Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e33302e302f32342d3234203d3e20323633343131.roa
File:                     3137392e39372e33302e302f32342d3234203d3e20323633343131.roa (raw, json)
Hash identifier:          OXA6beDEkqHmWcP+866fwCu5RIP+7MdWr4LO4B+nQ2Y=
Subject key identifier:   7B:AE:B4:F4:13:A5:A0:37:1F:80:03:F4:21:46:54:E3:5E:BC:D3:5C
Certificate issuer:       /CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
Certificate serial:       10D6E1977419564A23681C0D8E7E9336BC5D9A41
Authority key identifier: 8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e33302e302f32342d3234203d3e20323633343131.roa
Signing time:             Tue 30 Jan 2024 14:56:03 +0000
ROA not before:           Tue 30 Jan 2024 14:51:03 +0000
ROA not after:            Tue 28 Jan 2025 14:56:03 +0000
asID:                     263411
IP address blocks:        179.97.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d6:e1:97:74:19:56:4a:23:68:1c:0d:8e:7e:93:36:bc:5d:9a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
        Validity
            Not Before: Jan 30 14:51:03 2024 GMT
            Not After : Jan 28 14:56:03 2025 GMT
        Subject: CN=7BAEB4F413A5A0371F8003F4214654E35EBCD35C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:85:95:0a:d4:63:9a:5d:fc:e1:46:b3:b8:d6:
                    22:71:f8:55:ac:5a:c4:3f:11:1d:19:bc:4e:40:e9:
                    d5:e0:bf:b7:5d:23:14:9e:c8:e5:52:31:73:46:2d:
                    57:72:84:e0:a8:4f:d6:36:3f:db:dc:b8:aa:d8:56:
                    2c:bb:f9:6b:aa:8f:74:2f:67:af:a0:27:3c:9a:56:
                    00:89:ad:e3:e0:1e:e9:af:e8:55:11:1a:d7:35:aa:
                    6f:97:8c:c4:b1:0c:57:42:32:ab:1d:87:f1:cb:83:
                    0b:94:29:f1:7e:27:5a:f0:01:c8:81:c3:90:3c:b8:
                    01:f4:85:bb:f9:96:b0:e7:cf:99:3f:de:8a:38:44:
                    04:24:de:38:92:36:01:08:06:ca:42:7d:38:07:17:
                    0d:61:bb:68:a7:4b:71:82:c7:46:fd:c4:63:ad:4c:
                    a1:26:ea:30:32:d5:fb:c3:50:ec:31:bd:8f:ba:c1:
                    d9:c6:41:5d:f3:6b:c7:5f:bb:f3:62:8e:8d:b2:44:
                    9a:41:7f:bc:f2:85:70:2f:49:eb:22:d1:31:81:8a:
                    3a:91:43:37:4c:6e:a6:ed:7e:32:26:b9:c7:67:f6:
                    27:bc:b6:4f:dd:00:56:65:e9:e0:6a:92:c3:85:78:
                    7d:42:a9:33:02:a7:cd:7f:9e:e7:a6:e8:83:6c:5c:
                    77:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AE:B4:F4:13:A5:A0:37:1F:80:03:F4:21:46:54:E3:5E:BC:D3:5C
            X509v3 Authority Key Identifier:
                keyid:8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e33302e302f32342d3234203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:fa:bd:50:1b:96:41:d8:ac:c1:f8:e9:c7:25:f7:07:5f:93:
         a8:7e:26:3d:ac:31:da:54:11:7c:d9:79:c4:0c:b7:c5:b5:2e:
         e1:65:09:e1:82:5a:22:86:5c:80:55:26:1d:13:a6:a5:9a:1f:
         fd:94:f6:b6:8c:69:53:c2:01:a2:24:7d:2f:cf:ce:f5:26:0f:
         71:8c:53:09:22:c9:01:a0:ca:aa:96:e9:eb:d2:c8:1c:a7:90:
         90:c2:84:6b:df:4b:1e:22:bf:1b:5f:2e:7e:30:69:c2:3c:21:
         87:f9:c4:66:b3:7d:ba:11:4d:f9:d5:4d:e9:a5:12:17:90:53:
         d6:12:5f:cc:7b:16:b7:4f:57:e1:38:c9:54:5f:5d:24:36:cb:
         c0:27:0a:8d:85:73:e3:9d:ed:e7:bb:2b:4a:75:11:51:b4:f7:
         79:9a:a7:e2:85:3c:01:a0:d1:d5:4b:af:66:4e:e8:2d:65:c7:
         e1:d6:5d:2b:f8:30:2c:ef:e8:f0:b6:f9:f9:bd:20:79:e0:39:
         58:3a:27:68:37:4d:88:b4:54:ae:5c:58:2c:31:51:40:fb:3e:
         f9:c6:1d:fe:26:e6:5e:3a:da:de:55:a9:c8:49:22:f2:b3:60:
         c2:04:77:e9:45:35:3c:1b:ce:39:c1:00:22:dd:38:55:19:65:
         16:0b:a7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:35 2025 by rpki-client