Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/3137392e36332e3137392e302f32342d3234203d3e203631363035.roa
File:                     3137392e36332e3137392e302f32342d3234203d3e203631363035.roa (raw, json)
Hash identifier:          lvM0/+qwfsCbTMVFWBBrn1jbDheHOvjv/ASx98x6+TI=
Subject key identifier:   30:D8:98:B4:F9:26:FE:80:A6:2F:2C:2D:97:DA:79:19:61:FF:D8:0A
Certificate issuer:       /CN=95A9B935AF7391D649D034160A7150D2138ECFBC
Certificate serial:       6F209F7DD0A17CC4BD61AD2618A4792216C0E8D2
Authority key identifier: 95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/3137392e36332e3137392e302f32342d3234203d3e203631363035.roa
Signing time:             Wed 23 Oct 2024 18:55:37 +0000
ROA not before:           Wed 23 Oct 2024 18:50:37 +0000
ROA not after:            Wed 22 Oct 2025 18:55:37 +0000
asID:                     61605
IP address blocks:        179.63.179.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:20:9f:7d:d0:a1:7c:c4:bd:61:ad:26:18:a4:79:22:16:c0:e8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95A9B935AF7391D649D034160A7150D2138ECFBC
        Validity
            Not Before: Oct 23 18:50:37 2024 GMT
            Not After : Oct 22 18:55:37 2025 GMT
        Subject: CN=30D898B4F926FE80A62F2C2D97DA791961FFD80A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:24:ca:56:a5:11:99:a8:d0:3e:a1:3a:65:
                    82:58:19:ce:93:ca:94:8c:b6:f3:d8:da:9a:7c:48:
                    3f:b1:06:fd:b6:fb:97:67:14:8c:94:bf:60:13:b6:
                    34:ec:34:f8:54:71:c5:cb:3f:c0:ab:56:de:0f:42:
                    5c:a2:3b:6d:ed:b5:6a:37:d2:f5:31:8f:86:a8:bf:
                    7b:e9:2d:67:4a:ef:27:a5:e7:1d:85:4e:ff:49:13:
                    0f:a1:82:cb:7a:20:45:d6:76:1e:8b:b8:bb:c4:2b:
                    a1:99:eb:a3:08:4d:aa:39:1d:b1:a3:83:e5:4c:c0:
                    d2:a0:f3:4b:7c:a0:e9:9e:bf:0e:02:94:76:8c:57:
                    30:fa:45:92:d3:d2:73:d8:0b:2d:aa:90:31:59:3c:
                    14:f9:32:8b:32:bd:b3:13:54:30:52:7f:8e:f4:50:
                    38:80:4d:65:4c:66:75:f2:85:e9:b1:3f:fe:15:a6:
                    aa:b9:f4:9e:00:f4:62:4b:2b:b0:37:18:90:33:10:
                    f1:1f:42:af:39:6e:85:c0:5d:dc:f8:f4:d5:02:79:
                    b9:df:5d:7c:96:c4:2c:07:e2:e7:6b:9f:fc:dc:93:
                    e2:be:bd:62:d6:b2:2a:37:62:d3:c3:25:51:e7:ff:
                    e2:f5:c6:57:2c:ac:e8:ea:75:e0:5f:9e:c5:12:a5:
                    1b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D8:98:B4:F9:26:FE:80:A6:2F:2C:2D:97:DA:79:19:61:FF:D8:0A
            X509v3 Authority Key Identifier:
                keyid:95:A9:B9:35:AF:73:91:D6:49:D0:34:16:0A:71:50:D2:13:8E:CF:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/95A9B935AF7391D649D034160A7150D2138ECFBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95A9B935AF7391D649D034160A7150D2138ECFBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BLUrtzMhwr5suQF5aLmU45ErkvLBLXQXWUQAVZgR3bj/0/3137392e36332e3137392e302f32342d3234203d3e203631363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:66:bd:98:aa:07:12:c1:7a:58:92:27:69:07:11:14:fb:77:
         7f:f4:05:24:3c:ec:fe:63:4a:0b:f0:1f:07:54:4b:f6:3f:bf:
         5d:12:27:b4:64:57:53:b4:d2:f3:8d:47:7d:33:be:1a:a3:db:
         68:8f:6c:74:ad:f2:cf:c9:f6:3d:97:79:ee:8f:45:c4:2e:6b:
         e8:b6:2f:90:f5:8e:42:6f:55:56:3e:be:86:b5:b6:90:42:77:
         b5:07:ea:7c:89:e9:1b:a1:d2:b6:c8:cd:f0:59:4a:8b:26:df:
         e7:91:73:23:07:5d:20:0b:35:87:a0:2e:88:31:e1:0f:7e:74:
         b5:38:8d:1d:87:d5:63:f7:4e:e4:1f:e7:c0:04:e6:dc:80:eb:
         b1:0c:cb:c4:c7:39:c8:7a:0f:61:04:bc:2b:3c:8f:e3:8c:4a:
         e4:ac:6d:1c:12:fb:5d:0c:1c:4b:72:71:f5:d9:19:c0:f2:8e:
         4f:49:44:92:18:c9:b9:e4:5c:88:84:32:21:72:96:bd:e2:31:
         00:6e:05:5c:be:b4:c8:e8:75:0e:b0:28:2d:3a:a8:b1:0f:b0:
         ee:92:d6:e1:e8:85:85:5b:5f:52:d7:b3:ae:28:97:9f:42:58:
         fc:17:4a:95:66:57:17:01:3d:19:c2:fe:eb:70:40:6c:45:87:
         f1:42:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:43 2025 by rpki-client