Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e203533313831.roa
File:                     3137392e3130392e3132382e302f31392d3234203d3e203533313831.roa (raw, json)
Hash identifier:          irxiDGI1PuXlhYyo/ZHJuTV5sdYDzQUKhFeSIs7ok+0=
Subject key identifier:   7D:CD:A5:C8:FB:36:45:E9:4C:2C:37:CC:6D:75:6D:35:58:72:85:C8
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       21052756FC5A25A4A2E79F6A20AA238D50E4F423
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e203533313831.roa
Signing time:             Thu 06 Mar 2025 19:00:01 +0000
ROA not before:           Thu 06 Mar 2025 18:55:01 +0000
ROA not after:            Fri 06 Mar 2026 19:00:01 +0000
asID:                     53181
IP address blocks:        179.109.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:05:27:56:fc:5a:25:a4:a2:e7:9f:6a:20:aa:23:8d:50:e4:f4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Mar  6 18:55:01 2025 GMT
            Not After : Mar  6 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ea:b7:32:f9:91:9f:73:d1:1d:fd:41:8f:5c:
                    77:58:86:82:f9:b8:53:36:d0:96:bc:c8:d3:9d:3d:
                    6d:89:ba:2a:46:f7:fe:5c:e0:5c:dc:6d:4c:50:eb:
                    28:b6:0c:de:c5:f5:89:15:ce:14:17:d4:6b:c5:b3:
                    f8:91:8d:e9:fb:eb:e4:f5:aa:a0:84:96:11:a7:eb:
                    a9:15:90:09:fe:36:09:a7:01:62:9c:bd:3a:57:e4:
                    da:ed:e9:5f:02:4c:2c:69:4a:c3:96:91:b8:a0:17:
                    48:31:d6:58:30:ca:71:22:39:cf:bb:d4:47:9f:42:
                    02:6e:b4:13:3e:29:25:29:1d:9d:7e:93:44:dd:ca:
                    a3:c9:02:54:d9:9e:fa:86:98:02:31:65:a2:e8:d1:
                    f4:59:5a:f1:6c:35:23:19:2c:2a:b6:ef:2d:dd:3d:
                    d0:38:b0:46:fa:12:68:96:2b:7e:5b:12:05:44:bd:
                    dc:cb:95:13:56:28:dc:ae:0c:53:f7:55:bd:ca:b8:
                    df:7b:47:43:cd:ae:67:fa:f3:27:26:78:34:bd:4d:
                    5e:a6:48:42:c2:09:3e:5d:76:f0:f6:7a:f2:c8:a7:
                    24:c3:9d:18:c8:71:31:44:c7:df:fb:60:ff:07:0b:
                    ff:6f:be:a8:88:a7:68:e6:4c:79:b6:69:85:62:51:
                    24:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CD:A5:C8:FB:36:45:E9:4C:2C:37:CC:6D:75:6D:35:58:72:85:C8
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         27:2d:e9:23:b1:76:e5:3c:d1:bf:18:d9:bd:0e:b4:3c:74:c2:
         88:46:bc:02:8b:72:41:10:b9:67:c4:cf:77:b1:39:91:ce:83:
         67:af:0a:ab:23:92:6a:6f:de:d7:3f:bf:11:77:58:16:be:09:
         9b:86:64:cd:62:26:76:d5:dd:de:79:49:7f:e8:91:00:c7:c2:
         43:21:e6:7c:ff:78:06:8e:ba:4c:e2:a0:69:4c:1d:8d:88:61:
         1d:09:65:02:eb:3d:42:c9:f7:a5:56:d7:67:77:a9:af:02:70:
         fb:98:69:68:81:96:28:63:53:75:86:ba:5b:4e:f5:7a:42:c4:
         c1:01:b5:3f:3e:0e:1c:5f:c5:56:5a:3f:3f:ee:72:6a:40:5f:
         db:8a:ab:d3:2a:00:bd:f8:16:3e:64:cc:01:8d:e0:ce:2b:5d:
         13:af:84:30:47:d5:db:b0:3b:c9:eb:e8:7c:14:eb:ad:2d:2b:
         7d:34:72:60:15:1e:ce:4c:3a:da:a3:29:b8:03:2b:20:cb:19:
         25:94:4a:32:94:d2:11:a9:71:3f:e5:27:fc:20:d9:e2:c4:a4:
         3f:08:7a:92:73:7e:51:13:d0:d9:66:8f:19:74:d0:55:ce:e9:
         7b:af:4e:ed:ca:15:c5:f1:f6:8c:09:1a:37:ce:47:4a:6a:12:
         52:36:88:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:09 2025 by rpki-client