Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e20323032.roa
File:                     3137392e34392e3134342e302f32322d3332203d3e20323032.roa (raw, json)
Hash identifier:          k9hrmQKGBDq+WEo/SvgYXye4i/mx6xP+PqUjiXA0a7Q=
Subject key identifier:   15:B0:F6:71:58:13:D0:7B:01:92:88:16:F3:F3:F6:85:73:F1:76:77
Certificate issuer:       /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial:       1C69B368DEE4DD211BE06991113417D8EC57691B
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e20323032.roa
Signing time:             Wed 05 Mar 2025 23:58:51 +0000
ROA not before:           Wed 05 Mar 2025 23:53:51 +0000
ROA not after:            Wed 04 Mar 2026 23:58:51 +0000
asID:                     202
IP address blocks:        179.49.144.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:69:b3:68:de:e4:dd:21:1b:e0:69:91:11:34:17:d8:ec:57:69:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Validity
            Not Before: Mar  5 23:53:51 2025 GMT
            Not After : Mar  4 23:58:51 2026 GMT
        Subject: CN=15B0F6715813D07B01928816F3F3F68573F17677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fb:ae:09:d8:c5:a6:51:8d:fa:72:5c:1d:45:
                    43:10:8c:87:48:1e:13:d6:ff:aa:4b:d6:de:26:e2:
                    fd:83:6b:81:15:6d:30:2d:02:bd:35:37:0e:ab:12:
                    0f:bb:7a:2e:ee:e3:30:a8:7d:66:bc:95:35:43:f9:
                    60:a7:bf:33:a0:17:77:1f:00:5e:66:b8:b7:14:95:
                    8c:4b:76:0b:5d:e0:d8:42:9a:4f:ae:bc:05:3a:66:
                    c4:86:8a:19:5d:3c:54:c7:2d:23:72:d8:8c:9e:77:
                    75:6f:bd:65:c6:b7:55:55:32:1f:15:f6:7d:94:7e:
                    20:69:a6:94:2b:cd:d3:cd:91:01:4e:2b:5c:16:c3:
                    23:a2:40:36:39:a3:e3:0a:f5:17:19:6c:9f:b4:13:
                    60:0e:fa:41:9e:22:de:69:ed:3c:a4:35:ec:1a:68:
                    f7:1c:d8:a8:2a:2f:6e:b4:40:19:1d:f2:d0:3f:a4:
                    a6:59:b7:d3:ac:13:f4:4f:65:ab:76:02:c2:44:33:
                    3c:4b:71:b8:52:72:c6:ef:dd:39:b6:83:b1:c2:aa:
                    03:da:59:8f:08:7a:8b:9d:87:f0:02:ef:40:34:9d:
                    4d:0b:b8:4c:4b:b9:47:0d:2e:27:c0:3f:87:ba:ad:
                    c1:74:37:62:4b:df:91:a3:df:ec:7a:4f:23:3e:08:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B0:F6:71:58:13:D0:7B:01:92:88:16:F3:F3:F6:85:73:F1:76:77
            X509v3 Authority Key Identifier:
                keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:1b:81:eb:9b:23:ea:4c:78:9f:2d:27:ef:78:5d:6c:52:0d:
         44:db:61:8d:ba:ce:cd:11:d4:42:6f:ad:a5:3d:59:30:a5:83:
         24:be:a5:6c:1f:60:ef:da:e0:52:03:31:37:f4:88:96:8c:fe:
         bb:c0:c8:52:2b:6b:be:01:b4:d2:bc:3b:11:69:01:78:d5:39:
         56:51:a4:40:0b:61:7f:d6:81:01:43:c1:49:e9:95:65:96:96:
         e0:54:0b:c1:24:43:a5:ee:8d:0a:95:78:30:24:2f:bd:c1:da:
         80:54:c6:67:a8:7e:bd:ce:36:75:3b:60:93:be:5e:e2:3b:d4:
         67:68:f6:65:68:89:27:f1:f9:05:fb:a1:11:b7:cf:88:61:42:
         ed:96:2c:a7:56:6c:e2:da:c2:44:68:af:d2:0a:c8:1c:c2:de:
         c1:a9:a3:9d:39:8a:10:bd:45:f9:d5:6e:4a:44:db:c5:c9:c3:
         16:aa:c2:97:91:cc:07:59:3d:50:d3:07:b5:b6:b6:97:f6:4e:
         ca:a7:68:ff:b5:80:71:a5:af:78:fb:d0:ec:be:fd:d6:bd:53:
         bb:db:f7:91:8b:97:e2:17:87:24:06:8f:5c:7f:6f:e8:4f:3b:
         2f:47:2c:e1:f8:b7:4f:47:d3:ac:f6:3f:6f:71:cd:db:33:8c:
         5b:c6:5f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:14:11 2025 by rpki-client