Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/3137392e36332e32342e302f32322d3232203d3e20323732353534.roa
File:                     3137392e36332e32342e302f32322d3232203d3e20323732353534.roa (raw, json)
Hash identifier:          FmVsNdSPNspmc77PQ+hHMBc4lFSDXeXu/qkM5Dc6sfk=
Subject key identifier:   EF:8D:DA:94:8E:97:C2:AF:0B:5F:47:CE:05:D9:EF:32:03:25:C3:F8
Certificate issuer:       /CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
Certificate serial:       65A2D4F99A2ED42E93CD4C2FF16B8A517B03A113
Authority key identifier: 19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/3137392e36332e32342e302f32322d3232203d3e20323732353534.roa
Signing time:             Thu 06 Mar 2025 05:29:28 +0000
ROA not before:           Thu 06 Mar 2025 05:24:28 +0000
ROA not after:            Thu 05 Mar 2026 05:29:28 +0000
asID:                     272554
IP address blocks:        179.63.24.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a2:d4:f9:9a:2e:d4:2e:93:cd:4c:2f:f1:6b:8a:51:7b:03:a1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
        Validity
            Not Before: Mar  6 05:24:28 2025 GMT
            Not After : Mar  5 05:29:28 2026 GMT
        Subject: CN=EF8DDA948E97C2AF0B5F47CE05D9EF320325C3F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f3:1e:26:e7:33:3d:0c:1c:3d:14:a6:fc:c3:
                    01:e8:d5:67:20:83:0d:6a:6a:9b:6a:ce:41:30:be:
                    45:c4:31:75:f1:8a:b3:45:4e:ec:5e:6c:28:c9:63:
                    ec:13:39:f3:16:40:ba:48:1b:bf:04:cf:3f:8e:d9:
                    7b:f8:9c:57:4d:3d:d4:b6:ac:9f:52:52:e4:e7:01:
                    e7:5a:02:5c:87:88:c1:61:49:e6:4a:ae:3c:df:c1:
                    ad:a1:f9:02:fe:72:74:3d:a9:b4:dd:be:70:db:5c:
                    5b:4c:a7:d6:d9:6e:37:98:c5:96:0f:03:0d:db:cf:
                    6f:a9:32:1a:05:d5:95:09:28:4e:e8:65:c2:36:d2:
                    d0:2d:63:96:13:66:f2:9f:0c:35:17:5f:53:28:14:
                    ae:13:4c:84:9f:ae:bd:32:0a:3b:67:09:e3:21:00:
                    ad:3a:34:33:eb:5a:a7:c1:d3:81:3f:35:14:12:38:
                    f6:88:cf:71:72:c9:11:cf:d6:fa:f6:ff:d9:3f:62:
                    f0:11:c3:e2:a0:fb:3e:d2:07:64:2e:26:c1:2f:a0:
                    9c:0a:cf:da:99:11:5d:db:68:dc:12:67:15:1f:6c:
                    14:8c:91:8f:4e:bc:a9:46:23:3c:f7:21:c3:74:ea:
                    8e:c9:15:20:c4:60:b9:77:a9:05:cb:25:ed:5a:36:
                    a4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8D:DA:94:8E:97:C2:AF:0B:5F:47:CE:05:D9:EF:32:03:25:C3:F8
            X509v3 Authority Key Identifier:
                keyid:19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/3137392e36332e32342e302f32322d3232203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:06:1e:bf:94:2c:84:7d:99:2a:db:0c:07:d1:53:4f:7c:e7:
         27:db:ea:92:c7:d5:38:fd:10:34:5c:ab:8a:bf:c4:a0:5e:80:
         b2:ef:3d:9c:e0:aa:8f:e2:f0:e0:da:dc:81:b2:b8:db:3c:22:
         99:e7:4a:9b:9e:08:62:76:4d:aa:06:94:86:f3:a1:cf:84:b3:
         fd:df:ba:97:c8:31:bc:6c:e8:a5:10:ec:8d:f5:a2:ee:c7:9e:
         ad:fe:4f:b1:1d:9b:e0:57:f4:4e:9a:75:42:b0:89:e5:a1:ac:
         12:a0:61:1d:b2:70:f2:c4:63:c7:5d:af:ac:16:43:84:b3:6c:
         6c:db:b4:71:dd:4e:1e:88:80:aa:70:65:cd:9b:23:b2:b7:ef:
         0f:da:92:ee:ff:83:0f:1e:84:dd:88:05:47:b6:65:f2:61:36:
         e2:46:26:9c:87:31:b0:a9:ed:47:87:0f:c0:18:ab:60:27:57:
         c8:aa:9e:b4:1c:ef:41:d2:a8:8f:ba:1d:e8:37:3c:21:12:9b:
         42:6c:99:83:43:13:52:08:f0:2d:1b:ba:ac:bc:e7:6e:c6:d1:
         bf:e9:e5:e1:ec:db:cd:63:ac:07:0f:09:9a:22:65:89:47:35:
         3f:ff:80:d2:8b:e6:22:52:2a:55:53:5b:5e:a0:d1:e5:a4:f3:
         d2:ff:95:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:01 2025 by rpki-client