Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/3137392e34382e3232302e302f32322d3234203d3e20323731313032.roa
File:                     3137392e34382e3232302e302f32322d3234203d3e20323731313032.roa (raw, json)
Hash identifier:          3hVM4jnqYGabvGe6svjhj7370C+eBYU1QNi2kZd9GbY=
Subject key identifier:   20:54:19:02:F6:3F:97:74:D1:B6:CF:DF:53:EC:76:6F:C9:AB:46:8D
Certificate issuer:       /CN=1C88D461B94EF8EE43920884F50159FE4B7AA009
Certificate serial:       0875A34B559AF39DFC5B4011DFFBA09D80258870
Authority key identifier: 1C:88:D4:61:B9:4E:F8:EE:43:92:08:84:F5:01:59:FE:4B:7A:A0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C88D461B94EF8EE43920884F50159FE4B7AA009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/3137392e34382e3232302e302f32322d3234203d3e20323731313032.roa
Signing time:             Tue 14 Jan 2025 18:18:59 +0000
ROA not before:           Tue 14 Jan 2025 18:13:59 +0000
ROA not after:            Tue 13 Jan 2026 18:18:59 +0000
asID:                     271102
IP address blocks:        179.48.220.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:75:a3:4b:55:9a:f3:9d:fc:5b:40:11:df:fb:a0:9d:80:25:88:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C88D461B94EF8EE43920884F50159FE4B7AA009
        Validity
            Not Before: Jan 14 18:13:59 2025 GMT
            Not After : Jan 13 18:18:59 2026 GMT
        Subject: CN=20541902F63F9774D1B6CFDF53EC766FC9AB468D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:68:61:1a:c3:de:9e:90:82:ad:97:16:6d:31:
                    ae:06:d2:51:74:b3:f5:6a:44:19:76:e9:e2:ca:b3:
                    29:65:24:06:a3:0d:98:06:49:c8:e0:f7:53:6e:90:
                    49:ef:56:1c:53:93:5b:c0:55:1e:b6:92:38:74:ae:
                    78:8f:2e:44:e2:24:c0:59:9f:20:63:fa:40:95:a0:
                    35:1e:8c:04:87:96:df:04:94:f5:78:eb:8d:28:d2:
                    6e:61:c0:5f:50:37:cd:5d:c3:73:00:20:ac:33:e5:
                    bb:27:1e:36:e4:4b:f3:4d:9d:10:12:53:1a:cc:cd:
                    86:53:da:36:dd:70:9d:8b:97:b1:8f:f0:db:e6:10:
                    73:35:92:a2:56:40:21:b1:bc:30:e5:2f:77:46:50:
                    86:0d:66:54:f1:fd:7c:9f:46:9c:3f:dd:5a:25:86:
                    ff:83:c9:f8:22:f1:30:a8:a9:e8:db:79:1e:5d:f1:
                    cc:47:12:50:2d:6d:29:e6:85:72:e4:24:42:34:7d:
                    4c:7a:7c:b6:84:0e:b0:2f:6e:fa:bc:ff:c0:1f:de:
                    a0:fb:3f:22:d9:61:c4:8d:d9:a2:ed:01:ed:48:92:
                    81:38:eb:53:04:5b:01:8d:ae:78:b4:fe:18:58:c4:
                    13:7a:b3:0b:04:ae:82:56:e5:d9:78:28:57:c7:b0:
                    90:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:54:19:02:F6:3F:97:74:D1:B6:CF:DF:53:EC:76:6F:C9:AB:46:8D
            X509v3 Authority Key Identifier:
                keyid:1C:88:D4:61:B9:4E:F8:EE:43:92:08:84:F5:01:59:FE:4B:7A:A0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/1C88D461B94EF8EE43920884F50159FE4B7AA009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C88D461B94EF8EE43920884F50159FE4B7AA009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/3137392e34382e3232302e302f32322d3234203d3e20323731313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:b0:5b:16:9b:52:6b:8b:1c:5f:36:36:0c:2c:90:73:cf:3e:
         1a:ab:92:5f:aa:1a:92:18:c8:e9:07:5d:3b:a2:b4:b3:d2:2a:
         7a:23:75:e4:06:c6:c1:54:9c:11:36:d2:dd:1b:ab:9d:1f:b9:
         05:b9:af:8f:b7:0f:3f:c9:56:c5:c3:dc:05:27:f7:df:cc:1e:
         ec:d1:d7:d3:e7:84:50:e3:b1:8e:2c:d6:d1:65:76:29:ee:7d:
         27:b8:c9:c6:5e:cb:36:b5:4e:33:32:5d:35:6a:7b:12:81:8d:
         8c:27:95:d6:9d:a5:9f:8f:b1:0b:c7:59:b9:a2:0d:46:82:0e:
         0d:c9:7a:41:2b:29:ea:ed:6d:81:5c:d0:73:6e:06:7f:f0:18:
         b1:cb:b5:19:80:ed:9f:6e:16:f3:30:7d:ab:ce:91:1a:9a:d1:
         0a:f0:ea:99:24:99:ae:ea:47:19:5c:ba:2c:c3:29:78:24:12:
         e3:c2:c6:67:aa:b4:36:41:df:d6:be:62:a6:84:b2:7b:60:c5:
         a8:08:df:85:3c:a5:87:0d:b6:ca:f0:35:13:f4:a6:11:6c:5c:
         f1:d0:6a:00:41:0b:4a:a8:a4:5f:00:d0:a0:4e:d2:9a:b4:fe:
         09:87:71:a4:7e:75:44:e9:f3:55:15:75:7a:98:0c:dd:23:b2:
         9b:7a:96:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:25:11 2025 by rpki-client