Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3230203d3e203238323730.roa
File:                     3137372e37352e3230382e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          VvqhcECKr6Wc8mmjP20v288YV4VzBFhcNv25ce9oQW8=
Subject key identifier:   F2:1A:D1:8F:FD:EC:8B:AA:CD:4F:9A:0D:DC:9C:67:6A:E8:A3:9F:92
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       2ECE5110A497D2BB01D3AFFDDA69D6557A78E055
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3230203d3e203238323730.roa
Signing time:             Thu 07 Nov 2024 20:40:12 +0000
ROA not before:           Thu 07 Nov 2024 20:35:12 +0000
ROA not after:            Thu 06 Nov 2025 20:40:12 +0000
asID:                     28270
IP address blocks:        177.75.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ce:51:10:a4:97:d2:bb:01:d3:af:fd:da:69:d6:55:7a:78:e0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:12 2024 GMT
            Not After : Nov  6 20:40:12 2025 GMT
        Subject: CN=F21AD18FFDEC8BAACD4F9A0DDC9C676AE8A39F92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f0:eb:f0:5e:1e:f3:e3:90:36:a4:e5:c5:40:
                    7d:5d:6b:e3:43:cd:46:5a:e2:11:74:3b:06:4a:8d:
                    23:99:5b:75:f0:f4:74:4a:c4:5f:49:1b:ed:cb:59:
                    6f:6b:1e:54:61:a3:49:e2:00:57:2e:9d:b6:d7:b4:
                    05:1b:93:71:35:14:cc:f4:18:30:64:98:22:b9:58:
                    3e:bd:fc:3b:d5:07:8a:f1:45:a8:d0:86:70:04:3e:
                    8b:62:13:72:30:e4:4a:4c:e6:c2:30:ae:77:6f:25:
                    6d:f0:7c:f5:9f:21:fd:fc:a7:90:15:03:80:63:a4:
                    8f:bc:f0:f7:0d:4d:a6:19:0e:85:55:83:d4:b3:71:
                    87:e9:d4:8f:28:cc:54:8c:14:25:ef:2a:8a:8b:25:
                    d9:07:9f:8d:c2:29:9d:4b:4d:2f:e0:f5:81:53:6f:
                    8a:98:fb:e8:60:47:6f:19:14:15:1c:38:74:dc:27:
                    1f:61:6c:6c:f0:26:a4:36:71:d6:b9:a7:71:a5:97:
                    3e:9a:b4:b2:b8:80:7a:26:0d:d1:da:4a:e4:d4:23:
                    85:b9:e9:5a:e8:ee:cb:8f:11:e6:f8:48:67:f0:42:
                    2b:aa:b1:1d:f2:db:80:46:08:c5:7c:79:c9:0b:65:
                    ba:4c:ab:a7:b9:22:21:c9:46:c9:16:4b:70:c1:51:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1A:D1:8F:FD:EC:8B:AA:CD:4F:9A:0D:DC:9C:67:6A:E8:A3:9F:92
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:22:03:4d:eb:72:8e:26:91:23:67:1a:ab:3f:f5:6a:79:91:
         db:05:7b:0f:d7:db:26:77:35:c1:b3:d6:3f:e1:b4:8b:24:55:
         46:d2:2b:3a:e9:dc:2c:a2:e0:df:eb:45:8d:43:de:97:81:1b:
         ba:e8:9c:74:95:0f:ee:9f:09:b5:48:5d:7c:88:15:ce:51:33:
         f8:88:5e:f1:4a:05:34:ca:fc:77:76:d6:7b:4f:2a:bb:f9:fe:
         91:bd:11:78:ec:2a:47:eb:ec:6d:05:f6:f5:66:a6:38:a0:26:
         f8:f8:ed:d8:09:b7:23:64:96:e6:25:3b:89:76:34:ee:d5:a6:
         7a:e5:bb:8b:55:9d:42:84:63:88:e3:f9:e6:28:00:17:df:d9:
         6c:06:03:51:e0:6e:76:10:d4:11:6d:ad:1c:74:90:be:7e:74:
         08:ed:48:9e:4a:9d:b6:fa:c0:e8:e5:e0:f7:ae:b7:78:d8:08:
         3d:27:1e:df:d2:99:62:55:ce:9a:30:e2:29:5b:07:53:12:61:
         04:92:05:bd:8b:0b:2c:f4:d2:4d:99:49:da:dd:94:14:96:88:
         29:76:5f:15:ed:dc:d5:dc:c0:c7:0a:6c:e9:b3:26:0b:6d:d4:
         4c:ad:cd:10:04:65:8a:66:26:5c:67:8d:9b:40:6b:d7:0d:ce:
         5a:f6:31:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:31:50 2025 by rpki-client