Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/3137392e36332e32342e302f32342d3234203d3e20323732353534.roa
File:                     3137392e36332e32342e302f32342d3234203d3e20323732353534.roa (raw, json)
Hash identifier:          pxjbZUVFK3thvMtEiArp++enZiQ3XjBPwUeBiAKHHHQ=
Subject key identifier:   2E:3B:9B:94:14:69:03:78:AA:7A:63:80:C8:B2:89:46:50:F5:94:FC
Certificate issuer:       /CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
Certificate serial:       1442C50D04D7ABD319357659F159E7FB1B5E353E
Authority key identifier: 19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/3137392e36332e32342e302f32342d3234203d3e20323732353534.roa
Signing time:             Thu 06 Mar 2025 05:29:28 +0000
ROA not before:           Thu 06 Mar 2025 05:24:28 +0000
ROA not after:            Thu 05 Mar 2026 05:29:28 +0000
asID:                     272554
IP address blocks:        179.63.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:42:c5:0d:04:d7:ab:d3:19:35:76:59:f1:59:e7:fb:1b:5e:35:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
        Validity
            Not Before: Mar  6 05:24:28 2025 GMT
            Not After : Mar  5 05:29:28 2026 GMT
        Subject: CN=2E3B9B9414690378AA7A6380C8B2894650F594FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:c9:95:a9:83:5d:c6:3a:8d:34:9c:f1:f0:
                    8e:bb:4a:10:0b:d9:18:f7:28:bf:b9:06:df:25:0f:
                    6d:2c:d0:32:ad:b9:31:65:65:6b:d6:02:c0:5c:e6:
                    4a:6b:4c:b8:e2:36:86:bd:9d:c4:4b:ab:68:bd:1e:
                    ae:35:9e:4f:9c:bc:92:4c:39:07:bf:03:27:f7:76:
                    7c:ce:34:6a:be:8c:94:76:01:3f:b3:f4:bb:4a:07:
                    50:42:97:bd:0b:f1:61:17:71:5a:00:32:88:aa:80:
                    db:49:f2:1e:24:91:eb:f6:fd:ca:4b:de:e6:5f:e3:
                    c0:1e:c3:f7:52:18:88:1a:06:a2:f8:75:d6:2c:10:
                    fd:5a:f0:fa:85:cb:93:bf:e6:a6:49:c3:e5:10:f4:
                    0e:26:b0:3e:33:69:a1:f3:d9:ba:de:f9:83:6d:73:
                    35:f6:1b:dd:0d:e5:cf:13:a2:72:40:44:ba:46:a5:
                    28:70:7d:e9:f6:02:a6:53:71:2a:85:4f:dc:21:b4:
                    0e:bf:b5:c1:20:27:f9:6d:4e:4f:51:da:96:ed:9a:
                    29:ed:ab:4e:05:00:8f:7b:e6:ad:da:39:8b:fe:6d:
                    50:ff:f1:94:a7:ab:df:42:2b:bf:df:98:33:2c:91:
                    ce:98:d9:1e:14:41:84:70:b5:cd:b2:0a:cd:88:51:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3B:9B:94:14:69:03:78:AA:7A:63:80:C8:B2:89:46:50:F5:94:FC
            X509v3 Authority Key Identifier:
                keyid:19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/3137392e36332e32342e302f32342d3234203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:29:83:6c:01:0e:f6:89:ad:d1:ff:86:9c:fa:52:f3:e0:4e:
         67:d5:45:13:24:06:96:bb:01:43:b6:9c:85:59:18:b4:4f:3c:
         68:01:f0:40:d6:7a:a9:36:72:80:74:01:70:9b:90:a7:66:c4:
         eb:c3:e5:2c:1c:ad:70:59:06:b2:84:7e:61:2e:a4:d7:a1:43:
         38:8d:0c:ca:bc:83:2a:94:62:8b:35:93:23:de:ae:97:f8:e5:
         84:a3:9e:7d:57:f2:76:c4:68:58:a5:34:f2:ef:08:8a:16:af:
         7f:88:be:66:43:04:d6:16:f9:49:fb:91:90:94:06:72:46:d6:
         2f:02:e9:45:2b:0a:05:fc:ae:45:7c:44:9f:8a:68:7e:2e:b7:
         ce:63:03:94:9f:d3:fc:f4:4e:76:0c:5b:5e:74:8c:ff:ab:b7:
         c6:bf:a5:20:67:9d:a2:ae:24:4d:64:32:e9:6a:cb:c9:25:38:
         9a:38:93:48:90:47:e4:16:0a:a3:d1:0e:37:0c:0f:31:13:84:
         65:f5:11:e0:37:e8:cd:64:2d:62:7f:e3:8c:52:e1:29:c9:21:
         b7:3d:6d:fd:a1:c6:19:ea:5d:ae:f5:56:ca:af:d1:0d:cd:54:
         b3:72:fa:7f:9b:b9:8b:ac:78:11:e9:4c:66:11:1f:f2:e2:d7:
         38:40:28:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:29:14 2025 by rpki-client