Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137392e302e37322e302f32322d3332203d3e203238363536.roa
File:                     3137392e302e37322e302f32322d3332203d3e203238363536.roa (raw, json)
Hash identifier:          TydUVHovp8nuvWTUrZ6Rr96/ydS7rqskOTZuqcVrr9k=
Subject key identifier:   C0:3A:5D:00:C8:CE:50:13:75:DC:14:B3:F5:52:55:1D:7B:7E:DC:71
Certificate issuer:       /CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Certificate serial:       037671998240C38A15B6D627ADEA80D76CE4F8A0
Authority key identifier: 4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137392e302e37322e302f32322d3332203d3e203238363536.roa
Signing time:             Mon 27 Mar 2023 18:30:30 +0000
ROA not before:           Mon 27 Mar 2023 18:25:30 +0000
ROA not after:            Mon 25 Mar 2024 18:30:30 +0000
asID:                     28656
IP address blocks:        179.0.72.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:76:71:99:82:40:c3:8a:15:b6:d6:27:ad:ea:80:d7:6c:e4:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
        Validity
            Not Before: Mar 27 18:25:30 2023 GMT
            Not After : Mar 25 18:30:30 2024 GMT
        Subject: CN=C03A5D00C8CE501375DC14B3F552551D7B7EDC71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:3e:e1:4d:57:c5:f0:4d:ed:9a:12:fc:8b:
                    06:65:96:c4:96:09:0d:90:0b:25:59:9d:36:0a:70:
                    0b:9a:4d:88:7c:22:97:81:7c:a3:df:23:cc:67:90:
                    d7:40:93:63:6b:0b:4b:de:b5:c8:1e:7a:c7:c8:b7:
                    20:41:ff:d2:a2:5b:8b:1d:3f:e6:a9:0d:de:77:fc:
                    2f:4f:9e:fa:79:e3:b4:ff:05:b9:91:10:3e:3b:d9:
                    0f:b3:49:b7:ab:2a:60:2a:35:17:b4:62:5d:5c:4b:
                    f4:0a:c5:04:69:dd:c5:2a:ad:c1:1d:9d:4a:72:cb:
                    77:8c:98:f1:47:a6:b4:cd:40:dc:17:f4:12:63:a6:
                    c4:06:55:94:98:91:33:83:22:38:d4:54:84:c6:6b:
                    22:44:43:9a:44:6b:2a:f7:24:a5:4f:ad:e7:58:5e:
                    5d:3d:f9:d2:91:ce:51:a4:ae:ba:40:7f:b3:49:c4:
                    10:33:c6:97:32:a2:2d:9b:9f:99:54:d1:5f:bb:93:
                    56:5f:8b:3f:46:fd:fd:8f:db:0d:c5:61:47:aa:a0:
                    b6:c4:35:2a:07:c4:9f:80:b8:49:d9:e6:91:6a:20:
                    a7:af:4a:27:6c:8b:7c:41:3d:a8:53:cc:12:a3:46:
                    5b:97:29:ed:3e:dc:57:77:02:8d:15:7c:2a:51:41:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3A:5D:00:C8:CE:50:13:75:DC:14:B3:F5:52:55:1D:7B:7E:DC:71
            X509v3 Authority Key Identifier:
                keyid:4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137392e302e37322e302f32322d3332203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:3e:7c:7f:31:c4:bd:b6:d2:3f:57:00:c6:48:ac:e2:c5:fc:
         02:c7:bd:08:61:03:a1:27:e1:41:28:ba:ff:e3:48:62:f2:92:
         19:d2:a2:0b:96:eb:6d:71:c1:d8:41:23:09:ed:a4:82:7d:a2:
         f5:f9:ff:d8:65:60:1b:18:cf:62:47:67:19:8e:94:b7:25:4e:
         69:a2:68:f9:51:a1:c1:a0:51:cf:67:2d:02:df:76:5e:d2:f9:
         39:0d:b3:0e:15:eb:ca:71:11:c1:b9:ba:04:53:5e:9b:e4:fa:
         ab:a2:6f:9e:41:8c:8c:6c:13:e5:32:a8:0c:a6:74:62:23:80:
         39:15:78:86:3f:ff:b9:51:41:c0:bd:f4:93:b3:95:6a:ba:43:
         d0:c9:c7:b4:32:07:0e:95:43:e8:f5:eb:63:eb:7d:65:83:db:
         76:09:eb:37:76:60:20:9d:aa:28:d3:11:b4:4c:74:e5:aa:02:
         13:4d:ef:06:4e:c1:46:92:d3:9b:62:54:9c:0c:af:a6:12:ca:
         38:c3:b9:64:cb:f2:e1:c2:bb:53:0a:52:31:8a:e4:97:ba:72:
         d9:e2:fc:ef:b7:a7:17:b5:66:b3:25:65:a5:f5:2d:39:c8:92:
         28:08:54:79:5f:42:d4:bb:f5:ef:58:6d:84:5e:a7:6b:24:00:
         3c:e9:22:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:20 2025 by rpki-client