Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/3137392e34392e3137372e302f32342d3234203d3e20323731323033.roa
File:                     3137392e34392e3137372e302f32342d3234203d3e20323731323033.roa (raw, json)
Hash identifier:          /grPaAX7d/AOlj7Yl2IZ2Orru8Pm6ZsxYraK5uPOdsQ=
Subject key identifier:   DE:76:BC:34:91:90:94:63:A2:4F:D6:A2:80:CB:C5:4E:FC:CD:34:AB
Certificate issuer:       /CN=6FF99BACEA5931A351E1A4B143DD026829448291
Certificate serial:       690EF128206941D9D7F5A955FDBAA1B614B793F2
Authority key identifier: 6F:F9:9B:AC:EA:59:31:A3:51:E1:A4:B1:43:DD:02:68:29:44:82:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FF99BACEA5931A351E1A4B143DD026829448291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/3137392e34392e3137372e302f32342d3234203d3e20323731323033.roa
Signing time:             Mon 12 Jun 2023 21:53:17 +0000
ROA not before:           Mon 12 Jun 2023 21:48:17 +0000
ROA not after:            Mon 10 Jun 2024 21:53:17 +0000
asID:                     271203
IP address blocks:        179.49.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0e:f1:28:20:69:41:d9:d7:f5:a9:55:fd:ba:a1:b6:14:b7:93:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF99BACEA5931A351E1A4B143DD026829448291
        Validity
            Not Before: Jun 12 21:48:17 2023 GMT
            Not After : Jun 10 21:53:17 2024 GMT
        Subject: CN=DE76BC3491909463A24FD6A280CBC54EFCCD34AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:89:39:c2:0e:7b:a1:1f:e8:53:d8:95:18:bf:
                    6a:c8:03:dc:17:d1:0d:1d:4f:4e:47:a9:ce:7f:03:
                    60:fc:96:ec:da:c2:a5:66:6c:93:ad:41:f1:e2:7c:
                    ae:0f:99:f3:3e:5e:1d:cf:2e:21:58:c0:52:42:fc:
                    82:9f:62:34:ff:b5:ea:65:f6:eb:b6:23:69:17:b3:
                    55:be:f1:f6:6d:91:c0:f3:93:7e:19:1e:f2:a2:36:
                    69:c5:c3:f7:d5:c8:e0:25:1e:13:42:2c:74:fb:49:
                    46:ad:58:24:33:25:2a:8d:fc:80:36:23:01:13:41:
                    32:3e:04:76:55:22:15:e4:6e:a6:52:5f:07:05:78:
                    22:cd:47:bd:b1:18:60:a1:91:86:c1:96:ea:ad:3e:
                    e1:dd:60:c1:0d:da:b4:a0:f6:29:b0:4e:b1:41:6f:
                    9b:7a:4b:ba:00:97:a7:9d:18:f2:f0:4b:40:d7:4e:
                    1b:a1:bf:28:b2:cd:bc:7d:bd:4d:5c:7d:d3:37:5c:
                    e3:8f:d6:a9:7d:a7:5c:8d:61:bd:65:df:2c:95:45:
                    ce:64:d2:45:1f:5d:4d:30:c6:ef:c0:da:60:e0:5f:
                    10:18:dd:17:31:6d:11:a8:7d:e1:db:3f:0d:f5:5d:
                    cb:65:50:46:b2:3a:09:e7:56:89:36:68:e1:f9:7a:
                    b7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:76:BC:34:91:90:94:63:A2:4F:D6:A2:80:CB:C5:4E:FC:CD:34:AB
            X509v3 Authority Key Identifier:
                keyid:6F:F9:9B:AC:EA:59:31:A3:51:E1:A4:B1:43:DD:02:68:29:44:82:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/6FF99BACEA5931A351E1A4B143DD026829448291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FF99BACEA5931A351E1A4B143DD026829448291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/3137392e34392e3137372e302f32342d3234203d3e20323731323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:6c:3b:dc:ac:bc:e8:10:77:bb:0f:b2:bd:3a:24:b7:aa:22:
         59:6e:00:34:5e:d2:d5:6d:a8:1b:81:e7:24:cf:07:61:d3:8d:
         cf:9c:62:19:db:0f:79:46:d4:19:b0:0b:f5:81:70:90:25:ac:
         3b:03:e7:1d:b6:2d:3e:d1:d4:72:87:8c:c5:59:92:07:0c:ce:
         e6:e4:84:cc:11:d4:83:7c:c9:82:be:66:b0:e8:05:41:e9:0e:
         2f:5e:67:8e:eb:47:e8:f0:9f:73:b9:4d:62:f2:e3:12:2b:7e:
         d7:96:38:84:05:e1:63:48:99:df:0f:8c:7f:85:0a:69:8d:f1:
         83:8e:70:b2:d9:76:e0:b3:60:8e:e6:b0:4a:b1:14:c2:7e:1a:
         8e:f8:bc:e2:09:86:8d:56:ee:64:62:a0:d0:89:68:9a:c8:99:
         90:36:c3:1f:63:70:89:c5:71:11:a7:a2:84:cd:f9:cc:b1:2f:
         fb:56:9e:95:7b:50:30:14:16:e5:64:f6:fb:b6:0a:57:c8:2c:
         fc:b6:1b:17:71:ae:f2:61:e3:ad:d8:76:7a:a4:a8:05:e1:b8:
         60:fb:7b:89:a9:3a:63:cf:e4:82:d7:00:01:9c:32:9e:58:00:
         0f:5e:39:f3:2a:c2:f8:de:1e:5f:86:e9:e3:81:35:81:cd:9d:
         df:cd:65:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:47 2025 by rpki-client