Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/3137392e34392e3137382e302f32342d3234203d3e20323731323033.roa
File:                     3137392e34392e3137382e302f32342d3234203d3e20323731323033.roa (raw, json)
Hash identifier:          ySjgkv8Md7TmGnkDEpVxZa0WdslLvSrALdYPCFE4h0g=
Subject key identifier:   B3:F6:79:83:96:F1:6F:01:E7:3B:7F:0E:2E:84:B4:8A:07:D9:87:C8
Certificate issuer:       /CN=6FF99BACEA5931A351E1A4B143DD026829448291
Certificate serial:       43A02C1E0E18D2552497DFEEE03F56E6DA0CDF8B
Authority key identifier: 6F:F9:9B:AC:EA:59:31:A3:51:E1:A4:B1:43:DD:02:68:29:44:82:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FF99BACEA5931A351E1A4B143DD026829448291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/3137392e34392e3137382e302f32342d3234203d3e20323731323033.roa
Signing time:             Mon 12 Jun 2023 21:53:15 +0000
ROA not before:           Mon 12 Jun 2023 21:48:15 +0000
ROA not after:            Mon 10 Jun 2024 21:53:15 +0000
asID:                     271203
IP address blocks:        179.49.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a0:2c:1e:0e:18:d2:55:24:97:df:ee:e0:3f:56:e6:da:0c:df:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF99BACEA5931A351E1A4B143DD026829448291
        Validity
            Not Before: Jun 12 21:48:15 2023 GMT
            Not After : Jun 10 21:53:15 2024 GMT
        Subject: CN=B3F6798396F16F01E73B7F0E2E84B48A07D987C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:d1:ad:b3:21:d2:b8:bf:77:17:2c:65:63:
                    b7:a4:46:cf:f6:b3:d4:ca:77:01:f4:a4:89:4c:da:
                    82:39:6c:12:dd:b0:f3:5a:ee:64:8f:e7:dd:cf:d5:
                    2d:a8:3d:df:ab:e0:4e:13:79:31:af:22:a4:8c:3f:
                    16:4e:9d:ef:5d:3e:53:18:29:cb:c6:60:ce:d7:ec:
                    15:8f:3e:b8:ae:47:67:39:99:9b:b5:d0:d9:63:c2:
                    55:86:de:b0:c0:f4:e7:7b:01:fe:fc:ef:42:bf:b6:
                    e6:b5:82:1c:c8:9e:78:29:f0:bc:73:19:d1:85:14:
                    61:5b:47:cd:7f:d2:3f:69:59:9a:bd:82:cd:8c:ee:
                    3e:ef:40:64:c8:8f:2d:41:b4:be:a8:96:bf:0c:37:
                    b6:80:fc:43:47:9a:e9:6f:a0:57:0b:df:ad:17:4b:
                    ee:72:17:b7:a3:19:ef:48:fc:9f:92:d6:60:cf:71:
                    75:e8:d1:6f:6a:b6:ab:e2:40:75:a9:ed:23:09:b6:
                    3e:f5:cc:09:34:39:81:27:95:3a:f1:9f:7d:11:a7:
                    ea:df:fe:77:70:32:51:42:90:85:54:aa:48:06:ef:
                    d5:b6:db:0a:eb:cd:01:0d:2c:84:e4:9d:4f:44:65:
                    59:39:79:ce:d2:f6:87:c6:01:d6:27:5c:4f:ed:a3:
                    27:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F6:79:83:96:F1:6F:01:E7:3B:7F:0E:2E:84:B4:8A:07:D9:87:C8
            X509v3 Authority Key Identifier:
                keyid:6F:F9:9B:AC:EA:59:31:A3:51:E1:A4:B1:43:DD:02:68:29:44:82:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/6FF99BACEA5931A351E1A4B143DD026829448291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FF99BACEA5931A351E1A4B143DD026829448291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/3137392e34392e3137382e302f32342d3234203d3e20323731323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:51:83:55:c0:23:30:ac:97:1c:8f:c0:70:43:03:58:a0:a9:
         cf:cc:1d:4b:2e:a4:b9:c9:52:31:8c:40:e0:1e:20:af:3b:76:
         7f:8c:3e:91:7b:1a:00:1f:c2:41:27:51:b5:9b:2d:c3:ba:df:
         44:77:79:0b:a1:11:44:92:a1:c7:81:a5:ef:c6:46:d3:75:74:
         3d:c1:41:c5:3b:e0:a2:80:30:28:6a:76:e1:a6:81:ed:5b:ef:
         7a:98:f9:f6:81:5c:b4:1e:b8:85:50:e8:2f:72:a7:56:59:17:
         96:38:cb:69:29:a0:b7:1e:ae:20:6e:e9:cc:94:2f:ae:3f:61:
         8b:68:e2:d3:1f:51:e9:1a:6e:66:2f:8c:4a:07:7c:5f:be:1a:
         bb:b1:92:cd:97:f9:98:0b:69:de:4c:fa:5a:b4:06:46:a6:a5:
         a6:8f:ae:ce:f0:a3:60:5a:07:ea:16:0d:c6:15:6b:ee:61:b5:
         f3:2b:ba:9b:e3:f5:2f:4b:f6:cf:ee:fd:e2:7e:fd:03:1c:a1:
         99:71:83:2c:cd:cd:f3:46:18:81:fc:44:4c:d5:0f:6a:dd:a7:
         e8:08:5a:de:cc:a5:d5:53:2b:51:1c:cd:8d:e3:59:d4:1c:c1:
         e6:55:5c:b1:33:a8:30:7d:72:8a:82:99:0a:4f:92:64:56:94:
         ff:51:55:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:40 2025 by rpki-client