Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/3137392e34382e3138362e302f32332d3233203d3e20323731303935.roa
File:                     3137392e34382e3138362e302f32332d3233203d3e20323731303935.roa (raw, json)
Hash identifier:          UK1FVjUUS4NN95+sbBGz7vOGXmhAugdySF3Yo3LFggk=
Subject key identifier:   FA:F8:C8:D8:BC:83:39:09:5D:2C:DF:BF:1A:CC:F3:21:75:46:C8:E9
Certificate issuer:       /CN=BB28C577DF924111463D0D089EB3700DB6333A08
Certificate serial:       06A23669E332DE3C15F708F0150AE873ACE41302
Authority key identifier: BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/3137392e34382e3138362e302f32332d3233203d3e20323731303935.roa
Signing time:             Mon 13 Jan 2025 16:25:44 +0000
ROA not before:           Mon 13 Jan 2025 16:20:44 +0000
ROA not after:            Mon 12 Jan 2026 16:25:44 +0000
asID:                     271095
IP address blocks:        179.48.186.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a2:36:69:e3:32:de:3c:15:f7:08:f0:15:0a:e8:73:ac:e4:13:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB28C577DF924111463D0D089EB3700DB6333A08
        Validity
            Not Before: Jan 13 16:20:44 2025 GMT
            Not After : Jan 12 16:25:44 2026 GMT
        Subject: CN=FAF8C8D8BC8339095D2CDFBF1ACCF3217546C8E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:82:db:ff:d5:24:8f:b3:cc:2c:f9:e9:b5:cb:
                    3a:14:76:0d:06:17:54:97:69:d3:2b:62:df:06:70:
                    7e:61:b9:8a:4c:5b:d9:ce:28:e0:91:97:6c:50:d0:
                    fe:8f:27:16:02:d5:bb:c6:b4:82:1d:92:2e:81:9e:
                    26:7e:d1:70:01:5e:9c:93:7a:b0:05:c0:ba:88:04:
                    a9:36:1f:b2:6a:1f:3a:22:e6:7e:2a:de:26:c3:07:
                    3c:bb:5a:17:c6:6b:6a:8d:bc:83:cf:a4:5c:1f:e2:
                    d3:22:36:0e:4c:0b:14:53:09:43:96:d3:75:fd:34:
                    a1:4d:0b:f3:9e:cc:a3:2c:00:67:ec:fe:ed:3c:21:
                    87:19:dc:5e:01:3e:8a:36:1b:5c:db:ad:45:3d:d0:
                    89:ec:55:2c:18:a0:4d:e5:90:c2:66:cb:b3:1b:e8:
                    36:de:bc:85:8a:46:64:62:43:f4:26:e0:34:06:83:
                    b6:66:38:81:97:19:91:68:2b:c4:39:35:84:af:6d:
                    ff:4a:d2:b3:76:a4:8c:b3:29:cc:42:52:56:0d:66:
                    93:5c:8b:79:49:9c:73:f9:b3:a9:c9:46:d3:ad:e8:
                    52:65:88:2b:24:74:26:02:73:b5:08:1b:c8:a7:e7:
                    d1:f4:f5:72:35:44:db:ab:ce:6f:b3:14:0f:50:72:
                    20:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F8:C8:D8:BC:83:39:09:5D:2C:DF:BF:1A:CC:F3:21:75:46:C8:E9
            X509v3 Authority Key Identifier:
                keyid:BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/3137392e34382e3138362e302f32332d3233203d3e20323731303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:b3:05:9c:72:25:2f:8c:49:88:d4:8e:62:f5:cf:73:6c:64:
         93:09:bb:bf:2a:84:f9:95:19:4a:12:af:39:11:68:b2:66:d1:
         8e:45:e5:f7:b4:6a:f1:f0:d6:2b:93:2a:69:02:18:b3:fb:a3:
         e3:99:b9:c4:ed:85:40:4c:7b:2c:5e:46:c5:21:6b:22:4a:f3:
         cf:90:b0:86:92:c7:a0:c4:0b:8a:46:09:30:e9:3f:38:20:78:
         94:14:91:d1:3b:85:51:b3:47:7b:eb:3f:7b:d1:73:c6:3e:5e:
         59:0a:c8:0a:20:9c:cc:76:00:8b:1b:70:3e:8a:dc:c3:a6:25:
         dc:cd:5c:04:32:c7:89:b5:cd:08:a0:84:4a:1a:c0:a7:ae:c6:
         f5:cb:95:e6:3a:cd:8d:77:00:42:b3:0d:b6:46:be:94:3d:38:
         3a:e4:1d:6e:fe:7c:ba:f8:c4:b2:65:ee:05:df:86:87:57:8a:
         ba:96:e1:8f:9f:b9:29:64:67:2c:1e:50:67:9e:c9:a2:d3:a6:
         03:64:b8:12:bb:71:ae:12:9f:20:0b:fa:b2:2b:78:49:89:36:
         cb:cd:48:78:75:22:67:33:ca:55:91:5f:1c:a0:02:c7:22:f5:
         05:63:d1:48:5b:0c:c0:02:1e:55:53:a3:1f:5b:dd:78:7b:7a:
         c4:5d:ec:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 17:37:23 2025 by rpki-client