Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/3137392e34332e35352e302f32342d3234203d3e20323730383732.roa
File:                     3137392e34332e35352e302f32342d3234203d3e20323730383732.roa (raw, json)
Hash identifier:          16WVJCeasv8B0Lx5HP81XFsjdDeYmwRL+w2QnujSVfo=
Subject key identifier:   17:18:8F:13:3E:D3:05:E3:91:C2:2A:05:95:19:2A:5F:94:AB:E8:85
Certificate issuer:       /CN=49E4F4FD20AECD45BF68022E29E3B301F9B89DFB
Certificate serial:       7F741F1934F530BE9CCFD17AE2B0C4CEEE576C27
Authority key identifier: 49:E4:F4:FD:20:AE:CD:45:BF:68:02:2E:29:E3:B3:01:F9:B8:9D:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49E4F4FD20AECD45BF68022E29E3B301F9B89DFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/3137392e34332e35352e302f32342d3234203d3e20323730383732.roa
Signing time:             Thu 25 May 2023 17:07:20 +0000
ROA not before:           Thu 25 May 2023 17:02:20 +0000
ROA not after:            Thu 23 May 2024 17:07:20 +0000
asID:                     270872
IP address blocks:        179.43.55.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:74:1f:19:34:f5:30:be:9c:cf:d1:7a:e2:b0:c4:ce:ee:57:6c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49E4F4FD20AECD45BF68022E29E3B301F9B89DFB
        Validity
            Not Before: May 25 17:02:20 2023 GMT
            Not After : May 23 17:07:20 2024 GMT
        Subject: CN=17188F133ED305E391C22A0595192A5F94ABE885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:b0:72:c2:fd:b3:ce:87:33:ac:aa:2f:83:
                    c3:22:45:97:12:14:d3:3e:60:68:10:60:ba:38:2b:
                    79:ee:3a:85:0f:cd:8d:ee:18:6f:30:cb:fb:a6:59:
                    b0:80:4b:d0:f9:a6:02:cb:0c:48:d6:7e:7e:3b:31:
                    5f:a9:4d:c1:8c:2c:ef:a8:5c:5f:12:35:63:b9:b6:
                    f9:78:26:46:a8:80:7c:5b:7c:80:bb:ad:d6:09:fb:
                    40:89:74:06:1c:0b:1d:bc:ef:ef:0b:cb:d0:2b:08:
                    3f:f0:95:c7:06:2c:ca:fa:55:ff:56:4d:db:a6:b5:
                    18:09:41:2b:0f:77:ee:df:a4:46:d5:2a:21:51:dd:
                    54:b1:37:72:1b:b1:9e:70:8e:ba:b7:28:26:3d:71:
                    4e:8e:6f:5d:8c:32:77:f2:d6:f7:94:10:00:7e:72:
                    d9:9f:35:9b:51:6c:68:ed:ca:29:8c:09:c1:11:52:
                    dd:b6:85:b9:e3:d1:7d:e9:95:d7:9a:06:94:df:57:
                    9d:79:d9:db:46:c6:46:e3:dd:19:71:04:fb:66:9d:
                    90:27:0e:2f:c7:99:b5:6b:1d:30:79:0b:0c:97:e5:
                    07:0b:b7:47:33:0c:a5:e0:b5:96:7d:56:fd:7e:40:
                    1d:54:7b:ff:77:ed:53:19:88:eb:09:04:8f:23:53:
                    a6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:18:8F:13:3E:D3:05:E3:91:C2:2A:05:95:19:2A:5F:94:AB:E8:85
            X509v3 Authority Key Identifier:
                keyid:49:E4:F4:FD:20:AE:CD:45:BF:68:02:2E:29:E3:B3:01:F9:B8:9D:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/49E4F4FD20AECD45BF68022E29E3B301F9B89DFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49E4F4FD20AECD45BF68022E29E3B301F9B89DFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/3137392e34332e35352e302f32342d3234203d3e20323730383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:08:47:78:2d:0f:b3:37:a6:37:13:bc:87:67:fb:39:5d:a4:
         54:cc:47:c4:6e:be:b3:69:0c:5f:75:51:4c:c2:f9:11:03:ec:
         47:da:ed:9c:12:82:fb:9d:7a:9f:ac:50:b3:3d:d1:bc:63:e8:
         25:e1:f4:6d:e7:ed:d7:3f:f1:58:05:14:d1:cb:69:bb:36:75:
         b4:c1:24:f2:46:be:ac:b5:af:2b:d8:c5:8e:34:e0:35:c3:2d:
         6f:69:a9:7c:ed:dd:70:10:72:15:6b:d8:a9:fa:ff:4d:6a:53:
         b8:f5:be:bc:80:49:0f:9e:ed:d6:4b:25:66:a8:60:dd:e4:e1:
         22:fe:66:7a:23:08:58:1c:86:13:db:82:cb:f3:58:6c:64:1f:
         e4:b5:72:76:7e:f1:34:47:10:e5:a1:f6:05:df:21:59:af:2d:
         65:88:52:85:be:cb:4d:3c:3b:94:d0:ed:ad:17:eb:a4:1a:65:
         ff:dd:50:8a:11:27:68:f2:23:47:34:15:13:12:38:b8:51:b6:
         a0:48:29:14:a1:ae:15:b4:44:c8:7b:1b:59:66:b0:6f:e5:62:
         eb:49:66:cb:d6:37:9d:1b:23:42:95:68:92:43:1c:86:59:d3:
         14:67:85:7a:dc:c6:87:71:ad:29:42:d0:6f:3d:ea:76:f6:04:
         fc:d0:dd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:21 2025 by rpki-client