14:2f:3d:0a:02:
                    67:d3:33:35:f5:d0:da:b8:0d:57:b0:76:2c:62:2b:
                    02:94:a4:90:e0:89:c9:d6:62:23:3b:eb:ce:d6:0f:
                    d7:ee:30:09:d3:91:d5:df:19:81:2c:36:84:bf:2a:
                    99:9e:11:e9:09:a3:39:66:b4:42:0f:ce:ce:94:17:
                    9e:ed:1b:2f:f5:0c:f8:59:b6:0f:7b:93:1f:2f:56:
                    4a:7a:5f:62:06:93:be:92:48:33:79:7f:83:5e:fa:
                    8d:c6:30:aa:44:04:66:6d:30:7e:40:ce:0e:e0:50:
                    42:f5:ae:af:68:09:6b:33:f9:52:ff:ba:84:85:a7:
                    34:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8E:A0:DC:2D:BF:A9:2B:EA:61:89:B1:68:33:5F:C7:F7:1B:61:92
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130352e302f32342d3234203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:3e:e2:75:bb:83:21:22:27:47:f1:ac:63:8c:09:3e:29:7b:
         d9:d3:54:71:d9:12:7a:de:95:74:e4:01:60:34:8c:df:76:26:
         63:8d:5f:2d:82:27:6c:e5:35:87:9c:7f:cf:99:0d:d2:24:29:
         b3:77:5d:34:6c:8a:34:30:5b:c8:11:9e:06:56:04:d3:04:7e:
         fa:38:ac:d4:8d:61:e6:c7:76:2d:62:a6:9c:c4:b7:64:d8:24:
         3e:23:2a:85:16:2a:3d:15:8f:c1:7c:51:c0:32:9e:4d:92:82:
         53:2f:a4:b4:ff:84:15:ad:81:e1:61:4c:6b:fb:95:6e:fa:de:
         47:2e:20:df:b5:cf:85:8d:84:6c:a7:37:63:35:2d:73:0f:06:
         26:d3:c9:2f:af:64:9c:9f:31:61:b8:e3:6e:62:db:5c:83:07:
         16:4a:46:88:bc:86:9a:57:fb:92:4f:a0:86:96:b1:4d:f7:3c:
         ea:b8:c4:fe:f5:3e:a6:87:b8:b1:6a:be:2e:b7:34:62:bf:f1:
         32:d3:ca:22:98:6c:37:a8:f4:3a:95:07:19:bb:ea:1f:bf:cc:
         44:f7:93:e2:09:86:89:1b:42:36:64:66:40:cc:11:ec:c2:62:
         8d:01:58:83:00:2e:f1:12:2c:4c:34:f1:80:8a:6e:5e:1c:f0:
         dd:b4:da:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:14 2025 by rpki-client