Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/3137392e34382e302e302f32332d3233203d3e20323731303639.roa
File:                     3137392e34382e302e302f32332d3233203d3e20323731303639.roa (raw, json)
Hash identifier:          AJ5o5j3xpdPoiH6wneRsZ/I0ltvvEf7+gssYC6L2ceY=
Subject key identifier:   6E:A3:EB:1B:1D:FA:1C:42:AE:4F:0A:82:3B:07:E2:1F:EA:C0:8A:CF
Certificate issuer:       /CN=5CA08C4651107AEDDECD1096FFA4E1D02388016E
Certificate serial:       1EC52F936309A03EB3E2EE1707633CF213BE37BD
Authority key identifier: 5C:A0:8C:46:51:10:7A:ED:DE:CD:10:96:FF:A4:E1:D0:23:88:01:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CA08C4651107AEDDECD1096FFA4E1D02388016E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/3137392e34382e302e302f32332d3233203d3e20323731303639.roa
Signing time:             Tue 26 Apr 2022 17:24:54 +0000
ROA not before:           Tue 26 Apr 2022 17:19:54 +0000
ROA not after:            Tue 25 Apr 2023 17:24:54 +0000
asID:                     271069
IP address blocks:        179.48.0.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c5:2f:93:63:09:a0:3e:b3:e2:ee:17:07:63:3c:f2:13:be:37:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA08C4651107AEDDECD1096FFA4E1D02388016E
        Validity
            Not Before: Apr 26 17:19:54 2022 GMT
            Not After : Apr 25 17:24:54 2023 GMT
        Subject: CN=6EA3EB1B1DFA1C42AE4F0A823B07E21FEAC08ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:98:57:da:bc:12:3d:46:32:cc:24:79:bb:c5:
                    45:ba:4d:ab:db:9a:23:18:ea:1e:77:57:27:cc:52:
                    03:c0:11:39:71:dd:39:8a:ec:b1:65:d1:bd:69:03:
                    f5:7e:4a:ff:f0:df:38:89:13:ef:68:07:b0:a4:e5:
                    ff:f9:c5:7f:51:57:7a:99:59:c4:6a:bc:78:c5:0e:
                    f6:89:b7:83:2a:a3:82:0c:12:b8:b9:6f:5b:40:d2:
                    62:26:50:46:1b:10:96:d1:9d:5d:59:d6:7c:1f:a0:
                    59:82:11:ac:15:05:51:65:8d:77:09:b9:e9:03:32:
                    80:47:b4:11:d7:dd:0c:e6:75:5a:78:94:e3:29:8f:
                    6f:73:82:2c:0a:d4:8b:09:ec:f9:5e:67:16:ba:db:
                    b6:16:ec:cf:71:b3:e5:57:eb:59:78:0d:91:d6:22:
                    8d:af:49:b3:66:cc:07:4b:18:4d:58:3a:12:d3:bb:
                    1e:71:0c:56:d0:0d:58:67:dc:87:67:64:55:32:11:
                    0a:5b:e2:18:40:c4:6f:a4:e0:a0:a7:48:dc:5c:6e:
                    66:2b:71:94:db:db:98:93:28:77:94:7e:f5:5f:0e:
                    81:7f:16:87:ca:1c:ef:82:89:a2:f1:6b:f6:4b:9e:
                    0c:9d:12:6a:7b:e3:b9:7a:49:68:d7:aa:1e:a7:ce:
                    28:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A3:EB:1B:1D:FA:1C:42:AE:4F:0A:82:3B:07:E2:1F:EA:C0:8A:CF
            X509v3 Authority Key Identifier:
                keyid:5C:A0:8C:46:51:10:7A:ED:DE:CD:10:96:FF:A4:E1:D0:23:88:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/5CA08C4651107AEDDECD1096FFA4E1D02388016E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CA08C4651107AEDDECD1096FFA4E1D02388016E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/3137392e34382e302e302f32332d3233203d3e20323731303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:4d:a6:95:78:a0:ce:3e:88:ee:31:85:fc:b2:d1:d3:99:e2:
         92:93:6b:97:6a:74:e5:c5:6a:e0:46:04:ce:76:b0:5b:25:1d:
         fb:a3:26:75:c9:c1:52:d3:d8:34:7c:05:3d:03:f4:32:32:f5:
         bb:59:c4:4d:36:c2:5d:69:91:7c:5f:30:04:49:a2:2b:e0:a3:
         36:4d:58:ca:82:ef:db:3f:22:c3:ed:e7:1f:9e:5b:38:d1:1d:
         a9:a9:23:8d:7d:62:19:b2:8f:44:3a:ab:84:e5:90:d0:b9:b4:
         0e:c8:ea:dc:41:f1:b2:94:64:4a:63:71:22:06:0c:42:9c:a7:
         df:93:b1:6d:9c:98:40:d3:00:3d:40:ee:7e:57:ee:36:f4:12:
         bb:41:d0:b4:30:be:77:03:e6:af:9a:09:e8:f8:9b:dd:df:fe:
         53:e3:a3:21:14:ae:37:d4:d0:bd:39:55:06:c0:48:95:11:c1:
         cd:56:9a:3d:ce:3f:06:bd:98:8a:e8:dd:3e:bc:e0:e8:03:c9:
         6a:08:70:1e:af:75:7e:a0:8d:6e:35:43:f3:56:90:ac:80:c3:
         d1:f8:28:06:a8:c5:cb:33:de:d6:17:68:09:7d:8e:cb:2e:04:
         22:b7:f4:b6:36:f0:85:44:ca:29:92:07:56:07:9a:05:4c:a6:
         3e:94:42:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:40:40 2025 by rpki-client