Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3332203d3e203532363339.roa
File:                     3137392e34392e3134342e302f32322d3332203d3e203532363339.roa (raw, json)
Hash identifier:          JAA30c5gGvsEjaqjUbBsxQ5A1rwWkYzrFw9wwKO2ow0=
Subject key identifier:   6B:19:32:BF:72:5B:B6:31:A0:88:3A:CD:CF:2F:85:DE:AC:C4:8B:B7
Certificate issuer:       /CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
Certificate serial:       31A67919B0D132E86DFFCC60902DAF0DDC5B574F
Authority key identifier: F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3332203d3e203532363339.roa
Signing time:             Thu 23 Nov 2023 18:10:18 +0000
ROA not before:           Thu 23 Nov 2023 18:05:18 +0000
ROA not after:            Thu 21 Nov 2024 18:10:18 +0000
asID:                     52639
IP address blocks:        179.49.144.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a6:79:19:b0:d1:32:e8:6d:ff:cc:60:90:2d:af:0d:dc:5b:57:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
        Validity
            Not Before: Nov 23 18:05:18 2023 GMT
            Not After : Nov 21 18:10:18 2024 GMT
        Subject: CN=6B1932BF725BB631A0883ACDCF2F85DEACC48BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8a:ec:79:96:79:b2:c0:2f:70:8b:7c:40:31:
                    70:3f:a5:2a:de:dc:7b:0b:08:04:74:83:6c:79:5e:
                    e0:d8:79:e3:a5:61:1c:85:84:bf:6c:8c:45:8c:d7:
                    13:19:e0:69:d0:b8:a7:e2:16:18:fb:92:53:41:16:
                    10:ca:b0:22:b4:e3:f7:e3:97:94:2c:dd:24:50:f3:
                    62:e3:fe:57:2d:be:11:5f:1c:3b:69:1f:ec:de:e1:
                    21:f3:bf:03:02:18:fa:24:41:b5:fb:f2:12:cf:38:
                    c0:ee:a8:ab:22:76:a2:6e:17:44:60:e1:cf:d9:05:
                    ba:12:dc:28:44:8b:7e:6f:44:aa:bb:0c:e7:25:c9:
                    c7:c9:92:a2:c6:aa:5c:b3:4f:e0:48:94:08:39:ec:
                    11:6d:b3:75:d2:5e:8e:a1:70:9a:42:27:a1:9c:9b:
                    3e:36:f4:4b:53:7a:41:93:82:a2:8e:64:33:dc:a3:
                    5d:6c:98:4f:d8:41:dc:cc:53:1f:6d:90:5c:c0:8e:
                    2b:e6:6d:37:a8:e6:b6:06:27:7d:5c:02:67:fd:1c:
                    c5:68:02:71:e7:18:57:2b:fb:e9:e2:e7:2a:bb:59:
                    20:1a:21:b4:3d:1a:04:8d:5f:0b:61:77:5e:05:09:
                    dd:99:18:00:0b:64:83:fe:c9:e0:b2:22:16:10:86:
                    6a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:19:32:BF:72:5B:B6:31:A0:88:3A:CD:CF:2F:85:DE:AC:C4:8B:B7
            X509v3 Authority Key Identifier:
                keyid:F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3332203d3e203532363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:a3:22:0d:05:05:9e:d7:83:d6:d5:1e:1d:90:0e:f4:81:7f:
         64:5f:de:81:a9:c8:50:54:24:31:19:e8:ac:f2:24:61:1b:1c:
         8c:ae:6b:a3:a9:91:62:38:78:72:ec:a0:a0:d0:1c:25:50:a5:
         a7:34:f6:68:c8:c5:36:60:48:c2:ef:11:e3:2d:1b:ed:c6:e2:
         04:50:ab:db:65:f7:bc:e3:e4:f5:dc:66:4f:9b:71:1d:c6:1e:
         9e:82:76:58:3a:86:49:8c:30:65:1d:3c:fd:67:60:18:ec:26:
         09:69:4e:5e:05:b7:ef:ae:38:20:ea:54:2a:11:26:43:cc:9d:
         d7:4b:bd:29:c7:49:bc:79:aa:56:41:9f:07:d9:56:69:67:b5:
         5f:31:15:51:77:b6:05:74:75:b6:cf:1d:53:d7:3f:36:9d:f5:
         76:86:3f:95:50:c5:46:77:bd:82:e7:ec:cb:70:14:f2:79:18:
         c9:c6:e4:bd:4c:df:f4:15:80:05:ab:67:01:32:2a:0b:8b:39:
         d2:59:04:9e:26:65:0c:1c:1b:67:38:45:d2:84:36:f1:4b:5c:
         6c:56:c5:2c:71:e3:c2:29:1c:e0:cb:59:16:94:bc:ac:2a:c5:
         bd:f7:2c:0c:8d:be:e5:7a:41:ba:81:84:94:2b:d2:b2:11:3d:
         5c:6f:fb:6e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMaZ5GbDRMuht/8xgkC2vDdxbV08wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjIxRkZFNzQ0MjNBRDYwQjcxQjE0Q0JDOUNEMkI4MDNF
OTI2QkIwRjAeFw0yMzExMjMxODA1MThaFw0yNDExMjExODEwMThaMDMxMTAvBgNV
BAMTKDZCMTkzMkJGNzI1QkI2MzFBMDg4M0FDRENGMkY4NURFQUNDNDhCQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbiux5lnmywC9wi3xAMXA/pSre
3HsLCAR0g2x5XuDYeeOlYRyFhL9sjEWM1xMZ4GnQuKfiFhj7klNBFhDKsCK04/fj
l5Qs3SRQ82Lj/lctvhFfHDtpH+ze4SHzvwMCGPokQbX78hLPOMDuqKsidqJuF0Rg
4c/ZBboS3ChEi35vRKq7DOclycfJkqLGqlyzT+BIlAg57BFts3XSXo6hcJpCJ6Gc
mz429EtTekGTgqKOZDPco11smE/YQdzMUx9tkFzAjivmbTeo5rYGJ31cAmf9HMVo
AnHnGFcr++ni5yq7WSAaIbQ9GgSNXwthd14FCd2ZGAALZIP+yeCyIhYQhmqvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUaxkyv3JbtjGgiDrNzy+F3qzEi7cwHwYDVR0j
BBgwFoAU8h/+dEI61gtxsUy8nNK4A+kmuw8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0M0S1F0QlFXeFRqMW5ZYTdUTmhVdng5eG1hN1pyeUYxVWt6TnZhclNY
RWkvMC9GMjFGRkU3NDQyM0FENjBCNzFCMTRDQkM5Q0QyQjgwM0U5MjZCQjBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YyMUZGRTc0NDIzQUQ2MEI3
MUIxNENCQzlDRDJCODAzRTkyNkJCMEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NDNEtRdEJRV3hUajFuWWE3VE5oVXZ4OXhtYTdacnlGMVVrek52YXJTWEVpLzAv
MzEzNzM5MmUzNDM5MmUzMTM0MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMy
MzYzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCszGQMA0GCSqGSIb3DQEBCwUAA4IBAQAfoyINBQWe
14PW1R4dkA70gX9kX96BqchQVCQxGeis8iRhGxyMrmujqZFiOHhy7KCg0BwlUKWn
NPZoyMU2YEjC7xHjLRvtxuIEUKvbZfe84+T13GZPm3Edxh6egnZYOoZJjDBlHTz9
Z2AY7CYJaU5eBbfvrjgg6lQqESZDzJ3XS70px0m8eapWQZ8H2VZpZ7VfMRVRd7YF
dHW2zx1T1z82nfV2hj+VUMVGd72C5+zLcBTyeRjJxuS9TN/0FYAFq2cBMioLiznS
WQSeJmUMHBtnOEXShDbxS1xsVsUscePCKRzgy1kWlLysKsW99ywMjb7lekG6gYSU
K9KyET1cb/tu
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:28:49 2025 by rpki-client