Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/3137302e37392e342e302f32322d3234203d3e203533303435.roa
File:                     3137302e37392e342e302f32322d3234203d3e203533303435.roa (raw, json)
Hash identifier:          8a5DTyAIG7QFzgvvNSsslKQSexR9A7ox2SxHi5qzKXY=
Subject key identifier:   AE:05:19:6E:03:03:9D:93:93:7F:8E:61:72:F5:11:89:3B:9C:BE:A0
Certificate issuer:       /CN=9F75D3A5C07BE241B010DE5927D5169CCCA4E848
Certificate serial:       7D6A0B41A81C90611C63BA325AF5969936E0230C
Authority key identifier: 9F:75:D3:A5:C0:7B:E2:41:B0:10:DE:59:27:D5:16:9C:CC:A4:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F75D3A5C07BE241B010DE5927D5169CCCA4E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/3137302e37392e342e302f32322d3234203d3e203533303435.roa
Signing time:             Mon 15 May 2023 14:30:46 +0000
ROA not before:           Mon 15 May 2023 14:25:46 +0000
ROA not after:            Mon 13 May 2024 14:30:46 +0000
asID:                     53045
IP address blocks:        170.79.4.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6a:0b:41:a8:1c:90:61:1c:63:ba:32:5a:f5:96:99:36:e0:23:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F75D3A5C07BE241B010DE5927D5169CCCA4E848
        Validity
            Not Before: May 15 14:25:46 2023 GMT
            Not After : May 13 14:30:46 2024 GMT
        Subject: CN=AE05196E03039D93937F8E6172F511893B9CBEA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:27:3a:a7:ad:01:7a:f7:21:e0:7b:b0:d0:
                    6a:9f:bf:78:88:60:63:a9:44:00:e2:38:1d:34:b1:
                    03:af:fa:ec:2b:ea:c3:6f:d0:0a:41:63:ff:3e:58:
                    c3:19:9e:86:94:fb:02:87:ef:7d:04:cd:2e:0d:e9:
                    97:60:32:a0:45:e3:53:3e:7f:71:e2:b1:29:82:fc:
                    71:02:f9:2b:84:84:32:4a:be:8e:af:8c:0b:84:29:
                    ba:59:6e:6a:46:9d:3b:ee:1e:f1:d5:f1:26:3f:2d:
                    8b:4e:3d:70:da:05:71:40:1a:9d:d7:4d:aa:da:2b:
                    5b:b6:be:56:0a:8f:7f:03:41:b7:60:66:0a:00:a0:
                    28:18:96:41:88:78:68:a0:ad:e3:73:e0:69:f0:cb:
                    d4:fd:90:81:49:ec:26:28:3e:e4:7f:1a:90:cc:87:
                    7c:4e:60:e9:d0:88:77:0e:53:65:50:ae:1a:22:2a:
                    4f:e4:3b:00:1b:ad:b6:f1:67:d2:86:55:d7:b5:6b:
                    12:4e:b8:a1:f8:4b:0d:62:9a:02:f9:4c:6c:9c:d3:
                    4a:5a:99:27:9f:eb:64:91:16:28:9d:37:13:dd:ab:
                    97:88:c4:97:fe:e2:6d:14:0a:32:de:60:4b:c9:c4:
                    25:7a:21:56:ab:3c:9b:b4:9e:b2:25:70:c7:9f:bf:
                    b9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:05:19:6E:03:03:9D:93:93:7F:8E:61:72:F5:11:89:3B:9C:BE:A0
            X509v3 Authority Key Identifier:
                keyid:9F:75:D3:A5:C0:7B:E2:41:B0:10:DE:59:27:D5:16:9C:CC:A4:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/9F75D3A5C07BE241B010DE5927D5169CCCA4E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F75D3A5C07BE241B010DE5927D5169CCCA4E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/3137302e37392e342e302f32322d3234203d3e203533303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:45:2c:41:ab:f8:fa:f8:da:b8:43:db:eb:21:67:3e:a1:b2:
         69:fa:0a:db:66:6e:68:bd:44:c2:db:e3:f6:be:07:89:33:b0:
         22:d6:b5:20:ef:f8:8b:f8:99:e2:b0:4a:5e:b8:7a:a6:0c:48:
         54:ec:bc:49:9e:c3:cb:2f:2b:d1:fd:9d:ac:ec:b7:68:00:ff:
         c6:1e:24:4e:5e:0e:07:bc:0b:ef:a4:a4:04:fc:de:ab:e7:54:
         c8:ba:2c:24:92:6b:ef:67:7c:56:5a:97:26:f6:5b:6c:12:a1:
         29:4b:ef:97:5c:cc:3e:40:18:73:11:9b:f2:12:90:4b:fc:4f:
         85:f6:f1:9f:e2:68:c5:00:5d:b6:42:3e:6d:7d:41:63:75:e5:
         a8:88:92:a6:b3:a1:af:60:b1:35:0a:8a:8f:87:c9:c6:41:c7:
         14:9f:f1:df:83:e4:35:5c:c4:a0:e9:7a:a8:e8:6a:31:c0:e5:
         30:d5:fc:b7:03:ed:97:61:08:26:a3:ad:55:64:32:7f:18:e2:
         8e:9e:b8:63:6c:18:51:64:da:f4:14:27:e7:a3:06:e1:34:32:
         16:3b:11:8f:72:07:2a:19:b2:05:97:8a:de:f9:85:62:04:18:
         5c:00:43:ab:bc:d4:6a:c1:7d:05:7d:13:94:34:4b:f9:a0:c8:
         17:a2:2e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:06:01 2025 by rpki-client