Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/3137392e34332e35332e302f32342d3234203d3e20323730383732.roa
File:                     3137392e34332e35332e302f32342d3234203d3e20323730383732.roa (raw, json)
Hash identifier:          BzBEP+rU0/J02mAOL/f01yrb1etC7obp10hhnKQgyNI=
Subject key identifier:   F0:22:6A:00:16:51:E6:CD:A3:DC:40:CE:88:23:01:0D:F2:99:C8:89
Certificate issuer:       /CN=0A5F71E7C0ECCB54B0581C8E153CD11D69E2F467
Certificate serial:       2984CEF592B2585BE4D698AC24D80D243ED591C1
Authority key identifier: 0A:5F:71:E7:C0:EC:CB:54:B0:58:1C:8E:15:3C:D1:1D:69:E2:F4:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A5F71E7C0ECCB54B0581C8E153CD11D69E2F467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/3137392e34332e35332e302f32342d3234203d3e20323730383732.roa
Signing time:             Thu 25 May 2023 15:57:42 +0000
ROA not before:           Thu 25 May 2023 15:52:42 +0000
ROA not after:            Thu 23 May 2024 15:57:42 +0000
asID:                     270872
IP address blocks:        179.43.53.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:84:ce:f5:92:b2:58:5b:e4:d6:98:ac:24:d8:0d:24:3e:d5:91:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5F71E7C0ECCB54B0581C8E153CD11D69E2F467
        Validity
            Not Before: May 25 15:52:42 2023 GMT
            Not After : May 23 15:57:42 2024 GMT
        Subject: CN=F0226A001651E6CDA3DC40CE8823010DF299C889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a6:2c:76:ed:8e:64:c1:04:fa:38:05:a7:0c:
                    b4:93:d9:c5:64:60:03:6b:78:1b:07:17:b1:a3:aa:
                    7c:4b:e7:0a:24:00:14:e9:48:1a:7c:4e:65:ba:2d:
                    66:d6:a2:ae:57:9b:7d:31:36:c0:06:61:eb:02:6a:
                    19:c0:54:ed:79:50:37:aa:df:2e:4f:ad:0a:f7:d1:
                    3f:11:0e:9c:c4:2e:93:93:3a:b8:3e:d9:ea:23:82:
                    da:c8:3b:18:a5:0f:1b:66:29:5f:c3:0c:99:d9:71:
                    a8:2d:68:d0:a7:73:e7:0b:ee:a2:40:d3:4f:01:02:
                    67:be:52:6b:b2:7c:32:e1:29:e0:0b:56:3a:f0:97:
                    85:70:6b:42:87:36:ad:3e:48:d8:25:bb:c6:6d:dc:
                    b6:23:0a:2d:8b:90:50:a5:a4:1d:6b:47:cb:4a:29:
                    d9:1f:5b:47:b0:db:24:13:f1:ed:5e:6f:18:42:23:
                    10:1b:1f:61:7f:be:55:4c:50:e8:77:28:f9:d4:ad:
                    7b:07:97:dd:de:ee:56:16:18:28:8a:e2:b7:fc:cf:
                    28:d7:3b:30:55:6b:98:ef:e4:1c:36:b7:9c:37:1e:
                    d1:15:94:06:b9:be:7c:71:e8:a7:b9:0a:4f:73:7d:
                    16:a0:11:7a:a2:11:69:92:b4:f5:de:4a:05:85:80:
                    ae:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:22:6A:00:16:51:E6:CD:A3:DC:40:CE:88:23:01:0D:F2:99:C8:89
            X509v3 Authority Key Identifier:
                keyid:0A:5F:71:E7:C0:EC:CB:54:B0:58:1C:8E:15:3C:D1:1D:69:E2:F4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/0A5F71E7C0ECCB54B0581C8E153CD11D69E2F467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A5F71E7C0ECCB54B0581C8E153CD11D69E2F467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/3137392e34332e35332e302f32342d3234203d3e20323730383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:14:5b:d5:c5:bc:fa:ed:92:d2:36:6c:c1:74:b5:16:19:92:
         1d:97:f7:93:12:da:55:eb:88:e2:b1:37:6e:3f:4a:f3:95:13:
         53:bd:e5:94:25:b7:97:4d:84:2d:24:26:f0:b9:36:cc:fe:ae:
         7e:52:3f:3f:fe:ec:d6:50:b9:78:67:77:58:a7:71:1e:18:cf:
         63:c8:d7:e9:19:54:00:f0:80:66:67:37:4f:6d:0a:97:11:5f:
         2f:0a:66:0b:13:99:a5:fd:ba:f4:d2:28:c2:11:a5:80:13:d0:
         7b:7d:80:16:48:d9:b7:9c:07:36:34:33:8e:04:c5:05:9c:5d:
         34:ff:bd:5c:66:10:d3:aa:8a:fc:20:bb:dd:a0:c6:77:9c:ca:
         b4:51:d3:3b:61:ea:4d:c3:8f:08:2e:1c:11:7b:9e:e3:5f:88:
         9d:26:64:da:5b:f7:59:83:12:d9:6f:03:d5:a1:1e:bb:8c:c7:
         95:7c:b3:0f:5e:26:54:5c:ff:d9:ae:05:8d:9c:50:61:1e:a9:
         ae:aa:7e:f8:b6:c8:15:cc:a8:a1:ff:93:fd:e9:7d:2c:00:f6:
         7d:2e:6c:c0:8d:f3:c7:b3:e1:b5:fe:c5:e2:a3:c3:aa:40:7a:
         eb:39:76:fa:54:09:5d:9a:00:ce:1a:9c:69:51:83:cf:21:17:
         33:4b:04:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:37 2025 by rpki-client