Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa
File:                     3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa (raw, json)
Hash identifier:          omF8qoa5TRXDgx1yGmkbG3Hw1CL7ka/3MNIRYEc/pH4=
Subject key identifier:   8D:43:EA:41:33:37:07:70:82:7A:AB:34:14:40:72:23:BE:92:43:55
Certificate issuer:       /CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
Certificate serial:       3C4F7251DD96EA4BB4F2AD0E562A1F8D34138EF8
Authority key identifier: 85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa
Signing time:             Fri 10 Jan 2025 17:22:57 +0000
ROA not before:           Fri 10 Jan 2025 17:17:57 +0000
ROA not after:            Fri 09 Jan 2026 17:22:57 +0000
asID:                     28202
IP address blocks:        179.189.160.0/19 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:4f:72:51:dd:96:ea:4b:b4:f2:ad:0e:56:2a:1f:8d:34:13:8e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85FE199EB26E8B5E82D6033E5D496B0510EBD27C
        Validity
            Not Before: Jan 10 17:17:57 2025 GMT
            Not After : Jan  9 17:22:57 2026 GMT
        Subject: CN=8D43EA4133370770827AAB3414407223BE924355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:de:ea:2f:99:5a:69:b1:69:c0:51:cd:a8:
                    11:92:72:03:cd:77:f1:53:6b:16:cb:52:87:09:75:
                    be:f2:34:d8:cc:15:fc:a7:79:57:a1:53:77:dd:0b:
                    96:57:c3:35:f2:10:af:45:19:76:49:ac:4d:1d:e2:
                    03:52:a5:77:6b:b1:aa:2e:c5:c4:c5:88:48:e3:39:
                    eb:db:ed:95:b7:83:1f:f7:b1:5d:6e:c3:2c:9c:4c:
                    20:95:66:06:25:1a:9d:90:16:93:b9:65:47:b1:11:
                    e0:31:ea:34:f4:8e:b4:73:e4:8e:9d:d7:c0:bd:d3:
                    d8:95:1c:71:32:64:d8:5d:43:a2:45:94:01:9c:1f:
                    5c:0b:56:83:cf:25:d9:bd:2d:5b:a7:dd:cc:83:d5:
                    f6:8a:8a:8c:9b:02:08:c9:73:3e:8c:8a:35:1b:5b:
                    1f:d0:41:0f:e9:c5:7d:b5:18:76:b4:df:3e:45:66:
                    c2:b0:05:7d:ea:12:32:77:08:c9:74:f5:1e:54:75:
                    16:f7:d8:06:5e:4a:48:66:65:44:2a:41:d9:ce:a4:
                    b3:61:8c:f3:48:a4:a5:e1:bc:5b:29:b5:ce:73:2c:
                    cd:73:75:6c:c4:5b:65:e0:bb:cd:41:b6:f3:74:54:
                    18:7d:3e:bd:ac:a1:e9:f7:33:59:fc:a9:07:b0:dd:
                    65:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:43:EA:41:33:37:07:70:82:7A:AB:34:14:40:72:23:BE:92:43:55
            X509v3 Authority Key Identifier:
                keyid:85:FE:19:9E:B2:6E:8B:5E:82:D6:03:3E:5D:49:6B:05:10:EB:D2:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85FE199EB26E8B5E82D6033E5D496B0510EBD27C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/6/3137392e3138392e3136302e302f31392d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         50:5f:28:7b:8c:3b:97:ba:37:f8:ee:aa:31:97:d9:c5:1b:57:
         5e:4b:10:7f:f5:fd:84:10:96:34:72:af:c1:cb:96:6c:92:43:
         95:a8:d7:a6:23:c4:93:00:9b:4c:00:94:cd:1e:20:9c:7f:b0:
         76:70:60:b7:76:d3:19:10:e9:4b:58:25:9f:e7:5b:1b:49:4d:
         f0:8b:71:ee:af:1c:53:11:b2:be:0b:f9:8b:ea:3b:6c:81:97:
         17:ce:01:80:ea:f7:35:fc:7f:39:46:85:bd:24:bc:c1:63:31:
         50:72:a4:46:95:08:16:19:04:56:f1:ed:36:15:31:7e:b0:00:
         bc:f7:56:a6:ba:02:36:08:ad:0d:12:b5:d7:e4:db:5f:8a:44:
         00:d6:c8:5c:f2:c1:58:0a:06:2b:bb:2e:66:03:88:aa:ab:b1:
         44:dc:87:c9:e5:f6:ac:27:d5:98:8b:19:76:37:75:c8:25:d2:
         d8:7d:50:c6:e2:5f:42:45:da:f3:91:66:f7:98:c4:fb:4a:5c:
         ef:10:b5:ab:2e:c5:66:3d:c1:82:ee:93:a7:8d:c1:b3:3e:bb:
         9c:2b:a4:69:e7:09:2e:11:d1:66:ee:bf:36:67:91:07:5b:b5:
         de:2e:f6:0a:57:0e:25:5c:f4:9f:5b:eb:0d:d8:d6:67:ef:50:
         44:98:86:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:53:29 2025 by rpki-client