Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137392e39372e3139322e302f31392d3234203d3e203238333539.roa
File:                     3137392e39372e3139322e302f31392d3234203d3e203238333539.roa (raw, json)
Hash identifier:          hGLPytICL+fFsp2BKh4GTNmLAWqNJ4z2fgPQjpZa+pc=
Subject key identifier:   1E:4D:4D:82:BF:FB:9B:61:A6:A6:91:0A:2F:21:C2:14:39:A7:49:30
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       223EDD3266AFAF767C4EEB971B40A7753C44DE5A
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137392e39372e3139322e302f31392d3234203d3e203238333539.roa
Signing time:             Fri 14 Mar 2025 17:49:35 +0000
ROA not before:           Fri 14 Mar 2025 17:44:35 +0000
ROA not after:            Fri 13 Mar 2026 17:49:35 +0000
asID:                     28359
IP address blocks:        179.97.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3e:dd:32:66:af:af:76:7c:4e:eb:97:1b:40:a7:75:3c:44:de:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Mar 14 17:44:35 2025 GMT
            Not After : Mar 13 17:49:35 2026 GMT
        Subject: CN=1E4D4D82BFFB9B61A6A6910A2F21C21439A74930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d3:18:91:97:59:42:e3:a0:66:90:e0:e0:42:
                    f4:fb:a5:29:58:ed:ff:89:67:53:d2:ea:02:88:e6:
                    1a:3d:1a:76:72:f0:9e:90:ee:d2:a2:a1:52:66:a0:
                    04:c9:ed:a8:71:15:b2:99:b5:44:a7:0c:51:bd:76:
                    fc:0b:a5:7f:34:16:48:05:c5:35:4f:8d:91:88:0e:
                    e7:9b:1a:c1:c7:46:b3:54:f9:ba:06:f9:18:fd:88:
                    24:d8:0c:b2:a6:ff:26:4a:eb:54:61:d4:8f:29:56:
                    32:e3:c0:ab:69:a4:ba:21:3a:9a:fe:ac:02:a9:db:
                    7c:11:20:2e:62:87:da:94:03:c9:c8:b2:8d:d6:58:
                    f9:46:71:a9:35:25:23:9b:61:ad:19:00:1d:4d:c2:
                    d5:6b:b9:53:f0:78:80:1c:f3:84:e8:95:bf:5d:ef:
                    9c:63:3c:b1:32:f0:76:91:4c:1d:02:7e:21:16:b3:
                    21:a2:fa:b9:f8:e5:01:5e:97:5d:eb:e4:b1:ab:31:
                    11:26:48:61:e2:55:fd:df:27:1a:a2:8b:bb:78:a8:
                    a1:1c:a1:c3:6b:29:30:99:b5:90:19:20:83:b9:1b:
                    2c:53:a4:d8:6b:4c:25:4d:67:ba:5c:14:56:6b:c3:
                    fb:c2:d1:4c:50:16:ff:30:52:3b:7e:12:e7:92:d5:
                    86:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4D:4D:82:BF:FB:9B:61:A6:A6:91:0A:2F:21:C2:14:39:A7:49:30
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137392e39372e3139322e302f31392d3234203d3e203238333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:2b:5f:68:71:b6:bd:2e:97:5d:64:00:67:9a:70:48:3d:0e:
         5c:d3:51:32:21:b4:78:aa:ea:5a:01:72:8b:a0:d8:04:d6:4c:
         ee:54:bc:58:88:17:0f:d9:30:66:c0:01:0d:45:3d:41:65:ea:
         8a:4d:da:ee:c9:33:4a:ff:ab:69:9a:1d:5e:fc:45:55:b9:6f:
         f9:3a:2e:fd:aa:25:30:42:c9:b1:85:b7:9c:e3:e8:9b:70:29:
         56:b2:0f:8e:17:b7:68:7b:34:93:1a:f8:75:9c:7f:45:c9:5d:
         b6:1f:89:b6:70:44:c0:87:c4:17:77:91:69:a3:43:58:ac:84:
         3a:7c:11:ca:12:94:a7:57:d7:c6:56:8b:9e:e9:a6:fe:05:b2:
         7e:cf:3c:1b:d0:f8:62:4b:79:8c:be:ac:00:a5:5c:0e:04:65:
         a0:61:5a:63:2b:0e:56:9a:10:78:b5:72:a6:2b:92:27:91:29:
         b9:c5:51:fa:37:43:72:de:47:9c:7d:36:9a:8f:66:6f:50:36:
         d3:db:cf:da:a0:33:a4:60:e1:50:aa:11:be:8f:7b:4b:49:ca:
         4f:6f:e3:06:da:c7:c0:da:cb:28:b6:ad:2b:e7:3b:53:89:83:
         b7:31:b5:75:52:5c:d2:5b:7c:9e:9e:7d:19:19:2b:cc:9c:53:
         33:29:89:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:55:53 2025 by rpki-client