Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa
File:                     3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa (raw, json)
Hash identifier:          URBPx3raUYpINafp944OwVvhskEeR7BwI20/+kx0NhQ=
Subject key identifier:   2E:7E:4B:E8:3A:15:F1:44:45:59:42:41:5D:BE:4E:AB:33:25:F2:7C
Certificate issuer:       /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial:       74D30067CF465941B1EE2A18DA45C6B794B546AE
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa
Signing time:             Fri 10 Jan 2025 14:19:58 +0000
ROA not before:           Fri 10 Jan 2025 14:14:58 +0000
ROA not after:            Fri 09 Jan 2026 14:19:58 +0000
asID:                     28202
IP address blocks:        179.189.160.0/19 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d3:00:67:cf:46:59:41:b1:ee:2a:18:da:45:c6:b7:94:b5:46:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
        Validity
            Not Before: Jan 10 14:14:58 2025 GMT
            Not After : Jan  9 14:19:58 2026 GMT
        Subject: CN=2E7E4BE83A15F144455942415DBE4EAB3325F27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:66:1d:08:d3:13:d8:0f:b5:21:34:51:34:06:
                    de:95:d5:b5:1a:ab:43:bc:b3:02:98:2a:e7:0b:de:
                    09:c0:35:9a:e1:ae:98:56:b3:7d:2c:6f:38:fc:be:
                    74:ca:41:46:d9:a5:da:69:f3:5f:30:a7:f1:c4:88:
                    83:4d:3f:05:62:2e:75:50:a3:9f:b2:1d:76:5c:3d:
                    5c:fc:e9:1b:d2:67:4e:4a:97:43:a1:63:d3:b7:5d:
                    56:a0:b9:32:73:f6:d8:5a:24:64:7e:c1:de:9a:ac:
                    d0:85:23:80:e6:c0:83:e0:fb:26:a0:09:09:8b:6d:
                    06:ac:c1:78:57:8d:bf:c4:d0:d9:a7:cc:96:0a:e4:
                    11:ef:ab:9d:01:02:6d:f9:dc:21:00:04:33:bf:39:
                    40:8f:36:ac:bf:76:09:3b:e1:82:fd:3a:18:9e:ca:
                    79:2a:2e:b1:e3:d2:7c:c9:c3:87:ff:93:58:4a:76:
                    2d:1f:c1:cc:08:2e:57:41:b3:33:f7:b4:d2:92:ed:
                    5c:63:65:82:b3:a8:8c:95:54:dc:03:62:6b:94:6b:
                    48:f6:23:40:ed:50:d9:df:97:61:40:52:aa:f7:40:
                    84:61:62:c7:32:99:b5:e0:9b:35:71:7d:49:67:2a:
                    a6:8e:d5:7b:4e:83:1c:bc:6b:f4:af:97:e2:05:f1:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7E:4B:E8:3A:15:F1:44:45:59:42:41:5D:BE:4E:AB:33:25:F2:7C
            X509v3 Authority Key Identifier:
                keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         65:1e:49:f0:86:71:01:b7:c0:13:c6:59:70:a0:b6:65:49:5d:
         f4:09:31:a2:20:a1:75:f1:0d:d1:36:f2:58:96:9b:e9:69:5e:
         1d:f5:6f:bd:7f:07:c6:d4:81:72:c5:3a:ae:82:19:79:b1:64:
         22:10:d2:4f:c3:5c:e6:25:00:e4:9c:b4:cb:cd:a0:a0:e9:68:
         00:a5:9d:4d:ee:b4:0a:4f:c8:ca:90:08:27:2a:12:cc:84:18:
         30:9c:10:7f:ba:f3:78:59:4e:b8:3c:2b:cb:c9:d2:b0:50:ed:
         b9:84:3f:8a:d2:b7:f0:2a:6a:5b:04:3b:06:21:32:82:dc:52:
         19:8a:05:32:ac:d2:56:60:b4:17:11:9a:34:45:01:b4:6d:b0:
         97:62:61:0a:15:8b:27:6d:42:3c:c6:fe:a9:7e:5b:ae:28:3c:
         a0:d0:f3:25:0b:7f:8d:2b:d6:e3:be:b4:ed:5f:f8:46:d9:b9:
         7a:9a:95:df:f7:4d:2f:ba:91:c1:9a:70:d3:a6:da:da:25:ca:
         9b:37:bb:87:4d:32:15:c9:61:8f:75:05:84:9f:33:7d:46:ea:
         81:33:d6:35:d3:5e:4f:a0:91:97:8b:cf:24:f0:97:55:38:20:
         6f:9f:88:69:bc:b0:b8:30:1f:ec:b4:27:7e:44:bf:d9:60:13:
         74:72:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:17 2025 by rpki-client