Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3234203d3e20323731313933.roa
File:                     3137392e34392e3134342e302f32322d3234203d3e20323731313933.roa (raw, json)
Hash identifier:          TwV6KgQp9Y2TEaBe16ajWEVXMaz5qHnGk2YCwzx4X3s=
Subject key identifier:   B1:B1:AA:91:A3:EB:A4:1D:7A:42:88:0C:F3:8C:5F:98:9B:98:F9:DC
Certificate issuer:       /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial:       04CAC56C2890ABF4BC5451ADAEAF13299DFED7C7
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3234203d3e20323731313933.roa
Signing time:             Wed 05 Mar 2025 23:58:51 +0000
ROA not before:           Wed 05 Mar 2025 23:53:51 +0000
ROA not after:            Wed 04 Mar 2026 23:58:51 +0000
asID:                     271193
IP address blocks:        179.49.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ca:c5:6c:28:90:ab:f4:bc:54:51:ad:ae:af:13:29:9d:fe:d7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Validity
            Not Before: Mar  5 23:53:51 2025 GMT
            Not After : Mar  4 23:58:51 2026 GMT
        Subject: CN=B1B1AA91A3EBA41D7A42880CF38C5F989B98F9DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:8e:98:70:48:49:7d:4d:58:f6:ba:a1:82:
                    9e:ca:52:4b:db:57:4d:7b:ff:dd:61:58:40:9e:fa:
                    5c:ce:04:cb:00:bc:b8:2b:f4:39:a8:fa:e0:0d:87:
                    23:6a:4d:60:93:a2:1e:ac:1d:31:a4:b6:3f:19:95:
                    a3:99:b5:a2:91:3c:97:6b:49:8d:17:b5:76:8d:70:
                    1e:40:31:88:95:51:05:a8:8d:38:eb:03:31:00:8c:
                    8d:ec:7f:db:b8:52:00:6e:1a:d5:46:89:5c:75:4e:
                    66:fe:6a:ac:be:b1:f9:a9:a0:b4:07:2b:e7:db:bb:
                    57:42:7a:9a:f2:8e:b6:c7:60:51:55:de:8e:34:1f:
                    c2:9f:ad:83:1f:80:2a:61:06:15:5e:4a:0a:8a:de:
                    f5:ec:15:59:f7:63:35:b0:5c:7d:7d:0f:3c:9b:98:
                    5f:6d:a4:63:42:50:f6:02:65:50:e0:e8:30:17:76:
                    67:72:36:c1:8b:c0:80:46:eb:14:8b:94:e5:36:83:
                    97:c3:9d:58:17:24:39:f6:8e:10:31:a1:87:9a:a7:
                    48:29:4c:dd:04:b5:8e:ea:dc:b2:9b:01:b9:2a:66:
                    5b:de:ee:4a:ac:69:fa:ef:cb:2b:36:de:e4:27:c5:
                    e8:1b:1d:49:2b:ec:ad:fd:2f:ab:33:9a:b2:6c:fe:
                    dd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B1:AA:91:A3:EB:A4:1D:7A:42:88:0C:F3:8C:5F:98:9B:98:F9:DC
            X509v3 Authority Key Identifier:
                keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3234203d3e20323731313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:df:4f:f5:23:65:16:ee:b4:51:c5:8c:f4:73:33:4d:80:80:
         68:04:80:55:e8:5a:c0:52:33:0d:82:af:1e:2a:92:69:54:a0:
         68:bf:fc:33:40:0c:39:62:7e:ba:43:77:53:20:42:91:5d:a8:
         eb:44:12:16:22:11:4d:81:c3:6e:2f:9f:de:24:fa:7b:0b:17:
         a7:78:8e:6b:65:85:0d:7b:02:a4:02:8a:fb:97:3b:70:b9:32:
         2f:11:0f:9b:4a:5d:72:5a:0c:5d:c9:24:14:4b:e5:17:c8:99:
         90:e5:47:ab:08:a0:98:0b:77:16:60:96:60:6b:4c:ab:da:29:
         5d:0d:03:28:24:7e:47:95:6f:09:b5:7f:c4:e0:f5:d2:17:22:
         f3:34:f0:fd:0c:a6:96:d6:e4:01:41:8e:a1:a9:4d:54:f4:a0:
         b5:43:a5:c9:e5:08:7c:b2:c3:24:10:7c:a5:29:f1:ef:a4:40:
         4d:04:86:31:9e:61:3a:87:79:60:ea:e9:63:76:f9:db:45:92:
         6b:14:b8:68:be:35:3e:96:30:8d:0e:6b:60:7e:c5:0e:e8:13:
         ca:3f:10:70:a9:d1:ad:d0:a9:78:6e:d3:49:83:9c:c6:9e:1d:
         be:a3:ef:40:5e:6c:88:fc:84:36:40:0f:89:a5:b2:c3:1a:fa:
         f2:5f:26:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:46:16 2025 by rpki-client