Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137392e3132372e34302e302f32312d3234203d3e203532393133.roa
File:                     3137392e3132372e34302e302f32312d3234203d3e203532393133.roa (raw, json)
Hash identifier:          vmcXxKuONvDttff4UVitpw8WaYSJUZMmP7VKmelSv2A=
Subject key identifier:   BD:8F:35:C2:37:F1:92:65:A3:EF:5E:D9:97:87:8C:F4:FA:2C:7F:28
Certificate issuer:       /CN=8204A8F62764E655E183BB09417B0875F11B3A7D
Certificate serial:       4C9EAF66D1C0D850A9C0255FD2E65ACD191ABFE9
Authority key identifier: 82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137392e3132372e34302e302f32312d3234203d3e203532393133.roa
Signing time:             Thu 06 Mar 2025 10:06:42 +0000
ROA not before:           Thu 06 Mar 2025 10:01:42 +0000
ROA not after:            Thu 05 Mar 2026 10:06:42 +0000
asID:                     52913
IP address blocks:        179.127.40.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9e:af:66:d1:c0:d8:50:a9:c0:25:5f:d2:e6:5a:cd:19:1a:bf:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Validity
            Not Before: Mar  6 10:01:42 2025 GMT
            Not After : Mar  5 10:06:42 2026 GMT
        Subject: CN=BD8F35C237F19265A3EF5ED997878CF4FA2C7F28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:64:b2:74:89:9b:fc:bb:cb:e1:a3:2f:64:be:
                    48:6a:18:4b:32:42:1b:ff:14:5b:53:c7:6d:5b:44:
                    b2:7f:55:17:81:10:a0:00:6d:05:ed:8f:9d:e4:86:
                    02:c0:aa:b0:74:4d:02:76:4d:c0:b0:6c:4f:2f:28:
                    39:e2:5c:0a:f4:83:3c:3b:61:77:db:6e:5c:e4:72:
                    9f:83:7a:55:18:9e:2d:e8:c5:e3:85:9c:fe:a5:c1:
                    89:62:b7:45:64:92:de:64:df:6f:a2:46:f4:30:3e:
                    fb:00:69:d5:68:42:db:d8:c3:3b:03:a4:f0:45:d2:
                    31:6e:2b:3c:5a:52:21:29:ab:6e:90:22:8f:ea:d6:
                    2c:f4:1c:a1:02:ef:c5:6a:2d:6e:71:e4:0a:ec:7a:
                    a4:2f:53:99:d0:b7:4c:66:45:56:9f:bf:4a:a2:6b:
                    61:a5:07:ad:22:81:5a:35:7f:91:4a:c7:7e:1f:0f:
                    7b:5f:fd:4d:6e:6a:58:88:54:29:51:af:a5:7e:a5:
                    55:ec:f9:50:41:c4:c2:ad:ec:47:e1:e6:da:16:91:
                    55:dd:a8:1b:1b:de:3b:1b:5f:b9:f4:af:61:85:27:
                    8a:79:fe:6c:d8:9c:c3:53:8d:7b:89:4c:53:46:e1:
                    de:3e:9d:8a:bf:7b:a8:86:65:03:18:78:c5:40:f6:
                    1b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8F:35:C2:37:F1:92:65:A3:EF:5E:D9:97:87:8C:F4:FA:2C:7F:28
            X509v3 Authority Key Identifier:
                keyid:82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/3137392e3132372e34302e302f32312d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:73:7c:71:9a:ad:76:31:bb:45:b0:b6:ee:19:ce:20:0d:2f:
         7e:d9:bb:51:59:93:88:0d:e4:55:ed:e8:73:b1:8a:4f:6f:6d:
         a0:24:12:08:46:17:f7:88:74:a7:20:6f:22:e9:e4:5e:00:e8:
         e9:02:49:61:50:6c:4f:75:9b:86:6f:b0:e8:1e:86:93:51:5f:
         4e:9c:3e:c6:8d:6e:57:e5:71:4b:ff:55:c6:7f:b1:a1:d9:51:
         15:07:8c:74:78:14:79:8d:78:2e:0e:84:ce:ee:7f:77:b0:36:
         52:1a:4c:1f:c8:d8:d7:83:01:fb:92:5b:c8:04:2e:2b:67:33:
         e2:8c:aa:bc:f3:4e:88:eb:1a:90:43:0c:74:4d:37:61:dc:51:
         1a:64:d5:52:9c:b5:57:97:2a:13:5e:15:7f:7b:2f:8e:68:fd:
         6c:ae:cc:31:99:d9:5d:66:b4:4d:bd:01:c6:44:b4:e7:32:eb:
         c0:2b:a7:cf:01:34:7c:65:99:60:2d:68:f0:57:98:ec:bd:e5:
         86:4b:e4:30:39:be:8c:21:cc:5a:4b:1e:a9:fe:9f:84:7b:82:
         02:6d:fb:b7:cf:15:bf:7e:b1:9a:f8:2f:55:68:30:05:eb:82:
         90:3a:25:a8:57:45:95:23:f9:04:48:be:35:69:48:8b:14:33:
         ca:d3:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:43 2025 by rpki-client