Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e20323033.roa
File:                     3137392e34392e3134342e302f32322d3332203d3e20323033.roa (raw, json)
Hash identifier:          NajPJTYaor1YGiZnIhc3UJqt4nLCSqgHA1CzFRJFVPs=
Subject key identifier:   D4:D1:E9:D5:DE:AE:B4:AB:A9:DD:F7:F1:16:75:54:4C:6D:24:2E:EB
Certificate issuer:       /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial:       6875388CB2582F21D56334149387E4C9AE1EC4DB
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e20323033.roa
Signing time:             Wed 05 Mar 2025 23:58:49 +0000
ROA not before:           Wed 05 Mar 2025 23:53:49 +0000
ROA not after:            Wed 04 Mar 2026 23:58:49 +0000
asID:                     203
IP address blocks:        179.49.144.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:75:38:8c:b2:58:2f:21:d5:63:34:14:93:87:e4:c9:ae:1e:c4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Validity
            Not Before: Mar  5 23:53:49 2025 GMT
            Not After : Mar  4 23:58:49 2026 GMT
        Subject: CN=D4D1E9D5DEAEB4ABA9DDF7F11675544C6D242EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:f3:70:1e:59:d3:21:31:f3:8c:b8:df:64:
                    00:79:6f:c2:13:1c:5e:f1:ce:06:5c:f0:00:69:7b:
                    f7:f1:4c:28:53:33:d9:fe:0b:13:aa:1f:41:b3:ea:
                    64:7b:e5:8b:68:e9:7f:44:a8:8f:2d:48:07:3b:05:
                    61:c1:ba:ec:fc:27:06:95:9e:30:08:4d:57:c6:9e:
                    e9:13:6e:3b:f2:62:f8:ee:0a:bc:4a:d6:7e:8a:80:
                    85:33:3c:cb:95:ae:f0:6c:4a:fc:f8:8e:19:12:13:
                    b2:b7:ce:22:b9:b3:f3:41:0f:12:b3:cf:97:27:bc:
                    01:2f:9e:fc:da:25:ef:a8:f7:6d:4b:e9:f9:8e:79:
                    a8:54:27:fd:84:49:f8:d5:9d:52:84:11:45:8a:9f:
                    35:d6:29:bd:57:95:94:5e:a9:26:9e:af:37:d2:84:
                    9f:47:be:6a:97:20:79:d7:9f:3e:6a:10:00:94:7a:
                    b1:8c:2a:d9:e0:e7:79:7f:b6:6e:96:ad:8b:58:2d:
                    77:77:df:e4:34:d4:33:58:9e:f3:27:1c:b0:2f:4a:
                    45:90:ed:35:28:ac:f1:be:a9:d0:e5:4b:17:c8:b4:
                    8b:bc:bb:06:f5:d1:19:49:dc:a8:9b:74:f9:f0:d2:
                    c1:5d:17:fa:e8:8d:3c:85:07:e3:ce:4f:06:44:ad:
                    80:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D1:E9:D5:DE:AE:B4:AB:A9:DD:F7:F1:16:75:54:4C:6D:24:2E:EB
            X509v3 Authority Key Identifier:
                keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:cd:d2:3e:40:2e:04:c2:75:ce:3f:fa:c8:16:08:e9:fe:9d:
         60:c4:ec:fb:5b:ba:16:88:8a:37:c0:95:7e:45:e6:ce:15:1a:
         18:e4:ea:b4:07:e2:b7:5d:f0:9f:be:7f:58:84:f2:be:ef:44:
         50:35:7b:28:e2:c7:b9:f5:72:a8:9e:2b:ba:9a:78:b2:ca:56:
         01:ad:50:a3:fe:5e:44:5e:dd:fc:69:8c:cb:47:57:12:89:b5:
         b9:f4:7c:19:9a:25:0c:dc:df:8e:b4:4b:c9:a0:70:2c:3e:f4:
         55:14:62:d1:53:99:d5:74:b6:8e:f3:01:99:6a:1f:bb:88:3b:
         5c:5f:41:8c:2c:a1:33:2e:cf:ee:65:48:9b:0b:7f:82:3c:c0:
         c6:ec:de:94:f2:11:3b:f4:a8:22:40:18:9f:ca:e7:cf:98:36:
         29:16:5e:5e:c7:32:ce:f0:71:c4:ec:cf:ab:4b:3e:58:15:29:
         8e:eb:3b:25:c8:1f:b3:d2:9d:01:5a:24:e6:8a:97:68:9d:31:
         56:8f:97:8e:11:c2:b6:14:31:5a:53:93:c0:d6:62:0a:16:8c:
         39:90:43:c6:91:bf:4a:2f:c3:c9:81:cc:31:cf:46:34:f3:05:
         65:c3:49:df:aa:07:31:aa:6c:2c:f7:2d:19:be:11:8d:00:6a:
         28:24:27:52
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUaHU4jLJYLyHVYzQUk4fkya4exNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY0NUY1NDQyMDQ5NzkzNDkwRTQ4NEUxOEFEMTUxNkM4
RkRDODA4NzAeFw0yNTAzMDUyMzUzNDlaFw0yNjAzMDQyMzU4NDlaMDMxMTAvBgNV
BAMTKEQ0RDFFOUQ1REVBRUI0QUJBOURERjdGMTE2NzU1NDRDNkQyNDJFRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwb/NwHlnTITHzjLjfZAB5b8IT
HF7xzgZc8ABpe/fxTChTM9n+CxOqH0Gz6mR75Yto6X9EqI8tSAc7BWHBuuz8JwaV
njAITVfGnukTbjvyYvjuCrxK1n6KgIUzPMuVrvBsSvz4jhkSE7K3ziK5s/NBDxKz
z5cnvAEvnvzaJe+o921L6fmOeahUJ/2ESfjVnVKEEUWKnzXWKb1XlZReqSaerzfS
hJ9HvmqXIHnXnz5qEACUerGMKtng53l/tm6WrYtYLXd33+Q01DNYnvMnHLAvSkWQ
7TUorPG+qdDlSxfItIu8uwb10RlJ3KibdPnw0sFdF/rojTyFB+POTwZErYCFAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU1NHp1d6utKup3ffxFnVUTG0kLuswHwYDVR0j
BBgwFoAUv0X1RCBJeTSQ5IThitFRbI/cgIcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0M0S1F0QlFXeFRqMW5ZYTdUTmhVdng5eG1hN1pyeUYxVWt6TnZhclNY
RWkvMS9CRjQ1RjU0NDIwNDk3OTM0OTBFNDg0RTE4QUQxNTE2QzhGREM4MDg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNDVGNTQ0MjA0OTc5MzQ5
MEU0ODRFMThBRDE1MTZDOEZEQzgwODcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NDNEtRdEJRV3hUajFuWWE3VE5oVXZ4OXhtYTdacnlGMVVrek52YXJTWEVpLzEv
MzEzNzM5MmUzNDM5MmUzMTM0MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjMw
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKzMZAwDQYJKoZIhvcNAQELBQADggEBAEfN0j5ALgTCdc4/
+sgWCOn+nWDE7PtbuhaIijfAlX5F5s4VGhjk6rQH4rdd8J++f1iE8r7vRFA1eyji
x7n1cqieK7qaeLLKVgGtUKP+XkRe3fxpjMtHVxKJtbn0fBmaJQzc3460S8mgcCw+
9FUUYtFTmdV0to7zAZlqH7uIO1xfQYwsoTMuz+5lSJsLf4I8wMbs3pTyETv0qCJA
GJ/K58+YNikWXl7HMs7wccTsz6tLPlgVKY7rOyXIH7PSnQFaJOaKl2idMVaPl44R
wrYUMVpTk8DWYgoWjDmQQ8aRv0ovw8mBzDHPRjTzBWXDSd+qBzGqbCz3LRm+EY0A
aigkJ1I=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:20:52 2025 by rpki-client