Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/3137392e34382e32312e302f32342d3234203d3e20323731303633.roa
File:                     3137392e34382e32312e302f32342d3234203d3e20323731303633.roa (raw, json)
Hash identifier:          UXsAQrcS0p26KynCH/YZwixXB5PN8IcthenTq0pV/iI=
Subject key identifier:   A2:44:04:DA:29:A5:0B:06:4E:C2:CB:E7:47:85:BE:DD:0E:8B:3D:59
Certificate issuer:       /CN=B7308D854D4BE5121F93D850679F0E7402EB7388
Certificate serial:       5008669814F961F92B16801512D31A35DECA0E38
Authority key identifier: B7:30:8D:85:4D:4B:E5:12:1F:93:D8:50:67:9F:0E:74:02:EB:73:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7308D854D4BE5121F93D850679F0E7402EB7388.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/3137392e34382e32312e302f32342d3234203d3e20323731303633.roa
Signing time:             Mon 31 Jul 2023 18:31:17 +0000
ROA not before:           Mon 31 Jul 2023 18:26:17 +0000
ROA not after:            Mon 29 Jul 2024 18:31:17 +0000
asID:                     271063
IP address blocks:        179.48.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:08:66:98:14:f9:61:f9:2b:16:80:15:12:d3:1a:35:de:ca:0e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7308D854D4BE5121F93D850679F0E7402EB7388
        Validity
            Not Before: Jul 31 18:26:17 2023 GMT
            Not After : Jul 29 18:31:17 2024 GMT
        Subject: CN=A24404DA29A50B064EC2CBE74785BEDD0E8B3D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:50:7b:d6:23:cf:5f:76:7d:f3:21:be:1c:1b:
                    8b:4b:6b:1f:fe:33:ee:1b:32:b7:65:57:35:45:e7:
                    b0:7e:a7:da:19:ca:ae:1d:f6:07:19:6b:af:a3:54:
                    87:9a:fc:51:11:43:4d:4c:dc:47:ba:b0:af:7e:8f:
                    d2:fc:14:82:e4:08:2e:b8:1d:af:37:01:05:6b:c9:
                    28:a2:ec:42:21:e1:36:16:8f:eb:9f:61:6d:7a:d6:
                    2f:50:46:6d:6d:d6:06:07:6d:b3:0c:87:e5:0b:f0:
                    c1:35:5d:cb:81:75:f1:5f:29:f2:bd:cc:93:c6:5a:
                    4d:22:66:45:29:00:2b:7f:0f:88:09:2b:d3:8e:e8:
                    22:a7:03:1c:5b:c7:11:d2:31:86:38:61:0d:8b:f9:
                    77:61:25:f7:d9:64:18:3d:a1:fb:e6:82:05:67:ca:
                    31:29:07:ee:3b:fc:c1:15:99:80:a4:a3:e5:e4:18:
                    36:33:00:81:7a:d7:18:91:08:0a:10:37:7e:52:81:
                    d9:6e:ae:1a:4d:b6:64:69:e4:aa:c6:46:c0:fe:f8:
                    8f:fd:74:3f:e9:cf:ef:b4:fc:61:09:04:15:71:06:
                    1d:9c:7e:46:bc:74:ac:ac:cc:f6:c7:dc:8d:de:e7:
                    3c:f2:3f:ae:7a:49:a9:f6:d6:6a:fc:96:4d:d5:1d:
                    be:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:44:04:DA:29:A5:0B:06:4E:C2:CB:E7:47:85:BE:DD:0E:8B:3D:59
            X509v3 Authority Key Identifier:
                keyid:B7:30:8D:85:4D:4B:E5:12:1F:93:D8:50:67:9F:0E:74:02:EB:73:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/B7308D854D4BE5121F93D850679F0E7402EB7388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7308D854D4BE5121F93D850679F0E7402EB7388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/3137392e34382e32312e302f32342d3234203d3e20323731303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:73:c5:27:07:e4:2e:d1:a2:d3:dc:d9:9a:a7:e0:2b:25:67:
         09:e9:4e:ef:02:3a:9b:3a:d4:c7:93:23:c8:4a:9f:e3:49:b4:
         93:99:fb:13:1b:89:06:1e:b7:8a:8c:48:d1:82:06:bb:bd:27:
         08:ad:10:0a:31:e2:e7:17:e0:d2:f3:c8:57:a6:c4:62:ab:09:
         18:76:4d:9f:e0:16:32:77:a6:a5:a6:63:c1:20:8b:44:b1:d7:
         b3:b0:3a:5d:7f:1c:1d:b3:c9:0e:8e:25:48:92:cc:67:8a:d1:
         ea:80:a3:39:97:f7:43:c5:d4:7c:34:74:84:02:bb:66:23:92:
         fa:80:0f:a6:3e:64:23:17:0e:4a:c5:0a:08:8e:18:98:30:c6:
         ad:54:aa:a8:ef:38:47:09:b8:6d:cb:e1:44:8d:2f:1c:3d:ed:
         1b:bb:74:0a:24:4a:a7:ab:fd:ba:09:52:73:a4:d4:58:9c:bb:
         2d:86:61:65:97:2c:67:9f:a0:b8:2f:0c:bd:a5:b3:cf:3e:fb:
         c3:28:be:29:00:9c:6b:38:0c:33:7d:9b:62:db:b8:f8:dd:86:
         c0:17:31:f2:36:8b:09:f9:af:b7:08:97:34:73:aa:84:87:0e:
         51:44:d8:b2:74:43:36:40:39:3b:8a:7c:e0:a0:9c:bc:d2:78:
         4e:c9:99:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:46 2025 by rpki-client