Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/3137392e36332e34382e302f32322d3332203d3e20323732363734.roa
File:                     3137392e36332e34382e302f32322d3332203d3e20323732363734.roa (raw, json)
Hash identifier:          WWTp0wlKDlxvtmract7gaffOsSewkMkboOFAshaQ0pM=
Subject key identifier:   AA:09:74:F0:AA:96:36:BE:25:B7:A9:30:93:94:0D:51:6D:36:6B:8D
Certificate issuer:       /CN=BBFD07829824ED2E39C17D185BBAD3FFD99DE265
Certificate serial:       3773CB45A0782ACFFB3F76E0DB8AB28A8C5719CF
Authority key identifier: BB:FD:07:82:98:24:ED:2E:39:C1:7D:18:5B:BA:D3:FF:D9:9D:E2:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/3137392e36332e34382e302f32322d3332203d3e20323732363734.roa
Signing time:             Tue 28 Jan 2025 18:24:24 +0000
ROA not before:           Tue 28 Jan 2025 18:19:24 +0000
ROA not after:            Tue 27 Jan 2026 18:24:24 +0000
asID:                     272674
IP address blocks:        179.63.48.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:73:cb:45:a0:78:2a:cf:fb:3f:76:e0:db:8a:b2:8a:8c:57:19:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBFD07829824ED2E39C17D185BBAD3FFD99DE265
        Validity
            Not Before: Jan 28 18:19:24 2025 GMT
            Not After : Jan 27 18:24:24 2026 GMT
        Subject: CN=AA0974F0AA9636BE25B7A93093940D516D366B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:82:5a:01:39:f3:38:40:79:cc:e5:bc:12:
                    1a:d8:0e:89:72:83:12:44:bc:80:ea:13:4e:d8:5f:
                    38:39:62:b7:f4:0f:98:e6:7b:f3:8a:44:3a:1c:8a:
                    69:b8:e4:42:ee:35:f0:24:79:41:db:9a:02:68:6d:
                    24:c3:95:d0:2e:0d:69:49:a6:a3:31:6a:f5:0c:ff:
                    6e:67:e3:31:c9:03:8f:b5:30:e7:51:af:95:42:f0:
                    4b:33:e3:46:00:a2:ea:41:7b:6c:a2:48:42:a1:c5:
                    31:2a:7e:ea:fb:67:49:2c:a6:b8:69:d5:ed:c1:d1:
                    f3:d6:26:71:e7:f5:03:e8:83:03:4c:00:52:04:2a:
                    0d:ef:9e:78:62:87:ec:cb:c1:87:e1:8c:c7:79:c9:
                    72:9f:42:bc:57:dc:70:95:fe:11:14:37:ef:cd:2f:
                    41:56:db:f6:79:95:86:0a:ca:1b:ee:ea:ae:07:a3:
                    38:e1:4c:04:af:aa:4d:49:80:68:b8:4f:86:ac:45:
                    d2:92:c5:4c:19:9b:c2:1c:32:b9:22:cf:97:bc:8d:
                    1e:88:c9:3d:ca:7a:21:bc:72:75:6c:bb:29:7b:01:
                    f9:52:bd:ef:9b:f2:ca:3e:54:86:5e:0e:e9:3d:69:
                    ce:ab:38:e3:80:09:b8:ee:07:33:09:7c:f5:42:47:
                    98:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:09:74:F0:AA:96:36:BE:25:B7:A9:30:93:94:0D:51:6D:36:6B:8D
            X509v3 Authority Key Identifier:
                keyid:BB:FD:07:82:98:24:ED:2E:39:C1:7D:18:5B:BA:D3:FF:D9:9D:E2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/3137392e36332e34382e302f32322d3332203d3e20323732363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:ce:aa:c8:70:26:2e:c7:b4:0c:b6:bf:05:f5:3c:f0:e3:
         c0:09:82:6e:b1:42:b7:5a:30:e0:a7:46:05:1f:5d:aa:0e:e7:
         4a:b0:5e:7e:15:55:6d:e2:8e:ae:23:43:59:57:ee:5d:30:ed:
         31:21:89:ae:8f:1e:ef:c0:a8:4c:85:1d:28:33:6c:07:78:eb:
         ac:e5:a3:ba:60:a6:c5:93:d9:e8:b5:47:51:91:c8:58:fd:95:
         61:3a:b9:87:7b:8c:bf:c3:a4:12:4e:5d:7e:ed:5e:43:36:4f:
         c4:d0:2a:81:88:79:f7:ef:4b:40:76:da:e3:31:29:71:2c:3a:
         c0:b2:69:02:a5:43:6e:79:de:b7:38:84:11:a1:90:37:f8:ae:
         6c:d9:05:64:ed:57:fe:e6:60:6d:92:47:ab:ac:24:ac:80:fc:
         2a:91:ad:f6:5f:d0:a1:1a:19:e3:94:c7:1b:08:34:1a:68:31:
         2b:3b:fe:47:61:ee:8c:62:0c:f6:52:3d:d0:3b:78:a3:98:32:
         a4:84:b5:5e:7a:d0:09:fb:07:ab:b3:46:6a:51:f9:96:c3:f1:
         cf:6f:e6:29:40:b3:da:58:49:f3:16:e2:96:3e:e1:34:25:b9:
         f4:d0:61:5e:db:3d:20:a9:aa:15:50:d8:b0:c5:15:d0:3f:53:
         7c:08:3c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:17:14 2025 by rpki-client