Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3137392e302e37322e302f32322d3332203d3e20323731343433.roa
File:                     3137392e302e37322e302f32322d3332203d3e20323731343433.roa (raw, json)
Hash identifier:          y8T3V2nc7gGpWZdoaaTDSeY3D459lBrjPuvy17aqDoE=
Subject key identifier:   39:D1:6A:2E:4C:F6:69:7B:89:9C:7E:19:40:18:2A:B6:09:9F:29:4D
Certificate issuer:       /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial:       2BA4B5DFB963994CE41ADA1460D19DAD880D2BD4
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3137392e302e37322e302f32322d3332203d3e20323731343433.roa
Signing time:             Sun 26 Mar 2023 22:09:37 +0000
ROA not before:           Sun 26 Mar 2023 22:04:37 +0000
ROA not after:            Sun 24 Mar 2024 22:09:37 +0000
asID:                     271443
IP address blocks:        179.0.72.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a4:b5:df:b9:63:99:4c:e4:1a:da:14:60:d1:9d:ad:88:0d:2b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
        Validity
            Not Before: Mar 26 22:04:37 2023 GMT
            Not After : Mar 24 22:09:37 2024 GMT
        Subject: CN=39D16A2E4CF6697B899C7E1940182AB6099F294D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:c8:9b:08:48:84:a6:8d:68:60:b8:82:3a:
                    31:cb:67:51:55:48:a0:59:05:89:1e:b0:5b:02:95:
                    c3:04:d4:02:72:1b:d6:13:86:16:3a:c5:68:b5:c1:
                    bd:d5:6c:2a:40:76:3e:be:d2:01:5c:fb:2f:80:b3:
                    90:6d:8b:0d:d0:6c:4e:c0:a5:76:26:12:a6:2c:f4:
                    f6:8c:1a:1c:40:d5:60:48:5c:ab:da:0d:55:de:fb:
                    fe:ae:a5:75:c6:b6:23:82:0d:e8:80:0f:0f:65:fc:
                    19:ad:d9:59:40:4f:c9:24:6f:b0:c0:93:91:8e:cd:
                    b3:56:72:59:fd:29:2e:b7:2f:a5:98:12:d9:66:d3:
                    70:27:f1:16:12:5c:2b:aa:c3:9e:b9:dd:0c:8e:e5:
                    5c:16:d6:25:a2:b1:75:92:1d:4a:7e:e0:bc:f6:8c:
                    5c:60:46:82:ea:91:74:89:e6:97:05:8d:08:be:dc:
                    e3:30:88:34:81:38:d4:58:76:e7:9b:91:12:12:e7:
                    50:39:8e:8a:55:f7:77:a3:9a:9f:af:84:ad:00:4a:
                    37:57:c3:d2:91:fc:95:f7:c4:4e:fa:e0:45:27:a9:
                    e9:4a:38:db:8a:dd:2a:68:8b:c3:3c:e8:a1:27:e4:
                    6d:75:bc:a9:9d:eb:63:61:98:52:d3:b3:49:af:bf:
                    e9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D1:6A:2E:4C:F6:69:7B:89:9C:7E:19:40:18:2A:B6:09:9F:29:4D
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3137392e302e37322e302f32322d3332203d3e20323731343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:e3:c6:04:63:21:51:be:32:1d:9e:d5:80:1b:f3:3c:58:fe:
         c4:a6:57:4a:98:80:28:f5:79:17:0d:38:d7:c5:f6:d6:82:0a:
         2f:7b:c3:21:49:73:ff:ed:4d:48:52:a9:e7:ae:ed:15:84:56:
         07:8d:cc:27:83:db:81:30:48:b2:e5:1d:b8:2f:0c:a7:61:89:
         4b:d0:d9:1f:ec:bd:8a:46:04:c8:c3:81:6d:98:0e:8a:0a:cf:
         6b:43:cb:1f:0d:94:b6:40:b0:ec:ed:75:10:72:c7:a1:2a:61:
         e1:50:63:9c:c7:42:d6:e4:74:10:99:4a:a1:9c:a8:78:b8:b3:
         68:3b:98:e0:b8:2b:ce:65:1d:63:2d:ab:a6:6d:e3:6c:41:d7:
         dc:21:a5:f7:62:ec:2b:94:1f:99:78:12:39:f9:5d:43:ca:0e:
         9b:a1:8e:ac:b7:e1:5d:58:9c:1b:cd:00:e3:31:c7:9f:12:03:
         d9:e2:34:6a:57:ed:89:ea:18:b4:cf:86:17:3c:ed:9e:55:30:
         4c:8c:da:83:18:89:39:56:44:71:e9:6b:b8:cf:02:40:34:ef:
         d5:78:28:fe:2c:0d:c7:a0:d8:80:43:c5:ec:c6:c0:ce:36:79:
         1e:79:cd:f5:f9:02:3d:5f:6d:1f:cd:7e:1f:e0:13:39:c4:74:
         2f:b5:fb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:51:45 2025 by rpki-client