Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3332203d3e20323033.roa
File:                     3137392e34392e3134342e302f32322d3332203d3e20323033.roa (raw, json)
Hash identifier:          iPSsOEYR7mdig0IasSmLH9+7xnyslwEpTJ89Dp10v5Q=
Subject key identifier:   0C:3B:7E:07:B3:82:24:5E:A9:00:48:ED:41:E3:06:C6:B9:90:D2:6E
Certificate issuer:       /CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
Certificate serial:       26BB446F00D2730010F8E1C5B57076DC4733E624
Authority key identifier: F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3332203d3e20323033.roa
Signing time:             Thu 23 Nov 2023 18:10:19 +0000
ROA not before:           Thu 23 Nov 2023 18:05:19 +0000
ROA not after:            Thu 21 Nov 2024 18:10:19 +0000
asID:                     203
IP address blocks:        179.49.144.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bb:44:6f:00:d2:73:00:10:f8:e1:c5:b5:70:76:dc:47:33:e6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
        Validity
            Not Before: Nov 23 18:05:19 2023 GMT
            Not After : Nov 21 18:10:19 2024 GMT
        Subject: CN=0C3B7E07B382245EA90048ED41E306C6B990D26E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:83:22:8e:eb:e5:c2:cf:2b:e7:89:39:4f:16:
                    fc:43:3a:5f:c4:ac:8d:01:da:6c:fe:c8:b0:64:ef:
                    19:5a:69:c9:0e:73:59:fa:d4:97:81:be:c0:91:6a:
                    3c:91:5f:95:74:82:24:2d:9b:90:75:07:26:ae:17:
                    53:4d:9d:41:fb:89:0f:c4:a5:ab:6c:78:bd:f7:a4:
                    04:01:01:b0:06:4c:c3:ee:b9:04:7b:0f:78:41:cf:
                    ed:45:24:e7:1a:31:1e:fb:a0:f7:5b:5c:9b:e4:83:
                    ed:49:39:cc:28:60:af:73:9c:71:5f:ff:ce:a0:0f:
                    84:e8:43:91:46:2c:d0:44:14:e1:3d:71:e1:7b:11:
                    13:cb:30:dc:e9:3d:e7:21:b3:6a:30:5b:a4:2d:26:
                    1f:32:50:c3:6b:90:f1:79:58:b2:81:25:81:25:dc:
                    e3:f6:a5:a0:7d:5a:34:08:b1:ce:ac:27:4c:e2:93:
                    fa:ed:69:27:59:c0:f3:5f:5a:50:26:14:33:60:3b:
                    23:c6:8e:92:1c:a1:8c:f0:15:af:ca:17:cc:f7:5d:
                    2d:d9:af:69:f7:e6:dd:d0:0d:64:4f:fa:15:74:33:
                    0a:44:8f:5a:d1:a6:97:4d:8a:9f:f1:0d:5d:f5:a1:
                    0a:fb:98:aa:05:f4:70:d5:41:e2:83:00:49:e7:16:
                    5a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3B:7E:07:B3:82:24:5E:A9:00:48:ED:41:E3:06:C6:B9:90:D2:6E
            X509v3 Authority Key Identifier:
                keyid:F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3332203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:dc:a8:7e:b5:a6:23:fc:eb:49:b6:ff:fe:36:c3:c6:ad:28:
         0b:43:5c:0c:66:a6:c1:e9:9d:5a:7e:1c:e3:cc:4c:ef:27:2a:
         8f:19:7c:dd:d7:42:6b:17:4b:b2:e0:6d:4a:f6:d2:57:10:36:
         e6:f3:52:84:d8:3d:3d:7d:70:a2:3f:75:14:ce:02:6e:b7:a3:
         06:ae:37:6b:7e:6c:ef:6d:d7:16:a7:85:07:a8:d6:e3:de:80:
         c9:34:d6:1f:73:0b:7a:3c:ae:30:95:2c:1a:5e:c3:21:4d:d1:
         b8:c7:e9:e9:f7:7b:06:0f:4d:9e:e4:51:a8:ac:47:91:d9:42:
         3a:1d:d2:45:9c:94:26:2e:8c:aa:fe:50:81:b7:d2:60:2b:ed:
         be:87:33:34:3a:6d:86:aa:3a:ab:97:ae:30:8e:9a:c5:eb:43:
         95:cb:1b:98:e0:26:0c:33:cb:64:aa:8a:a6:bc:25:82:93:1e:
         b7:27:54:01:8e:5b:82:3a:98:eb:75:86:fc:8d:fd:32:49:b1:
         c7:00:32:42:3c:72:28:16:ab:99:bf:71:f5:25:eb:11:82:89:
         21:4c:4d:9b:89:ec:4c:ab:ef:23:e1:71:55:ac:a8:c2:95:5d:
         f6:26:16:d5:4b:b5:8f:6a:f4:eb:db:2a:d4:67:9e:83:cb:45:
         62:60:96:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:48 2025 by rpki-client