Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/1/3137392e34382e3136302e302f32322d3234203d3e20323731303931.roa
File:                     3137392e34382e3136302e302f32322d3234203d3e20323731303931.roa (raw, json)
Hash identifier:          2RdLKYaNnPHzXDDhXbHjeSdOTIAtpmaMCnLjTJscGkE=
Subject key identifier:   98:BD:61:D4:B5:48:B1:C4:5B:BC:E7:89:95:70:75:8A:C8:FB:F6:60
Certificate issuer:       /CN=DC1AF965E88CC5CC96AB700F97E1089DE1A75A19
Certificate serial:       776AFF2DD490E08CAC10F49C5CC31902813FD239
Authority key identifier: DC:1A:F9:65:E8:8C:C5:CC:96:AB:70:0F:97:E1:08:9D:E1:A7:5A:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/1/3137392e34382e3136302e302f32322d3234203d3e20323731303931.roa
Signing time:             Fri 07 Mar 2025 03:00:35 +0000
ROA not before:           Fri 07 Mar 2025 02:55:35 +0000
ROA not after:            Fri 06 Mar 2026 03:00:35 +0000
asID:                     271091
IP address blocks:        179.48.160.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6a:ff:2d:d4:90:e0:8c:ac:10:f4:9c:5c:c3:19:02:81:3f:d2:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC1AF965E88CC5CC96AB700F97E1089DE1A75A19
        Validity
            Not Before: Mar  7 02:55:35 2025 GMT
            Not After : Mar  6 03:00:35 2026 GMT
        Subject: CN=98BD61D4B548B1C45BBCE7899570758AC8FBF660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:45:5d:b8:58:e9:40:78:38:2c:78:38:c0:be:
                    62:10:ee:58:2e:7b:77:9d:fa:f7:19:9c:04:69:5f:
                    21:5b:1a:c3:6c:c6:c2:94:ea:70:c6:fb:f0:9b:ab:
                    11:68:ac:32:f5:fb:84:3b:1c:1c:6a:3a:97:84:9b:
                    a9:e3:52:e3:80:2a:2f:07:39:64:04:27:5b:48:25:
                    12:38:5e:c0:67:6d:de:1d:ef:d2:6f:b8:56:39:63:
                    0f:52:d2:ac:bc:f3:18:02:0d:29:e5:b9:6a:a2:3e:
                    e3:dc:dc:d9:a4:38:de:62:75:81:58:2e:e3:75:cc:
                    68:a3:56:2b:5c:73:c6:7b:05:e2:53:01:b3:a8:74:
                    b7:d7:31:02:48:46:aa:c4:d0:cc:3a:7d:4c:ee:8e:
                    d0:c1:9b:21:d6:d9:bc:9f:c0:39:35:cc:5e:e6:ad:
                    13:69:10:a5:5c:9c:3c:bb:e2:fe:c3:28:e6:8a:43:
                    9a:51:24:59:e3:eb:ea:80:63:56:65:cb:b3:f7:96:
                    ae:92:7a:8d:67:31:a8:65:64:49:93:f9:d9:f6:dc:
                    b5:9f:fa:b9:98:d5:2f:7f:ef:4b:ec:01:83:dc:c3:
                    18:09:42:49:ac:8c:b7:0e:8f:52:0f:63:e6:23:00:
                    64:9a:e3:77:06:ed:9a:4d:eb:b1:18:35:17:fd:d9:
                    0a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BD:61:D4:B5:48:B1:C4:5B:BC:E7:89:95:70:75:8A:C8:FB:F6:60
            X509v3 Authority Key Identifier:
                keyid:DC:1A:F9:65:E8:8C:C5:CC:96:AB:70:0F:97:E1:08:9D:E1:A7:5A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/1/3137392e34382e3136302e302f32322d3234203d3e20323731303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:1b:6e:ff:2f:fc:e2:e0:11:e6:8c:29:2f:95:cf:bf:77:55:
         fd:0f:7c:78:65:b9:ca:e4:ab:f0:bb:bc:ed:80:4d:9d:72:4c:
         d7:da:35:32:53:94:8a:fe:9e:aa:a5:86:6c:0b:40:c3:77:4e:
         3b:f4:7c:0c:63:30:9a:7a:7b:ee:6c:52:b5:5d:6e:ee:3c:66:
         59:a4:9e:1e:16:c9:5d:56:34:66:2c:f6:03:bf:95:b7:be:d7:
         a6:30:fa:72:42:c2:25:85:4e:f7:8a:94:cd:0c:c7:58:af:90:
         b7:dc:91:db:64:6a:da:bb:4f:cf:2d:ed:38:90:9b:d5:ec:0a:
         3b:28:49:68:48:52:86:ab:a1:50:56:c6:7c:3e:16:74:60:41:
         11:1e:23:23:53:2f:2d:c6:ec:1e:f3:fd:ba:d9:d7:c7:4b:dc:
         96:c9:9a:18:d5:2b:c7:f7:3d:a3:0c:e0:29:07:75:ee:a1:dc:
         61:15:a5:3e:4c:6a:64:a2:71:af:0d:b6:fc:8f:c8:ef:35:32:
         ef:bd:58:c4:eb:b7:81:12:dc:35:d6:db:67:7a:10:f9:04:b5:
         f2:41:3e:11:7c:d7:fa:b0:a8:3a:e9:70:7f:e8:f0:97:65:fc:
         bb:0b:d6:26:a5:9a:21:20:69:24:24:11:f6:a2:b4:43:8a:cc:
         fc:d9:b7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:59:28 2025 by rpki-client