Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32352e302f32342d3234203d3e20323633343131.roa
File:                     3137392e39372e32352e302f32342d3234203d3e20323633343131.roa (raw, json)
Hash identifier:          QtCuQEQN0JOkH1JEH53KYodLevdG50t7kFYhFDPv16M=
Subject key identifier:   D3:DA:95:DF:50:F5:50:20:29:6B:26:71:F0:0B:45:F8:A5:33:77:C4
Certificate issuer:       /CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
Certificate serial:       0918B6FA64750E8D0F5329FF1F3B1B5E60AB21C0
Authority key identifier: 8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32352e302f32342d3234203d3e20323633343131.roa
Signing time:             Tue 30 Jan 2024 14:56:05 +0000
ROA not before:           Tue 30 Jan 2024 14:51:05 +0000
ROA not after:            Tue 28 Jan 2025 14:56:05 +0000
asID:                     263411
IP address blocks:        179.97.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:18:b6:fa:64:75:0e:8d:0f:53:29:ff:1f:3b:1b:5e:60:ab:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
        Validity
            Not Before: Jan 30 14:51:05 2024 GMT
            Not After : Jan 28 14:56:05 2025 GMT
        Subject: CN=D3DA95DF50F55020296B2671F00B45F8A53377C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:06:8e:17:1a:f6:cf:21:7b:bb:1c:6a:94:
                    8d:63:f9:e1:77:a1:7e:16:b9:9a:78:f7:62:3a:86:
                    8b:04:d4:8a:da:6e:84:d6:aa:51:51:5d:f1:33:d3:
                    9f:37:4e:55:c9:a9:1d:dd:45:13:70:06:49:60:e3:
                    6e:17:b4:c5:19:03:9c:62:a2:39:fc:ad:64:29:fa:
                    5e:a4:3e:c6:94:2b:e7:93:fd:f4:59:93:f4:41:fb:
                    33:d8:0b:c9:54:56:a3:92:74:55:43:be:8e:49:73:
                    f9:19:ee:96:61:68:14:8a:6a:44:89:0b:ad:ec:fa:
                    44:9e:3a:2b:bb:17:0a:ab:a0:c3:84:c8:35:9f:43:
                    39:00:90:d6:fa:4e:e7:84:95:0c:b3:e2:a7:56:05:
                    8e:c9:91:22:3c:e0:84:96:9b:3c:84:57:c5:4b:bc:
                    49:f7:a0:d5:36:bd:21:f8:4f:8a:0f:76:f0:d3:51:
                    7e:af:95:ee:8e:4f:9c:93:32:f4:e3:6f:49:33:39:
                    fc:3d:0d:a3:e6:73:47:2b:78:25:4a:e6:f1:ab:3d:
                    5d:0c:02:4c:da:f9:6e:b1:5f:6b:6f:0d:f8:b3:5a:
                    eb:c6:05:04:e2:c0:93:d2:8e:90:31:99:72:b0:23:
                    6a:a4:bf:4c:6b:39:41:0c:68:c6:66:c7:ff:fa:b2:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DA:95:DF:50:F5:50:20:29:6B:26:71:F0:0B:45:F8:A5:33:77:C4
            X509v3 Authority Key Identifier:
                keyid:8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32352e302f32342d3234203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:01:cc:91:01:76:7c:a4:1a:f6:64:78:0b:56:73:3d:1d:44:
         2e:19:9c:f0:41:8b:f1:d4:a7:4a:63:b3:2e:9f:08:f0:10:fa:
         36:5f:67:4b:d3:b4:6d:d6:a6:26:ac:23:e0:65:b3:d7:16:4d:
         47:3e:91:78:ce:fc:08:fb:ba:9c:a2:9b:2c:b9:35:fa:fc:5d:
         51:07:71:31:99:47:5e:7e:be:47:b8:93:e4:19:8c:93:4b:9b:
         99:e1:1f:0d:1c:65:43:1d:eb:bc:ca:c3:5a:78:52:a9:3f:5e:
         c0:2e:34:10:6a:a7:f9:14:fa:88:7a:e1:9c:4e:d1:d3:b6:f6:
         c8:ba:e6:05:e0:e7:27:b6:23:72:90:10:6d:77:09:48:d1:62:
         f7:d7:a3:08:a4:84:fe:ee:99:cc:3d:d1:87:e9:5b:d6:e6:e4:
         95:e6:68:04:be:45:1f:bc:4e:de:25:43:1f:03:53:86:bd:02:
         85:e1:84:0d:ee:d7:2f:49:bb:c2:99:8d:d5:97:84:65:e2:e1:
         b1:22:ec:10:1f:50:c1:3d:8b:2a:ab:23:d6:00:17:d5:7c:a1:
         09:8b:e0:ad:27:57:b3:f0:a5:c8:57:e2:bb:09:1e:60:d4:63:
         b1:29:af:c6:66:4d:5a:8e:8b:b8:21:2d:f1:de:73:e4:5c:6e:
         9d:6a:8d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:38 2025 by rpki-client