Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9FbNHx7Mpi32dcm1v4bT7vTyurf44gPkxs6PjjJGbbYw/0/3137392e34382e3133322e302f32322d3234203d3e20323731303839.roa
File:                     3137392e34382e3133322e302f32322d3234203d3e20323731303839.roa (raw, json)
Hash identifier:          F/P8ig63OGz/6HE7yNeMK4iyXkrvs9RmNwD20ZE5pzg=
Subject key identifier:   83:27:67:DF:A4:03:A9:F1:5C:C7:BA:FB:5C:F2:08:CD:AB:BC:58:1A
Certificate issuer:       /CN=FB8339435145A20213F790D3F180A4E390A95A2A
Certificate serial:       11D47CE41432220D2BB81CB70430A44075DB2A31
Authority key identifier: FB:83:39:43:51:45:A2:02:13:F7:90:D3:F1:80:A4:E3:90:A9:5A:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB8339435145A20213F790D3F180A4E390A95A2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9FbNHx7Mpi32dcm1v4bT7vTyurf44gPkxs6PjjJGbbYw/0/3137392e34382e3133322e302f32322d3234203d3e20323731303839.roa
Signing time:             Fri 10 Feb 2023 14:44:00 +0000
ROA not before:           Fri 10 Feb 2023 14:39:00 +0000
ROA not after:            Fri 09 Feb 2024 14:44:00 +0000
asID:                     271089
IP address blocks:        179.48.132.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d4:7c:e4:14:32:22:0d:2b:b8:1c:b7:04:30:a4:40:75:db:2a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB8339435145A20213F790D3F180A4E390A95A2A
        Validity
            Not Before: Feb 10 14:39:00 2023 GMT
            Not After : Feb  9 14:44:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:7c:da:49:22:d5:47:67:71:a6:6f:eb:fb:
                    9f:85:1d:3b:cb:47:71:26:a1:6d:76:20:3f:0f:b2:
                    90:cf:2f:b4:20:ff:0e:2a:dd:29:7c:f8:8a:d1:86:
                    82:a9:24:15:84:9e:02:1b:8e:36:e1:af:43:e8:9b:
                    78:4a:6c:c9:e7:f3:c8:58:4f:e2:cd:12:36:f1:99:
                    01:3f:19:4d:fc:62:26:19:76:ca:d4:ad:9b:e3:33:
                    f7:95:f5:dd:af:a9:6c:bc:dc:a5:46:b3:34:a8:50:
                    bf:51:24:83:f8:20:73:a3:2a:ee:44:43:fd:e5:47:
                    b9:69:09:94:1b:d2:79:02:cc:8c:d9:d8:4e:91:6c:
                    95:5c:57:3c:7f:c4:21:10:47:b1:bb:68:50:98:1a:
                    f3:d5:84:90:44:da:b5:42:f4:38:4c:2a:5d:b3:d6:
                    e3:12:e4:b2:d4:11:0b:cc:f0:0a:69:65:ae:a6:b1:
                    98:1b:81:68:16:b1:c2:5d:a7:2b:c6:f1:4b:1b:b7:
                    b1:92:95:b1:e1:f4:d2:23:79:c5:b3:b5:cc:1b:7d:
                    18:e2:e9:d2:da:aa:67:02:04:8f:32:34:7b:51:45:
                    85:b3:be:25:09:17:c8:5a:cb:c5:82:29:83:86:9b:
                    22:be:92:47:ac:f2:1c:ef:bf:e1:20:1d:9f:de:4f:
                    eb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:27:67:DF:A4:03:A9:F1:5C:C7:BA:FB:5C:F2:08:CD:AB:BC:58:1A
            X509v3 Authority Key Identifier:
                keyid:FB:83:39:43:51:45:A2:02:13:F7:90:D3:F1:80:A4:E3:90:A9:5A:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9FbNHx7Mpi32dcm1v4bT7vTyurf44gPkxs6PjjJGbbYw/0/FB8339435145A20213F790D3F180A4E390A95A2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB8339435145A20213F790D3F180A4E390A95A2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9FbNHx7Mpi32dcm1v4bT7vTyurf44gPkxs6PjjJGbbYw/0/3137392e34382e3133322e302f32322d3234203d3e20323731303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:f5:4e:da:e0:d5:da:7d:6e:96:60:f9:9a:4e:ca:3b:5d:ae:
         6c:5b:1c:fb:d8:ec:1e:f9:89:90:6f:6e:50:99:d1:dd:17:20:
         4f:10:77:e6:e9:36:b7:2a:e8:b1:8c:b4:41:95:e4:97:ea:2a:
         13:70:68:fd:bf:cc:d1:27:1f:99:29:28:07:c5:75:d3:9c:6f:
         be:4e:40:f0:a7:c0:4e:de:1f:e6:55:7d:c9:a6:b0:8f:c5:1c:
         20:2b:74:6b:fb:c7:9c:32:f5:fc:70:28:90:1d:b1:a2:92:92:
         99:25:47:7d:93:72:b8:86:40:db:4e:e5:69:29:46:10:34:6d:
         8f:34:4b:c7:4d:e1:8e:bf:4f:64:a7:b9:24:e7:b4:57:ca:91:
         28:b6:56:33:1e:b4:a4:45:8c:fe:1b:54:9e:d4:be:3e:2c:b7:
         86:1b:5d:a6:bb:3b:61:4d:c1:76:cd:78:d4:d3:ed:78:1c:4c:
         dc:38:0c:34:bf:9b:d9:d0:50:d5:e6:a7:07:09:f3:32:cd:e7:
         98:30:2a:24:4e:6a:b0:c9:f8:a3:91:c1:47:42:dc:05:5e:01:
         5d:5c:58:21:e5:7a:64:bc:bb:f4:ad:69:7a:c0:ec:ff:b4:62:
         94:d8:d0:0d:ca:88:f9:cc:33:fa:51:e2:e1:a4:64:f4:80:2f:
         45:0d:ec:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:20 2025 by rpki-client