Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/3137392e34382e332e302f32342d3234203d3e20323731303639.roa
File:                     3137392e34382e332e302f32342d3234203d3e20323731303639.roa (raw, json)
Hash identifier:          so/01G/VQCqyycUNyY6oHlJmXK7XSJhSJNqEwS3Cex0=
Subject key identifier:   D4:14:D8:7A:EA:36:0C:C3:5B:39:E3:3C:0B:88:88:F4:3C:AE:57:D0
Certificate issuer:       /CN=5CA08C4651107AEDDECD1096FFA4E1D02388016E
Certificate serial:       47977968F9E3AF198E43C34B667ADD253D9654B6
Authority key identifier: 5C:A0:8C:46:51:10:7A:ED:DE:CD:10:96:FF:A4:E1:D0:23:88:01:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CA08C4651107AEDDECD1096FFA4E1D02388016E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/3137392e34382e332e302f32342d3234203d3e20323731303639.roa
Signing time:             Thu 08 Dec 2022 01:28:05 +0000
ROA not before:           Thu 08 Dec 2022 01:23:05 +0000
ROA not after:            Thu 07 Dec 2023 01:28:05 +0000
asID:                     271069
IP address blocks:        179.48.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:97:79:68:f9:e3:af:19:8e:43:c3:4b:66:7a:dd:25:3d:96:54:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA08C4651107AEDDECD1096FFA4E1D02388016E
        Validity
            Not Before: Dec  8 01:23:05 2022 GMT
            Not After : Dec  7 01:28:05 2023 GMT
        Subject: CN=D414D87AEA360CC35B39E33C0B8888F43CAE57D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ed:4c:33:0e:73:28:c7:39:2f:32:1e:ca:aa:
                    84:de:21:a6:95:be:9a:43:fe:53:66:4e:32:12:6d:
                    f7:ca:43:e7:15:a4:19:ea:b0:e7:3a:8c:3c:84:24:
                    40:ab:b7:31:a9:16:cf:9c:3a:d4:da:8a:c1:96:01:
                    77:cb:be:2f:d4:34:86:28:ee:4b:9b:ab:6a:3b:56:
                    7b:72:9c:8f:b0:77:73:c2:bd:94:60:18:76:3c:0c:
                    2c:98:39:61:23:b1:a3:12:91:68:a7:7a:8d:24:04:
                    5a:5e:cc:24:71:79:4b:62:dc:41:7b:78:42:ea:bd:
                    81:4d:b3:0f:6d:d4:c5:11:60:51:7b:35:cc:38:7d:
                    99:1c:53:f3:a9:59:d9:48:b5:8e:22:d1:ed:06:ff:
                    3f:26:10:4b:57:05:68:50:a7:48:62:a7:30:59:8e:
                    a3:29:5b:33:c8:a3:8c:eb:29:ad:6a:37:bb:4a:72:
                    f6:82:dc:7b:ef:ff:5e:22:55:4d:d3:69:ce:5b:7d:
                    3b:95:b0:74:31:46:3f:15:3e:6c:21:d6:62:97:62:
                    98:f3:c8:01:b2:fc:83:e7:74:6e:c5:79:81:b2:ea:
                    16:ef:25:82:15:8a:83:d9:42:d5:61:93:06:c6:53:
                    99:cd:9f:ec:b3:ac:30:21:94:03:f0:0e:2e:7d:8b:
                    be:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:14:D8:7A:EA:36:0C:C3:5B:39:E3:3C:0B:88:88:F4:3C:AE:57:D0
            X509v3 Authority Key Identifier:
                keyid:5C:A0:8C:46:51:10:7A:ED:DE:CD:10:96:FF:A4:E1:D0:23:88:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/5CA08C4651107AEDDECD1096FFA4E1D02388016E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CA08C4651107AEDDECD1096FFA4E1D02388016E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/3137392e34382e332e302f32342d3234203d3e20323731303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:d4:43:17:b2:a5:4e:ab:4a:69:5d:62:f3:3f:eb:13:b1:21:
         c8:17:a3:2f:7e:00:a9:5c:3f:0c:19:dd:09:f2:0d:fc:f0:ea:
         fa:5b:64:10:79:fe:8a:45:0a:5f:69:09:55:25:e1:d2:5f:6a:
         4c:25:8b:60:f0:d1:fc:66:01:79:98:49:cb:30:b9:50:4d:7c:
         46:1f:68:c0:1d:61:38:83:5c:bb:de:17:cc:94:f5:1c:43:b9:
         93:17:b8:1e:d9:e6:b6:f1:5c:5e:f5:12:32:da:bb:35:3d:86:
         44:04:46:b7:67:72:ac:63:cf:14:10:aa:91:fd:b8:e4:4a:9a:
         b6:9d:c9:2c:17:ee:ce:37:8a:7a:d2:fa:64:24:ca:13:5b:14:
         0a:f2:bc:d9:e2:1f:c3:9c:2e:00:bb:68:10:dd:98:a3:e4:99:
         4c:02:c8:4a:7d:9a:25:bb:ae:dd:8f:56:c4:2b:50:a1:51:49:
         b8:36:33:1e:ae:ff:0c:3e:68:6c:f8:fa:54:f7:bb:dc:ab:b3:
         58:db:16:f7:09:27:96:99:ac:f3:96:37:33:9b:47:7d:5b:8f:
         80:5a:2b:d6:b7:b6:6e:8b:07:6e:6e:0c:fe:21:da:77:0f:cb:
         19:fc:c5:6b:c8:e5:da:01:ca:10:41:b3:91:b6:dd:73:e6:e3:
         39:0b:1b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:47 2025 by rpki-client