Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32362e302f32342d3234203d3e20323633343131.roa
File:                     3137392e39372e32362e302f32342d3234203d3e20323633343131.roa (raw, json)
Hash identifier:          e0YZAQXJLlgj7pxC0LUO8y2cU18BjSb5hHff/jop0Gk=
Subject key identifier:   42:0B:58:B7:DA:38:0D:04:CB:5F:C1:86:48:15:B1:80:A0:AA:AC:8B
Certificate issuer:       /CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
Certificate serial:       537CD039E072C401959ADBBB94686222E8AF29B8
Authority key identifier: 8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32362e302f32342d3234203d3e20323633343131.roa
Signing time:             Tue 30 Jan 2024 14:56:08 +0000
ROA not before:           Tue 30 Jan 2024 14:51:08 +0000
ROA not after:            Tue 28 Jan 2025 14:56:08 +0000
asID:                     263411
IP address blocks:        179.97.26.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7c:d0:39:e0:72:c4:01:95:9a:db:bb:94:68:62:22:e8:af:29:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
        Validity
            Not Before: Jan 30 14:51:08 2024 GMT
            Not After : Jan 28 14:56:08 2025 GMT
        Subject: CN=420B58B7DA380D04CB5FC1864815B180A0AAAC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:39:ce:fd:7b:13:e8:f6:ce:33:a1:c8:3b:
                    37:61:1f:6f:e2:42:87:7a:0a:fe:f0:c9:33:9c:f0:
                    95:ec:ca:9a:7f:43:9d:6a:cc:57:63:44:56:d6:dd:
                    91:a6:ca:e9:b9:fd:f6:87:ed:00:7b:58:1f:40:53:
                    25:39:c0:25:dd:b0:3e:91:d1:a5:0a:1a:66:1c:8a:
                    41:cf:59:f1:51:68:64:55:d6:31:56:2f:f5:8a:2e:
                    c4:58:5a:87:01:8b:6d:28:0f:cb:11:24:db:57:0a:
                    ba:06:0e:b2:fc:f8:33:bf:45:dd:84:ce:2d:e6:31:
                    4a:73:32:78:c6:a1:4c:d7:e0:dc:0a:5e:23:aa:65:
                    f3:1f:b2:84:d0:99:7b:9a:2f:6a:2f:41:5d:9e:98:
                    26:8d:97:c6:0f:f1:d4:65:6e:48:38:0d:74:03:14:
                    71:26:5e:07:e6:49:50:11:b7:4f:b4:a8:ac:7b:5a:
                    54:ed:e0:ea:bf:7a:81:58:e5:11:46:2a:e1:c7:0f:
                    fe:d3:aa:bf:4a:1a:af:e7:75:86:cb:40:9e:a1:f6:
                    00:56:2e:fb:a2:22:31:88:08:1c:f3:65:c7:85:64:
                    d2:9e:76:e7:f6:86:09:9c:52:99:f0:20:04:78:b1:
                    64:8c:b4:cd:2a:db:c6:3f:99:a8:de:ec:55:da:09:
                    3b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0B:58:B7:DA:38:0D:04:CB:5F:C1:86:48:15:B1:80:A0:AA:AC:8B
            X509v3 Authority Key Identifier:
                keyid:8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32362e302f32342d3234203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:40:c5:a3:14:c5:bf:d5:c8:b6:de:81:e4:9c:ca:62:21:b7:
         3f:4a:c8:82:0a:7b:8e:3a:b1:27:ed:9a:de:1d:dd:cd:32:b2:
         62:ef:3f:64:a2:ea:fd:e0:64:ad:87:d7:03:8a:82:b2:f6:13:
         2a:47:30:f6:64:4f:1b:48:77:6a:7d:8a:5f:c6:06:cf:56:72:
         9f:c9:3a:86:8d:d5:83:6f:f8:9a:87:b5:9c:ea:29:ca:45:d0:
         07:3e:28:da:d1:4a:a6:30:b9:23:66:b4:d8:1e:51:0f:86:4c:
         f2:fa:3e:b1:17:c4:f2:36:c5:66:a1:08:8b:bb:91:f2:a3:2f:
         5a:93:f2:4b:44:c5:79:9b:ba:fe:16:91:c0:6d:5d:ca:52:0f:
         fb:d0:84:02:ee:9c:94:32:15:b7:9e:50:74:10:dd:40:cb:eb:
         a6:0c:f0:61:84:8d:f7:3d:ac:6c:50:c7:a0:8f:50:55:68:87:
         cb:3b:22:23:7d:3a:24:3a:93:18:8b:ae:bc:af:f9:a7:1d:2e:
         72:35:c8:6b:01:c2:dc:b7:7c:bf:ee:1c:1e:0f:72:fd:3b:57:
         59:16:ee:4f:70:34:40:f3:da:c7:39:c8:61:41:09:99:7a:65:
         f9:23:89:fc:f0:30:4f:d5:59:76:2b:d7:1d:4f:35:95:f2:ca:
         51:b8:d2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:39 2025 by rpki-client