Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3137392e34322e39362e302f32322d3234203d3e203532353733.roa
File:                     3137392e34322e39362e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          mshOQxpo6ssefc0kEUE5+41Jo1tfsrt2wJrinc6puYc=
Subject key identifier:   39:60:E6:20:C8:39:A9:9A:16:6D:69:55:B5:33:7F:8B:9E:AF:65:BD
Certificate issuer:       /CN=3574A58A568C8AE1ADC3EE503BF56A5366499355
Certificate serial:       7D70E5C7288B90FEF77BF8ABCF4A20D06FC38F9C
Authority key identifier: 35:74:A5:8A:56:8C:8A:E1:AD:C3:EE:50:3B:F5:6A:53:66:49:93:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3137392e34322e39362e302f32322d3234203d3e203532353733.roa
Signing time:             Mon 19 Feb 2024 19:43:25 +0000
ROA not before:           Mon 19 Feb 2024 19:38:25 +0000
ROA not after:            Mon 17 Feb 2025 19:43:25 +0000
asID:                     52573
IP address blocks:        179.42.96.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:70:e5:c7:28:8b:90:fe:f7:7b:f8:ab:cf:4a:20:d0:6f:c3:8f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3574A58A568C8AE1ADC3EE503BF56A5366499355
        Validity
            Not Before: Feb 19 19:38:25 2024 GMT
            Not After : Feb 17 19:43:25 2025 GMT
        Subject: CN=3960E620C839A99A166D6955B5337F8B9EAF65BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:d3:3b:6c:1b:75:75:53:57:5e:aa:bb:97:
                    30:4e:61:fe:87:5c:71:ad:bf:8a:4c:43:c2:74:9d:
                    27:be:1c:d6:f8:4f:2f:a1:d8:c7:42:42:fc:53:af:
                    be:60:df:1f:0c:3e:3a:12:eb:6f:29:d3:e7:8d:40:
                    25:bd:c5:8b:92:7e:c4:5a:e7:84:14:b2:ee:53:98:
                    ad:32:a5:14:34:22:80:ac:b2:76:01:00:88:85:a6:
                    ce:2b:9c:bf:cd:b0:3d:9c:23:8f:a6:b3:eb:88:51:
                    21:4e:2a:be:3c:d3:52:dd:f0:c1:58:75:09:a8:65:
                    db:7c:ec:14:27:85:98:a1:1a:7f:44:14:dd:1a:b3:
                    7c:fe:e6:01:f5:62:98:dd:19:aa:69:7d:fc:cc:06:
                    68:de:84:a0:d2:60:42:6f:6e:a6:54:93:03:08:f7:
                    7e:0b:49:b4:f9:e0:e8:a8:87:47:70:b5:70:86:ba:
                    1b:60:31:87:84:08:de:44:85:99:9d:b0:47:82:c0:
                    5b:6c:ee:c1:b7:24:88:99:94:d6:e6:df:e2:27:3e:
                    44:63:9c:53:72:a4:a7:2e:87:d9:5e:37:5e:01:d9:
                    7e:e2:57:c4:ae:0a:0d:f3:35:f3:38:27:e2:a1:7f:
                    ae:89:11:2f:58:5a:de:d4:45:ae:a4:f9:ce:1f:da:
                    b7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:60:E6:20:C8:39:A9:9A:16:6D:69:55:B5:33:7F:8B:9E:AF:65:BD
            X509v3 Authority Key Identifier:
                keyid:35:74:A5:8A:56:8C:8A:E1:AD:C3:EE:50:3B:F5:6A:53:66:49:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3137392e34322e39362e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:b4:8e:81:34:57:81:06:81:0b:47:22:d5:ab:21:af:2c:b8:
         bd:e9:df:4b:34:bb:97:9c:6a:bd:19:10:6b:0b:c5:6d:3a:93:
         a4:b7:22:ce:5e:1f:b5:97:51:3b:04:96:3b:6f:15:d8:33:f6:
         68:94:19:00:a6:8f:d0:04:1a:83:39:af:60:39:a5:0f:53:8f:
         bd:b1:4a:f3:84:e5:e2:a4:c5:b4:da:49:7b:03:dd:50:ea:19:
         29:1f:b0:db:2e:cc:5d:ec:6e:d6:3c:07:84:8a:3a:16:86:70:
         a9:27:e2:67:db:67:f5:59:d1:ad:a7:06:3f:1e:3c:0c:9f:81:
         9c:c2:00:ef:ec:89:3d:b4:87:1d:61:d4:53:f1:91:c7:b2:13:
         c7:6c:ba:aa:87:6b:eb:06:f9:a6:c0:50:e8:96:f7:5f:61:e1:
         e2:9e:41:5b:b5:14:92:12:23:52:c6:b4:3f:c0:44:c4:56:a1:
         9f:cf:c0:33:60:e0:c6:5e:2b:9c:54:88:29:0b:fe:54:d0:0f:
         8b:27:ba:0c:c1:26:f0:31:a6:03:7b:b8:27:ae:63:8e:3b:0c:
         7e:21:92:b0:80:2d:69:47:a3:db:1d:fa:f1:b1:ff:9b:29:c7:
         ff:8d:3c:f4:7d:3a:eb:3f:ea:ee:fc:29:aa:6f:d2:16:b8:78:
         fd:d5:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:43 2025 by rpki-client