Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/3137392e3130372e3136302e302f31392d3234203d3e203238333030.roa
File:                     3137392e3130372e3136302e302f31392d3234203d3e203238333030.roa (raw, json)
Hash identifier:          oM39Tr2+SulCmnALqHgo3Ex2zgA1GFW4AoxiSGqFuWM=
Subject key identifier:   AB:5F:84:F0:B3:BF:03:64:04:69:E3:74:2D:91:F5:47:E4:1D:0D:CD
Certificate issuer:       /CN=FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E
Certificate serial:       2212C8B2230500047D2FB2EE492D05CED330CF85
Authority key identifier: FC:0F:0B:AA:A7:91:BC:20:BB:92:36:3E:D7:04:50:B3:EA:08:AB:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/3137392e3130372e3136302e302f31392d3234203d3e203238333030.roa
Signing time:             Thu 23 Mar 2023 19:40:12 +0000
ROA not before:           Thu 23 Mar 2023 19:35:12 +0000
ROA not after:            Thu 21 Mar 2024 19:40:12 +0000
asID:                     28300
IP address blocks:        179.107.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:12:c8:b2:23:05:00:04:7d:2f:b2:ee:49:2d:05:ce:d3:30:cf:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E
        Validity
            Not Before: Mar 23 19:35:12 2023 GMT
            Not After : Mar 21 19:40:12 2024 GMT
        Subject: CN=AB5F84F0B3BF03640469E3742D91F547E41D0DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:68:0b:88:da:a8:ec:b8:fb:8d:2b:96:0a:b6:
                    09:3c:de:17:6a:1a:44:5f:1e:88:2a:70:28:19:4f:
                    94:38:ff:1a:61:71:e7:5b:3a:d4:59:f1:6e:7a:0a:
                    5b:99:46:05:31:8e:62:f9:06:89:a5:b2:45:81:1a:
                    08:59:fc:b3:2b:7f:16:2d:18:81:c2:42:68:c5:30:
                    9d:04:e1:3a:d2:3d:37:1e:d9:5d:b8:7e:90:fa:04:
                    88:d8:c4:25:37:ad:44:55:4a:8a:d4:06:e8:69:15:
                    18:95:38:29:6d:9a:1a:e7:91:d7:d0:72:42:53:23:
                    50:36:41:e4:9d:88:2c:fe:78:eb:30:0b:53:9e:10:
                    9a:cb:da:2f:3e:7b:53:54:5a:37:ba:8b:02:44:ac:
                    ef:fa:bb:20:19:26:a7:59:bc:28:cb:39:ef:88:ec:
                    9d:07:41:ea:34:04:df:f6:08:0a:5c:13:61:7e:12:
                    06:4b:ed:7d:95:fc:e3:29:87:f0:5d:fe:9e:dc:d4:
                    90:e9:1a:49:a3:41:88:3f:8f:f8:3d:25:f9:d2:14:
                    69:78:23:db:76:6a:dc:f5:3e:f0:47:32:d6:aa:af:
                    56:6a:48:63:67:df:4a:3a:cc:49:b9:a7:88:67:c3:
                    74:4b:5e:db:89:b7:56:a6:f0:df:b7:ab:eb:67:f9:
                    51:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5F:84:F0:B3:BF:03:64:04:69:E3:74:2D:91:F5:47:E4:1D:0D:CD
            X509v3 Authority Key Identifier:
                keyid:FC:0F:0B:AA:A7:91:BC:20:BB:92:36:3E:D7:04:50:B3:EA:08:AB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/3137392e3130372e3136302e302f31392d3234203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7a:49:b0:77:e5:82:e1:82:d4:b9:04:de:12:7f:84:a5:e9:ac:
         e1:15:0b:4f:58:6c:90:92:5b:d2:0b:f2:14:f4:a6:d1:7d:40:
         f3:52:a3:08:d4:97:f5:81:45:37:d1:74:42:cc:ea:59:5b:b4:
         75:85:78:d4:16:9a:01:13:d6:aa:3b:bd:4f:ac:a4:1c:90:91:
         82:e1:e0:f1:b8:02:0c:43:fb:fc:01:07:b1:a8:01:5c:e3:6d:
         bc:e6:6a:ab:4e:b8:bf:a7:36:e5:20:cf:80:94:0c:52:be:60:
         c7:5c:71:53:e0:b8:26:b1:c2:39:85:46:59:90:2b:a4:7e:e7:
         83:cb:52:d6:27:b0:c1:d0:ce:56:df:39:ad:3a:7f:a0:6e:0a:
         1d:76:7a:b5:28:72:a2:8b:71:da:c7:31:b9:e6:71:78:ce:f2:
         4c:c6:64:4f:be:bc:ae:38:4f:3d:20:9a:60:95:7e:cc:7a:9a:
         2c:21:01:2e:cc:91:c4:9f:8c:59:1a:64:56:49:c6:32:c5:26:
         2a:ec:66:dc:6e:73:7a:5e:ed:b6:41:55:f9:2e:05:1a:e3:83:
         fc:e7:d5:75:14:78:96:4f:21:54:cc:fa:38:9d:9a:d2:ac:1f:
         67:6d:31:92:e9:16:2b:6e:ae:a5:36:e4:97:ad:13:c3:3f:dd:
         80:c2:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:13:54 2025 by rpki-client