Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130372e302f32342d3234203d3e203533313038.roa
File:                     3136372e3234392e3130372e302f32342d3234203d3e203533313038.roa (raw, json)
Hash identifier:          KNZQvdMd4m1DCX1pe/2C5qJ4mCWhI+TlGqJNQT6zsNI=
Subject key identifier:   AB:92:95:16:F3:4C:78:59:2D:A6:D0:75:E6:70:A3:39:11:A0:BC:31
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       2976D3961E0F178C310B839D63ADC3C625195D8C
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130372e302f32342d3234203d3e203533313038.roa
Signing time:             Tue 11 Feb 2025 12:04:31 +0000
ROA not before:           Tue 11 Feb 2025 11:59:31 +0000
ROA not after:            Tue 10 Feb 2026 12:04:31 +0000
asID:                     53108
IP address blocks:        167.249.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:76:d3:96:1e:0f:17:8c:31:0b:83:9d:63:ad:c3:c6:25:19:5d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 11 11:59:31 2025 GMT
            Not After : Feb 10 12:04:31 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:97:ce:b2:93:a1:3a:ad:2b:d7:2b:3e:ac:
                    b9:c9:1b:8e:1c:20:55:d1:d9:a4:c3:7d:45:9c:d2:
                    bf:55:1f:6c:97:87:8f:f0:89:6e:51:33:a6:82:75:
                    6f:34:ad:cc:15:ea:29:ce:9f:d6:7f:b6:9f:2f:0d:
                    9c:60:0e:43:5d:ab:d6:b0:05:50:c6:d7:7e:03:b2:
                    5f:e8:04:0d:4a:54:09:ab:ab:7b:00:ef:42:1e:f2:
                    55:4b:ef:81:1c:40:10:0e:82:48:b8:e0:f6:1b:8f:
                    e4:c3:eb:44:2f:02:04:d3:ed:07:03:9d:87:12:f8:
                    f2:66:3c:7a:4e:a4:5f:aa:3e:7f:1c:10:c0:20:3a:
                    cd:a3:63:e5:e2:01:4e:d7:e2:65:3c:ae:6e:20:1b:
                    47:7d:d3:4c:c5:2e:4d:2e:37:c3:b8:10:25:65:5f:
                    ec:c0:dd:62:b6:75:01:85:0d:f4:03:ae:87:89:45:
                    3c:8f:bb:b1:b4:25:ff:f7:d9:4e:b6:cc:8d:b6:aa:
                    16:9a:64:5c:a3:5b:5a:5b:75:80:42:8b:e7:d1:03:
                    16:6c:0e:0e:55:e3:28:4a:0e:8c:33:4a:fe:9d:1e:
                    75:aa:64:be:e0:f7:a3:f2:c1:bd:39:96:1f:7b:f8:
                    e6:40:a6:d4:48:82:09:85:ca:f3:da:14:15:71:f0:
                    93:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:92:95:16:F3:4C:78:59:2D:A6:D0:75:E6:70:A3:39:11:A0:BC:31
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/3136372e3234392e3130372e302f32342d3234203d3e203533313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:ed:78:db:e8:e5:25:28:45:0a:08:7e:78:22:79:33:f9:13:
         c8:7e:06:a7:26:c6:d7:28:02:3e:de:2f:9d:06:c5:06:5e:a6:
         9d:26:d3:a3:d1:d7:26:41:a5:8f:14:11:27:18:fe:00:be:12:
         d9:a5:51:3b:27:cb:f3:2f:c9:95:58:6c:b5:18:c1:5d:b5:19:
         40:b2:90:08:a9:41:78:84:a6:b4:a5:9d:c1:5c:5f:0f:3a:fd:
         ec:44:ff:66:cf:2a:a5:46:28:fa:b3:38:4c:1a:f6:b7:eb:d1:
         15:37:66:bc:d7:7b:c7:31:88:78:84:3c:72:00:bc:8e:65:a4:
         59:22:fa:42:c0:18:88:30:00:68:a3:61:4e:fe:b5:64:2b:f6:
         22:a3:a0:86:a0:f4:d6:6c:da:1a:ee:1c:9c:57:4c:76:d2:cc:
         e1:e2:a1:3d:ed:3b:a8:e7:f4:2e:43:6f:f9:6e:8b:6a:1a:de:
         41:4b:63:26:dc:c8:ac:06:3a:5b:5e:2a:86:ca:d8:78:1b:28:
         51:5c:5e:33:d0:81:85:9a:cf:4b:cd:9f:f4:12:93:dc:fb:25:
         84:b9:5a:85:e7:b2:a7:5b:cb:a2:4c:aa:10:89:63:40:ef:5a:
         29:bd:9d:2c:9f:28:ab:79:78:bd:e4:55:eb:b2:1c:48:d2:e4:
         ad:12:ab:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:24 2025 by rpki-client