Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3137392e3132372e36342e302f32312d3234203d3e203238323837.roa
File:                     3137392e3132372e36342e302f32312d3234203d3e203238323837.roa (raw, json)
Hash identifier:          0KToTp9CpVfqDYKPeN9Y4fmfnImqw3BSD7cmaSIzyMw=
Subject key identifier:   B3:F0:DA:3D:0E:9F:7F:4E:6B:31:65:7C:6A:CF:A6:84:EC:FC:CF:C9
Certificate issuer:       /CN=0234F91A291644025C2C2460D355272A046B58DD
Certificate serial:       650C1545526C92DFE369FFA777C9A92BE1A70931
Authority key identifier: 02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3137392e3132372e36342e302f32312d3234203d3e203238323837.roa
Signing time:             Mon 22 Jul 2024 18:02:17 +0000
ROA not before:           Mon 22 Jul 2024 17:57:17 +0000
ROA not after:            Mon 21 Jul 2025 18:02:17 +0000
asID:                     28287
IP address blocks:        179.127.64.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0c:15:45:52:6c:92:df:e3:69:ff:a7:77:c9:a9:2b:e1:a7:09:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0234F91A291644025C2C2460D355272A046B58DD
        Validity
            Not Before: Jul 22 17:57:17 2024 GMT
            Not After : Jul 21 18:02:17 2025 GMT
        Subject: CN=B3F0DA3D0E9F7F4E6B31657C6ACFA684ECFCCFC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:70:f9:a9:f2:65:24:5c:61:91:c1:5d:dd:
                    27:c3:6b:cb:01:9a:78:37:f8:33:ab:ff:e6:1e:7e:
                    77:da:7f:ad:80:5d:a2:83:c9:52:2e:c3:59:97:2d:
                    eb:79:fe:b5:1f:51:e6:ba:e0:fb:d8:01:85:21:c7:
                    6b:86:9c:06:f2:e0:bc:88:45:62:f3:d4:15:35:a3:
                    ac:fb:8d:05:a6:49:fb:18:6b:7e:1c:3c:60:0d:24:
                    b9:20:5b:38:e3:01:8a:b1:a5:55:b8:90:03:e2:7e:
                    d5:b5:3b:8f:5b:41:8e:c4:60:84:a2:9b:71:97:dd:
                    b8:f4:6c:b4:20:83:57:9b:de:a1:7d:47:4c:63:7a:
                    4f:fa:7c:0a:55:f0:5c:df:23:4c:33:9a:b7:8c:54:
                    c7:ae:8c:45:6a:7e:3a:76:62:31:dd:f3:07:e5:9f:
                    be:de:c0:2a:ab:35:6d:bf:b0:12:bd:f3:20:32:84:
                    b3:17:7e:ce:34:2c:3d:78:75:ef:52:39:41:b7:83:
                    a7:d0:53:60:57:5b:38:79:06:b1:69:80:2b:04:0a:
                    76:80:98:fe:3d:f7:54:7a:c7:a5:80:e6:4a:4c:e2:
                    b5:99:60:da:5e:07:52:db:58:80:b1:ac:3d:39:a4:
                    ce:75:84:0d:44:55:10:ab:32:b6:76:77:ec:7b:da:
                    a3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F0:DA:3D:0E:9F:7F:4E:6B:31:65:7C:6A:CF:A6:84:EC:FC:CF:C9
            X509v3 Authority Key Identifier:
                keyid:02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/0234F91A291644025C2C2460D355272A046B58DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3137392e3132372e36342e302f32312d3234203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c6:53:09:d6:c6:91:85:10:b0:ec:be:46:4d:58:cf:b0:71:42:
         6d:b1:14:31:0f:d6:96:7e:33:d9:e2:88:6d:82:e6:9d:03:4d:
         e9:86:52:37:63:d1:f3:34:8f:b3:89:f4:e4:0f:17:38:2f:06:
         be:3b:b6:f4:38:8e:e4:49:4f:bd:fb:d3:6e:98:db:99:a1:5c:
         7f:77:43:b7:fd:b9:5e:ba:09:fb:b2:97:b1:a2:30:47:03:68:
         19:00:f8:d0:a7:a7:78:22:e2:d3:fa:b0:9e:8c:ce:3e:76:af:
         45:2a:7d:54:30:18:dd:89:9c:e9:9b:6b:17:66:2e:68:bf:35:
         f1:0f:e4:4e:ab:8a:3e:3a:02:e5:61:7d:f1:f7:74:c1:46:d3:
         57:ba:37:50:51:88:47:73:17:4a:57:c5:26:f5:1d:45:a8:e4:
         3d:e5:dc:37:fc:0a:90:fa:dd:90:71:88:71:e9:ad:86:76:89:
         9c:67:5e:1f:30:0c:39:11:71:ee:1e:ab:73:f2:6c:d4:ae:bb:
         62:cf:08:e5:e7:ee:15:72:3b:e6:f4:ec:dd:13:5d:2d:6b:14:
         9d:df:1b:a4:c1:6d:ce:ad:c1:a1:2f:48:68:71:7b:7b:08:e1:
         10:7e:ed:fa:e3:5a:26:e7:68:ca:71:e0:c8:ac:2d:6a:b9:67:
         81:99:d7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:53 2025 by rpki-client