Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/3139312e372e3137362e302f32312d3332203d3e20323633333236.roa
File:                     3139312e372e3137362e302f32312d3332203d3e20323633333236.roa (raw, json)
Hash identifier:          yArW7PN/6lj2sBD7HUaTxyQvvCGwGUToj1gK5znQO/g=
Subject key identifier:   77:C6:9F:23:34:2A:15:5C:88:59:34:1C:07:8A:AE:47:51:1F:7D:64
Certificate issuer:       /CN=D9B55DE2DD29456B0CFB2ED28184374EBCA8DE9B
Certificate serial:       2EDDF1BB96DCCAF8F093A2DD81F9FDA0D71D8563
Authority key identifier: D9:B5:5D:E2:DD:29:45:6B:0C:FB:2E:D2:81:84:37:4E:BC:A8:DE:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B55DE2DD29456B0CFB2ED28184374EBCA8DE9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/3139312e372e3137362e302f32312d3332203d3e20323633333236.roa
Signing time:             Fri 04 Oct 2024 23:13:13 +0000
ROA not before:           Fri 04 Oct 2024 23:08:13 +0000
ROA not after:            Fri 03 Oct 2025 23:13:13 +0000
asID:                     263326
IP address blocks:        191.7.176.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:dd:f1:bb:96:dc:ca:f8:f0:93:a2:dd:81:f9:fd:a0:d7:1d:85:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B55DE2DD29456B0CFB2ED28184374EBCA8DE9B
        Validity
            Not Before: Oct  4 23:08:13 2024 GMT
            Not After : Oct  3 23:13:13 2025 GMT
        Subject: CN=77C69F23342A155C8859341C078AAE47511F7D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:38:5f:59:5c:8a:01:69:e1:86:8b:a8:4c:
                    71:6f:ee:df:95:7b:a0:c9:b2:60:7e:c0:43:0d:a2:
                    67:34:7d:82:40:f9:71:1e:a0:34:c8:36:b9:8c:22:
                    02:af:69:7b:a4:23:93:cd:b4:08:73:ba:e0:b3:a7:
                    d2:73:cb:61:76:13:51:37:6b:6a:eb:5e:e9:65:b3:
                    e4:29:73:88:b5:dd:8c:05:50:23:88:97:9b:dd:7c:
                    42:6a:e4:2e:6d:2e:22:42:fa:00:76:01:6a:bc:f0:
                    95:d0:4c:39:d4:79:ca:39:09:bb:96:88:25:f4:88:
                    c8:c8:ae:52:57:80:e6:ef:bb:0e:08:ad:9f:1f:0f:
                    8f:14:68:67:47:a2:95:a5:bd:7a:a3:2d:9f:28:a6:
                    dd:58:ca:d2:b0:dc:80:ad:17:e1:5c:b0:2e:04:d1:
                    40:e4:70:04:41:2a:3b:5e:52:62:3b:63:40:d8:3e:
                    fb:bd:e6:bc:1a:66:04:75:5e:e6:df:ac:b3:8f:e2:
                    1d:bd:ff:1a:ca:e3:b6:07:eb:ce:ca:c3:16:1b:ff:
                    40:4e:33:df:cb:28:6e:3e:df:9e:57:b5:f8:16:2d:
                    d6:b0:3b:a8:d5:31:65:a9:80:30:ae:29:f0:c6:08:
                    5e:57:17:4d:b1:df:eb:a1:3c:17:5e:d6:7d:ec:97:
                    c2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C6:9F:23:34:2A:15:5C:88:59:34:1C:07:8A:AE:47:51:1F:7D:64
            X509v3 Authority Key Identifier:
                keyid:D9:B5:5D:E2:DD:29:45:6B:0C:FB:2E:D2:81:84:37:4E:BC:A8:DE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/D9B55DE2DD29456B0CFB2ED28184374EBCA8DE9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B55DE2DD29456B0CFB2ED28184374EBCA8DE9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/3139312e372e3137362e302f32312d3332203d3e20323633333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:b2:2e:e7:f4:ad:39:6e:45:c2:27:bb:4d:ab:9c:c8:a8:0b:
         2c:c4:89:dd:f5:e0:9c:8e:9c:0a:2c:a4:1d:ab:a3:95:a1:4b:
         2f:2b:9f:b7:96:6c:2f:10:1f:95:0f:88:a3:34:f9:e5:62:48:
         ea:dc:a9:4b:d3:99:ad:2f:4d:2d:aa:4a:02:3f:0c:c5:b3:65:
         1d:f4:82:db:ff:3b:9f:a3:38:70:1f:ac:6d:24:a7:59:34:6f:
         d8:d0:54:6e:93:12:64:16:6a:ea:1d:9f:22:9e:95:4c:56:7c:
         cc:0d:2f:3d:e0:b9:8c:5d:23:9b:15:e5:64:75:5b:41:b1:68:
         fb:bc:ba:50:c0:b3:0b:b6:d0:ce:03:1f:7f:b1:b6:85:60:34:
         c6:28:eb:6c:65:03:4b:e2:11:83:93:f6:fe:22:83:ac:40:f5:
         f1:34:24:7a:2c:8f:3a:a7:c2:f4:d6:2a:80:58:77:3f:e0:4b:
         4a:39:dc:38:18:81:0c:8a:ca:44:32:39:a6:3f:2b:7a:e0:70:
         3f:72:b9:7a:65:d1:12:29:0c:af:b8:42:23:c8:3c:33:b3:fe:
         8d:6c:91:49:6c:d9:cc:c7:80:f4:18:54:8b:ff:e9:e5:3f:a5:
         9a:f3:87:b4:6e:91:65:04:fe:a8:b1:1c:1c:b9:d3:b6:ee:54:
         b1:4d:e5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:16:07 2025 by rpki-client