Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/1/3137392e302e3139312e302f32342d3234203d3e20323730383538.roa
File:                     3137392e302e3139312e302f32342d3234203d3e20323730383538.roa (raw, json)
Hash identifier:          DLA7agCXDTCrlvS5FMrPCu4+CYvwpIORDVI+0EURuwI=
Subject key identifier:   FF:72:28:B7:BC:D5:BA:30:6B:FC:07:8D:AD:55:C1:35:86:83:4A:B3
Certificate issuer:       /CN=D93EABAFE6C4BBB0E20474DA146E626A7B718C49
Certificate serial:       045060879318E153E5E8EF699AB316D9AAE1A2C3
Authority key identifier: D9:3E:AB:AF:E6:C4:BB:B0:E2:04:74:DA:14:6E:62:6A:7B:71:8C:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93EABAFE6C4BBB0E20474DA146E626A7B718C49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/1/3137392e302e3139312e302f32342d3234203d3e20323730383538.roa
Signing time:             Fri 06 Dec 2024 12:30:31 +0000
ROA not before:           Fri 06 Dec 2024 12:25:31 +0000
ROA not after:            Fri 05 Dec 2025 12:30:31 +0000
asID:                     270858
IP address blocks:        179.0.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:50:60:87:93:18:e1:53:e5:e8:ef:69:9a:b3:16:d9:aa:e1:a2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93EABAFE6C4BBB0E20474DA146E626A7B718C49
        Validity
            Not Before: Dec  6 12:25:31 2024 GMT
            Not After : Dec  5 12:30:31 2025 GMT
        Subject: CN=FF7228B7BCD5BA306BFC078DAD55C13586834AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b5:d9:3c:52:82:bc:c7:2b:72:2d:a1:fc:70:
                    2d:21:0c:2c:b5:b1:3f:31:46:89:84:81:6f:46:82:
                    17:de:d5:43:d7:5e:2d:7c:e1:6c:49:eb:ec:05:20:
                    3e:40:22:b7:cd:95:d0:5c:00:e8:be:63:ee:d3:2c:
                    a7:8c:88:a0:68:d1:fa:29:98:13:72:ed:4d:59:f2:
                    03:97:29:62:c8:9d:80:a3:c2:93:a2:1a:41:d9:8d:
                    4c:07:02:13:75:f8:6f:a9:71:33:52:e8:40:1d:32:
                    15:34:ae:d3:cc:66:4b:7f:6a:6d:65:e9:13:0b:3e:
                    8a:00:22:9d:46:be:0d:3b:9e:17:f2:3b:1a:7f:65:
                    6d:f8:e5:ec:c6:7f:19:cc:6f:6c:ba:a8:db:1e:a4:
                    9f:d1:25:13:8b:14:0b:a0:23:69:ed:33:9d:01:2e:
                    c3:18:1a:a5:dd:f2:92:c1:5a:79:f2:77:da:3f:07:
                    1f:91:9b:1a:cc:7a:9f:5b:4a:b0:b1:b2:f1:2d:3a:
                    4a:76:a6:33:cb:f1:4c:df:9d:95:85:de:d2:ff:11:
                    0d:93:12:3d:a4:3f:db:eb:a7:ab:1a:c6:74:2b:ea:
                    68:bf:96:b6:b5:fd:b0:20:43:c8:f9:14:d8:ef:c7:
                    39:7a:4d:5c:8f:f8:d2:2e:d5:44:60:a6:2b:1c:f7:
                    3f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:72:28:B7:BC:D5:BA:30:6B:FC:07:8D:AD:55:C1:35:86:83:4A:B3
            X509v3 Authority Key Identifier:
                keyid:D9:3E:AB:AF:E6:C4:BB:B0:E2:04:74:DA:14:6E:62:6A:7B:71:8C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/1/D93EABAFE6C4BBB0E20474DA146E626A7B718C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93EABAFE6C4BBB0E20474DA146E626A7B718C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/1/3137392e302e3139312e302f32342d3234203d3e20323730383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:f7:b8:c5:91:cd:64:7b:af:cd:e4:38:a7:31:3f:20:d9:35:
         76:96:93:64:72:36:67:6e:a0:43:35:e4:ee:06:a5:2e:61:cf:
         8f:ec:c8:64:a0:0f:fd:44:85:b0:87:bf:70:a7:d2:95:89:91:
         06:ec:06:dc:b1:5f:74:59:17:45:65:4a:81:fc:bc:da:90:dc:
         eb:d6:a9:ce:7e:ce:d9:43:1a:ce:e3:95:4b:65:fd:64:e3:4d:
         85:e3:80:fc:a0:ab:48:7b:57:95:a8:8f:a6:1b:c9:a3:5f:93:
         6c:2c:e2:49:f0:3f:5e:33:bd:3e:06:21:bc:d3:06:75:05:78:
         65:43:fb:cb:a4:a8:53:23:f9:bd:49:cf:04:2d:ee:2b:62:54:
         14:83:1e:0e:5a:3f:a0:23:e6:b4:db:ba:6d:95:1f:2e:9c:ac:
         dd:6e:3b:c0:2c:a8:d1:a9:f3:ea:ed:6e:12:50:ea:67:4e:05:
         17:0b:aa:dc:33:99:41:06:c7:08:a4:d4:d5:97:47:4c:8b:fd:
         2a:5e:c6:5b:bb:f1:11:17:9c:df:61:65:0e:1f:7c:d4:7c:e9:
         62:46:73:6f:4e:e1:33:4d:47:d8:42:87:c9:f1:9f:40:90:a2:
         f8:70:45:42:40:6f:3f:96:16:82:dc:6f:03:61:39:73:2a:85:
         ce:ec:26:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:46:09 2025 by rpki-client