Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137392e302e37322e302f32322d3232203d3e20323731343433.roa
File:                     3137392e302e37322e302f32322d3232203d3e20323731343433.roa (raw, json)
Hash identifier:          v00zYQEvMNNJ1swrb0Q84GIFuxYRpUzowZaAKI43OWI=
Subject key identifier:   74:21:12:BA:CF:5C:51:F4:4B:D0:26:8F:C2:3D:B2:4E:75:74:81:6C
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       21C57AE62B81804C40785D76EDF3822E97DF4B69
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137392e302e37322e302f32322d3232203d3e20323731343433.roa
Signing time:             Sun 19 Mar 2023 13:26:20 +0000
ROA not before:           Sun 19 Mar 2023 13:21:20 +0000
ROA not after:            Sun 17 Mar 2024 13:26:20 +0000
asID:                     271443
IP address blocks:        179.0.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c5:7a:e6:2b:81:80:4c:40:78:5d:76:ed:f3:82:2e:97:df:4b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 19 13:21:20 2023 GMT
            Not After : Mar 17 13:26:20 2024 GMT
        Subject: CN=742112BACF5C51F44BD0268FC23DB24E7574816C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:69:e4:d4:90:0a:ab:be:f1:d0:30:06:9a:
                    a3:38:c6:6c:51:06:85:99:7b:c4:8a:6f:9b:86:70:
                    fe:0d:7c:11:d6:23:83:ce:58:f8:47:70:13:0c:35:
                    1f:01:2f:11:31:2d:95:ff:75:6c:a0:19:ef:ca:13:
                    19:fd:5f:54:1d:08:a0:b0:43:ec:8b:e9:ab:15:d3:
                    b4:7b:d7:0b:49:98:9e:fb:69:0d:e1:46:e1:1e:ca:
                    f0:8e:00:dc:48:c1:be:7e:24:ae:83:94:5e:53:8f:
                    cc:35:75:a7:88:46:db:08:9b:b6:af:ad:ab:cb:fb:
                    c2:4d:c3:21:32:16:18:c3:f4:62:20:89:3e:53:ad:
                    2c:13:a9:83:71:ec:5b:6e:17:a7:f9:3c:fd:f6:6f:
                    5c:89:a7:ee:7c:cc:80:4e:2f:5f:27:73:dd:16:6f:
                    ce:ea:3a:e5:bd:e4:0a:cf:49:0d:be:94:fa:1c:b3:
                    85:f5:c4:f4:1b:41:42:2c:15:0a:c3:57:14:ec:6d:
                    c9:f3:dc:27:df:b4:1a:d6:d3:54:4b:69:64:5c:b3:
                    fd:95:70:9a:93:5f:76:2c:4d:0e:8b:7d:6d:c9:8a:
                    ba:bb:5c:6f:cf:8f:08:89:b5:a2:0b:81:8d:c4:48:
                    31:8b:41:65:87:f3:37:81:45:a6:e7:33:88:9e:c6:
                    6f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:21:12:BA:CF:5C:51:F4:4B:D0:26:8F:C2:3D:B2:4E:75:74:81:6C
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137392e302e37322e302f32322d3232203d3e20323731343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:5a:98:96:e4:4d:d0:08:bf:d9:09:15:e4:c2:4f:c2:29:65:
         22:9a:b5:de:75:08:01:54:a5:47:ed:4b:2e:fe:80:a4:f7:9e:
         aa:60:dc:1a:12:86:d5:5c:4c:3e:8c:bd:28:26:f2:74:a3:49:
         a1:be:43:a1:c9:89:42:2e:28:09:99:19:05:d2:c1:5a:ca:41:
         41:6e:7c:f3:0a:e0:ce:26:92:44:08:b5:c8:a7:83:a5:d8:41:
         51:6e:eb:43:20:53:80:f8:af:87:da:a3:0d:e6:e4:ef:bc:cf:
         b6:10:5f:76:04:f7:6e:91:48:45:8e:74:71:b5:55:d3:d4:e5:
         a9:ae:b5:22:0c:24:20:18:17:47:13:e1:a3:ed:f2:ea:14:75:
         1e:60:f3:ba:6e:f4:4f:db:9f:0a:03:b4:cc:82:d0:70:35:b8:
         32:6c:40:d5:06:53:80:08:96:49:c0:9d:5b:a9:6b:76:87:e8:
         84:ff:8c:59:70:de:12:f4:4c:8f:ab:0c:2b:d4:61:ab:97:df:
         2e:d4:f7:5d:57:d4:e4:4c:d6:8f:57:00:eb:1f:e2:a4:51:0b:
         87:4f:d2:a5:cc:c2:60:59:b3:68:b5:d8:28:5c:bd:a4:97:3c:
         64:55:ec:ac:dd:f2:c3:a8:2c:01:e6:cc:de:e2:a0:c2:01:e9:
         69:06:16:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:25 2025 by rpki-client