Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32322d3332203d3e20323731313934.roa
File:                     3137392e34392e3134382e302f32322d3332203d3e20323731313934.roa (raw, json)
Hash identifier:          /R/UmR1s1Kmln7t11xh5kdreLvaY+ZgPU1bRyQ5vlX4=
Subject key identifier:   A6:F6:B3:AF:20:5C:BB:F9:20:C0:27:64:46:96:C2:6E:FF:D6:45:9C
Certificate issuer:       /CN=75D49D6586B43FE3F6C5A80E1BC9EE0F45BF1E01
Certificate serial:       2B66385A0488D24A52F3E2394DE724B0E93BF03A
Authority key identifier: 75:D4:9D:65:86:B4:3F:E3:F6:C5:A8:0E:1B:C9:EE:0F:45:BF:1E:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D49D6586B43FE3F6C5A80E1BC9EE0F45BF1E01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32322d3332203d3e20323731313934.roa
Signing time:             Mon 22 Jan 2024 13:05:11 +0000
ROA not before:           Mon 22 Jan 2024 13:00:11 +0000
ROA not after:            Mon 20 Jan 2025 13:05:11 +0000
asID:                     271194
IP address blocks:        179.49.148.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:66:38:5a:04:88:d2:4a:52:f3:e2:39:4d:e7:24:b0:e9:3b:f0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D49D6586B43FE3F6C5A80E1BC9EE0F45BF1E01
        Validity
            Not Before: Jan 22 13:00:11 2024 GMT
            Not After : Jan 20 13:05:11 2025 GMT
        Subject: CN=A6F6B3AF205CBBF920C027644696C26EFFD6459C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c8:dc:87:51:d3:b3:94:f4:b3:19:2f:6d:d3:
                    06:54:8a:ea:f1:c5:00:e7:a8:1a:41:fe:04:23:85:
                    04:58:7b:c8:5f:38:ff:a6:bc:35:ac:ff:61:9f:89:
                    d2:cd:a5:0a:21:0a:ee:db:ee:4b:84:91:be:a8:2e:
                    f2:fd:cf:c9:ff:11:74:e5:6f:42:d1:d1:d3:0a:50:
                    91:79:b2:e5:c5:87:c9:0c:a0:7f:96:47:80:b5:e7:
                    3c:5b:de:7d:58:97:4b:e8:7d:b5:de:f8:d9:db:f8:
                    fb:bb:2b:a0:a4:46:03:bb:6e:2e:c8:72:37:86:75:
                    3a:84:91:23:d8:38:3e:8e:38:04:ea:c1:58:5d:30:
                    ed:2f:d3:e2:77:6a:aa:a4:77:be:1f:d7:c7:b5:3b:
                    ea:ea:7e:df:df:89:e4:c5:06:58:2e:24:37:0d:e3:
                    05:34:23:24:88:e2:f3:d8:51:50:d9:ee:6d:16:01:
                    03:94:65:4c:91:97:fe:e1:d0:6e:ae:04:35:f7:76:
                    90:62:c1:20:85:46:a8:a4:00:7b:51:e0:3e:63:02:
                    45:91:fc:3b:a7:d4:22:30:71:8e:2f:f6:2f:f3:86:
                    50:74:fa:ca:c6:2c:4a:9e:54:0e:05:89:b0:58:ae:
                    cb:2d:d7:0f:29:f1:71:a8:12:08:53:a1:99:7b:ad:
                    a1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F6:B3:AF:20:5C:BB:F9:20:C0:27:64:46:96:C2:6E:FF:D6:45:9C
            X509v3 Authority Key Identifier:
                keyid:75:D4:9D:65:86:B4:3F:E3:F6:C5:A8:0E:1B:C9:EE:0F:45:BF:1E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/75D49D6586B43FE3F6C5A80E1BC9EE0F45BF1E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D49D6586B43FE3F6C5A80E1BC9EE0F45BF1E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32322d3332203d3e20323731313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:77:85:42:5e:03:a6:0c:03:db:56:63:32:5c:d6:36:59:14:
         ab:a0:7b:c0:5e:3f:0b:54:c2:09:cc:6b:d9:4a:c0:4f:b7:ce:
         d2:6b:e1:b8:3b:4b:b5:b2:b4:94:5d:f7:98:eb:3d:a9:af:cf:
         ce:76:1c:1e:87:cf:77:a1:30:c3:28:5f:ba:35:33:f7:3d:88:
         08:fa:f6:a5:87:b2:18:38:32:cc:87:61:31:88:8d:9a:79:74:
         88:76:41:23:6b:4d:36:36:28:57:e9:f0:2a:5b:3a:86:3b:85:
         04:70:cc:fe:c4:79:a1:89:0f:2d:0c:6d:fb:94:c1:b5:fd:87:
         9c:70:5e:5a:57:d4:70:6c:32:9c:00:0e:d6:cf:f3:5f:24:30:
         58:55:19:48:96:1f:5a:1d:8c:05:55:98:d1:ac:06:3e:1b:43:
         3b:7b:c1:7b:05:35:73:cf:24:60:eb:fe:b4:d1:62:8e:a9:0f:
         ed:92:e5:d2:8b:9a:3d:b0:2f:c5:5b:3d:1a:de:6e:4c:7e:52:
         fe:ee:a1:4c:bb:80:78:2d:63:ce:32:9d:57:be:a7:2a:63:20:
         35:5f:9c:85:1e:52:09:8c:98:ec:d0:97:33:84:83:b4:25:92:
         fa:97:b4:68:c3:0e:92:c8:0f:af:f1:ed:08:1a:c6:9d:08:9d:
         b2:f4:fa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:06:28 2025 by rpki-client