Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3234203d3e20323731313933.roa
File:                     3137392e34392e3134342e302f32322d3234203d3e20323731313933.roa (raw, json)
Hash identifier:          9OE7UrkGR3hDInPJTwOSVIbkeA/fZQ0Q0G216GGZ5HM=
Subject key identifier:   A8:F0:F8:D8:A3:0B:20:EE:07:88:D8:53:9C:47:57:4D:2F:25:3A:70
Certificate issuer:       /CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
Certificate serial:       1649C58A24AB4E195A58CFC8B0A184A38E488A8E
Authority key identifier: F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3234203d3e20323731313933.roa
Signing time:             Tue 03 Oct 2023 19:25:03 +0000
ROA not before:           Tue 03 Oct 2023 19:20:03 +0000
ROA not after:            Tue 01 Oct 2024 19:25:03 +0000
asID:                     271193
IP address blocks:        179.49.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:49:c5:8a:24:ab:4e:19:5a:58:cf:c8:b0:a1:84:a3:8e:48:8a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
        Validity
            Not Before: Oct  3 19:20:03 2023 GMT
            Not After : Oct  1 19:25:03 2024 GMT
        Subject: CN=A8F0F8D8A30B20EE0788D8539C47574D2F253A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:06:d8:92:a7:0a:9a:71:ae:cd:a5:bf:40:55:
                    a5:7f:19:ec:22:a1:3b:f7:72:59:0c:eb:21:c7:3e:
                    14:a2:b7:18:2f:c6:2f:03:50:89:2b:d6:fe:17:8a:
                    a0:2d:6e:63:58:a5:05:20:51:9b:a0:d2:47:ae:ff:
                    8c:91:64:01:27:3e:45:51:bb:7c:97:3f:59:cc:83:
                    aa:78:d0:e9:ed:3c:9a:6d:95:73:7b:8f:ee:45:0d:
                    0f:34:1f:88:f0:a4:ea:5c:2d:96:85:a4:7d:16:7b:
                    8e:f8:44:47:4c:0c:9b:b7:79:f5:7e:2c:53:9a:d7:
                    8e:0a:81:72:dd:cd:a5:9e:04:84:e0:6d:5c:59:0e:
                    47:c1:e1:b8:08:b3:ff:bc:24:fd:69:a9:e9:98:4f:
                    28:d3:a3:1c:5d:a8:aa:6a:a7:5e:17:06:df:d3:60:
                    7f:20:e9:a9:a3:c4:07:4e:ec:52:a6:29:83:7a:1b:
                    08:60:5d:be:ea:b9:6b:78:a8:fc:ef:c8:83:1f:5d:
                    49:fb:16:01:a7:42:ac:56:05:a0:2b:33:f1:fc:7b:
                    a5:10:21:37:31:b3:10:61:b1:d3:ed:31:f1:d5:d8:
                    ff:60:8f:9a:2b:03:14:35:41:af:7f:14:3c:98:0b:
                    20:87:6a:fc:91:a1:9f:1b:58:8a:37:17:96:2c:02:
                    54:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F0:F8:D8:A3:0B:20:EE:07:88:D8:53:9C:47:57:4D:2F:25:3A:70
            X509v3 Authority Key Identifier:
                keyid:F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3234203d3e20323731313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:ac:96:4d:db:bf:79:6e:4d:df:41:0b:87:48:5c:2d:96:87:
         bc:b2:21:61:1e:0f:bf:ae:20:e4:86:1b:3e:eb:6b:3a:88:75:
         5a:9e:fc:ba:0a:9b:a9:4c:15:c5:37:f3:0e:60:66:14:45:9a:
         2c:2c:71:03:41:e6:74:05:c0:2f:45:6f:24:b7:4d:b5:d7:38:
         9f:99:6c:0e:86:41:8a:a0:34:07:b7:cc:66:a3:42:db:9a:6f:
         89:b9:23:21:78:a4:05:96:b0:7f:48:dd:60:cf:6b:9f:a8:73:
         52:45:1e:e0:20:17:b7:b5:fe:d3:d3:dd:ae:81:5f:6a:8b:01:
         68:06:74:d9:1b:93:ed:f3:e0:d0:d9:d3:b2:3d:fe:b6:78:fc:
         a7:bf:64:fe:cf:67:ae:7b:d4:7e:cf:b6:42:15:0d:ff:c6:2e:
         88:51:96:96:11:e4:78:5f:f7:59:ff:cf:b2:ef:ac:a3:d2:f8:
         7e:bf:5d:72:68:db:ff:c5:7c:7d:e5:48:f5:71:f2:c9:d6:95:
         4a:2e:e9:f8:be:b1:41:63:30:11:25:30:00:b9:3a:20:19:fa:
         1c:8a:70:2a:b6:76:53:cb:1d:d9:96:50:b1:c1:78:90:f5:93:
         0d:a8:bb:8f:4f:12:69:db:f6:7e:68:09:76:a1:3a:b8:e8:67:
         a0:c4:e8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:53:52 2025 by rpki-client