Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32342e302f32322d3232203d3e20323633343131.roa
File:                     3137392e39372e32342e302f32322d3232203d3e20323633343131.roa (raw, json)
Hash identifier:          8GSja9/Cg76Z+USW5Dlq7trtHQNr5llB2lC+HkA4WP8=
Subject key identifier:   AA:DA:D7:3C:24:FC:07:99:5D:4F:91:ED:08:3B:8D:B2:27:FB:05:DE
Certificate issuer:       /CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
Certificate serial:       287971EB7271C8C8AE971407B0F478C95E0C013B
Authority key identifier: 8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32342e302f32322d3232203d3e20323633343131.roa
Signing time:             Tue 30 Jan 2024 14:56:10 +0000
ROA not before:           Tue 30 Jan 2024 14:51:10 +0000
ROA not after:            Tue 28 Jan 2025 14:56:10 +0000
asID:                     263411
IP address blocks:        179.97.24.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:79:71:eb:72:71:c8:c8:ae:97:14:07:b0:f4:78:c9:5e:0c:01:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
        Validity
            Not Before: Jan 30 14:51:10 2024 GMT
            Not After : Jan 28 14:56:10 2025 GMT
        Subject: CN=AADAD73C24FC07995D4F91ED083B8DB227FB05DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:c3:fe:c2:cd:a7:26:6c:fd:7d:5d:f1:d6:
                    01:c3:c6:f6:9e:10:3c:bb:8f:6e:0a:a7:ea:f8:31:
                    9c:1a:e1:6b:86:8d:4e:07:75:45:5c:b9:6f:2e:48:
                    59:e1:14:6e:80:cd:ba:0f:86:84:d6:9f:4c:b4:91:
                    01:16:02:50:95:94:c4:b1:0e:a4:55:be:ae:34:c9:
                    4a:d8:23:32:93:a2:91:1b:63:9f:1e:b9:78:d0:19:
                    e2:41:0a:0e:c4:9b:bc:d6:a4:fb:bb:04:fa:83:b6:
                    fc:97:23:a7:e8:0e:16:9e:55:a1:ab:60:fa:14:56:
                    41:d3:fd:0c:cf:ee:0b:39:31:66:0d:0e:c9:d8:62:
                    07:60:a7:2f:eb:82:ba:5a:8a:07:b3:94:7d:64:1b:
                    ce:29:07:48:91:02:de:9c:2d:1f:b0:fa:79:35:ae:
                    d5:44:6e:a2:04:b5:dd:28:ad:23:4e:db:86:90:60:
                    cb:f3:5b:de:22:78:53:70:a8:e7:92:62:9c:c7:b4:
                    06:fe:d7:a3:b2:b1:07:b6:29:97:93:d5:d9:be:ee:
                    74:d7:52:60:f3:68:83:c2:e7:08:49:90:96:98:52:
                    bd:3e:eb:9b:71:6a:2a:5a:69:01:ca:a8:50:53:b1:
                    4e:33:95:d7:20:24:68:df:92:b1:9c:12:5c:fa:89:
                    f4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DA:D7:3C:24:FC:07:99:5D:4F:91:ED:08:3B:8D:B2:27:FB:05:DE
            X509v3 Authority Key Identifier:
                keyid:8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32342e302f32322d3232203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:9d:e9:f1:6a:df:fe:ae:20:11:8c:c3:ff:f9:47:ec:1f:7a:
         43:e0:dc:4f:3c:21:c4:2c:ee:08:05:7b:fb:f2:f2:c6:d9:f1:
         3c:c7:8c:61:5d:33:b4:a0:ed:42:bd:8f:0b:98:4a:3e:69:a6:
         43:10:c0:0b:c3:5d:6a:01:78:53:54:dc:22:26:2c:62:0c:40:
         e5:2f:4c:2d:57:df:2c:7d:cc:e2:74:3d:9a:fd:e9:40:64:59:
         17:bd:97:0f:1c:43:f6:04:f5:fb:79:f0:32:24:2b:f4:94:31:
         e7:66:66:91:8a:76:b9:c7:5d:b5:47:ce:a9:20:f7:80:df:bf:
         f8:7a:60:c2:1b:f2:07:a1:df:32:54:c4:bc:f2:0b:ba:c4:49:
         11:2b:a5:8b:f3:82:e2:74:62:22:d3:b9:83:70:3f:f8:db:fa:
         33:84:2f:58:78:81:a9:0b:a6:1a:cf:0e:ee:a7:b5:e3:0c:f6:
         5f:78:c1:7c:95:c5:ef:fa:3e:a4:80:9a:cb:3a:2d:bf:f6:69:
         10:78:68:50:c5:43:47:69:07:0d:3e:a5:1e:f5:0b:d8:07:09:
         1f:1a:4f:c2:e6:83:f9:87:e3:1d:4f:d2:aa:af:65:0e:b8:45:
         00:88:bf:bd:3e:4d:41:cc:2f:a1:61:dc:4c:d0:8b:26:f8:c5:
         56:e5:06:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:01:45 2025 by rpki-client