Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/3137392e34322e36382e302f32342d3234203d3e20323732343636.roa
File:                     3137392e34322e36382e302f32342d3234203d3e20323732343636.roa (raw, json)
Hash identifier:          nUJGTL2GD2bFln5IxevxHhbMGL8quNdPdukMhtqvPOY=
Subject key identifier:   BA:9E:AD:5E:E1:6D:FE:9E:5E:4C:91:D2:EB:9A:B4:96:18:06:B9:32
Certificate issuer:       /CN=1A4548BFC3BF3BC2F81F0BD247C18CDD197394B7
Certificate serial:       2438ACE508D580ECF4D7732288B35668FA12017E
Authority key identifier: 1A:45:48:BF:C3:BF:3B:C2:F8:1F:0B:D2:47:C1:8C:DD:19:73:94:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A4548BFC3BF3BC2F81F0BD247C18CDD197394B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/3137392e34322e36382e302f32342d3234203d3e20323732343636.roa
Signing time:             Wed 21 Sep 2022 11:50:01 +0000
ROA not before:           Wed 21 Sep 2022 11:45:01 +0000
ROA not after:            Wed 20 Sep 2023 11:50:01 +0000
asID:                     272466
IP address blocks:        179.42.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:38:ac:e5:08:d5:80:ec:f4:d7:73:22:88:b3:56:68:fa:12:01:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A4548BFC3BF3BC2F81F0BD247C18CDD197394B7
        Validity
            Not Before: Sep 21 11:45:01 2022 GMT
            Not After : Sep 20 11:50:01 2023 GMT
        Subject: CN=BA9EAD5EE16DFE9E5E4C91D2EB9AB4961806B932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a5:04:e3:1b:9e:81:33:6a:55:d0:cd:1d:88:
                    e2:c6:d9:67:24:4c:31:bd:fd:a2:ac:17:df:77:39:
                    cb:0b:88:34:1d:c4:aa:04:d1:8e:d4:6c:c2:94:0e:
                    d9:8f:29:50:be:f1:03:45:8d:7b:fe:3c:af:46:6a:
                    27:73:67:c2:70:fa:6d:9a:57:2b:02:51:f3:47:72:
                    24:69:4f:47:e0:35:3c:b1:b3:c2:3a:f6:05:c7:fd:
                    b9:30:85:d8:f2:95:63:78:21:f8:f3:0b:08:58:c3:
                    b6:a9:88:6b:60:0e:bb:bf:6d:90:b0:eb:c8:60:f9:
                    3c:a9:55:2c:8e:3e:dc:b9:1a:2d:4c:ea:a3:76:9f:
                    99:ff:c2:f7:ea:d8:e6:90:05:ea:1c:71:d3:15:7e:
                    8b:28:b7:14:fc:89:38:0b:93:be:58:1b:eb:df:e5:
                    b8:ba:2c:5b:3b:0b:63:48:f3:62:a9:01:81:d9:74:
                    96:0d:b2:db:e8:f5:f2:78:58:f9:c0:e5:14:27:1b:
                    7c:65:55:36:b0:ad:a1:6a:b8:60:54:26:a8:b7:e0:
                    67:c2:6f:d8:8e:e6:36:b4:40:45:07:f7:fa:a3:4f:
                    88:28:6d:88:48:85:73:91:96:e6:c7:17:44:5c:e0:
                    1c:5a:99:bc:d4:65:5e:c0:6c:a9:26:c0:fe:61:31:
                    d7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9E:AD:5E:E1:6D:FE:9E:5E:4C:91:D2:EB:9A:B4:96:18:06:B9:32
            X509v3 Authority Key Identifier:
                keyid:1A:45:48:BF:C3:BF:3B:C2:F8:1F:0B:D2:47:C1:8C:DD:19:73:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/1A4548BFC3BF3BC2F81F0BD247C18CDD197394B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A4548BFC3BF3BC2F81F0BD247C18CDD197394B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dJE6MCh7naMkRWJyd9imqMdVpW6x4vGHiX24XZE9Vew/0/3137392e34322e36382e302f32342d3234203d3e20323732343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:50:7f:8f:6f:94:b1:25:88:f8:00:24:56:cb:e7:f2:1a:36:
         f6:08:d1:4e:74:de:ff:00:18:f9:2a:c1:a9:77:fc:01:07:f2:
         1c:73:0f:c4:20:f2:81:bb:3b:07:5b:00:1e:c1:00:b4:61:41:
         58:2c:57:9c:99:bd:76:4b:2c:49:39:97:fe:6d:97:b8:02:62:
         bb:d6:52:fa:46:08:2c:b2:f1:74:2f:d4:be:ff:61:81:fa:5b:
         df:78:8e:2e:eb:10:43:17:5c:60:ba:4f:0f:8d:44:2a:4f:93:
         b9:30:6b:38:9b:41:63:29:7c:65:86:e8:55:15:6b:d6:66:c0:
         68:9e:a2:df:32:78:65:b9:ec:e6:aa:71:01:6c:3b:c3:fe:d5:
         12:13:cd:09:b8:c8:15:ab:d0:61:40:68:26:b7:e2:5e:0b:b6:
         65:9d:cc:21:12:c5:9c:19:39:f7:07:66:ba:aa:d9:6c:fd:c0:
         a1:8c:51:7c:90:60:29:da:93:cb:fd:46:77:a3:4f:a0:09:28:
         e4:e2:d1:7c:86:04:6a:7d:1c:27:c1:bb:d1:89:04:87:8e:22:
         03:e1:b9:6b:dd:05:ef:63:2b:33:23:9e:a9:7c:69:d1:78:3d:
         c9:58:a5:17:03:72:86:44:fd:23:3a:20:02:ca:47:ac:4e:55:
         6e:03:d8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:39 2025 by rpki-client