Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e2033333536.roa
File:                     3137392e34392e3134342e302f32322d3332203d3e2033333536.roa (raw, json)
Hash identifier:          KFh+MEQB5sIOP22S9aGhwQy4nlxVnACJzz0CXnleD5A=
Subject key identifier:   26:F9:FA:0B:2C:0C:23:10:B6:4E:C4:25:C4:50:9C:FA:AA:F1:27:D1
Certificate issuer:       /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial:       151E83BF49D8F88336F12087E1FC388381B894C0
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e2033333536.roa
Signing time:             Wed 05 Mar 2025 23:58:50 +0000
ROA not before:           Wed 05 Mar 2025 23:53:50 +0000
ROA not after:            Wed 04 Mar 2026 23:58:50 +0000
asID:                     3356
IP address blocks:        179.49.144.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1e:83:bf:49:d8:f8:83:36:f1:20:87:e1:fc:38:83:81:b8:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Validity
            Not Before: Mar  5 23:53:50 2025 GMT
            Not After : Mar  4 23:58:50 2026 GMT
        Subject: CN=26F9FA0B2C0C2310B64EC425C4509CFAAAF127D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e4:00:a8:24:c1:24:42:8c:79:03:3f:c5:ef:
                    b3:c5:a4:28:9b:59:e1:7f:a2:2f:59:71:e4:80:33:
                    08:0c:b0:27:06:dd:7f:e1:86:99:76:aa:0f:8b:69:
                    fc:5b:01:b0:f8:f3:a3:e7:a9:6a:83:7d:24:12:ef:
                    7a:01:79:1b:c6:70:4c:14:cc:0c:32:24:58:17:8e:
                    81:a6:e5:88:cd:60:5b:65:ac:b4:0a:ff:86:96:7b:
                    e4:d2:d0:fc:45:dd:14:0f:58:b4:e8:c1:0a:b7:ac:
                    73:70:6e:fd:24:27:42:3d:f7:45:d7:7e:9f:75:2c:
                    e4:85:f0:ec:9d:d9:b7:f9:32:a9:24:13:17:4a:58:
                    fc:94:82:42:fd:36:cf:8a:25:ec:60:ed:23:66:3e:
                    c5:5e:9e:12:f9:2d:b7:6e:c7:58:c4:1e:11:67:60:
                    aa:9d:a1:33:39:08:ca:0f:04:e7:75:e9:fd:d3:26:
                    0d:26:30:11:3f:f5:4f:f8:e2:a2:d6:e6:74:0b:18:
                    b1:84:8c:f1:e0:d2:7e:de:7b:ab:c7:8f:3d:ed:b4:
                    e7:37:9f:09:7b:08:9b:a0:15:79:ba:9c:a8:71:93:
                    e6:94:31:f9:8e:82:b2:46:bd:97:59:98:fb:9e:84:
                    3f:f6:0b:32:f0:29:da:06:a3:fb:b3:6f:17:3c:4f:
                    e1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F9:FA:0B:2C:0C:23:10:B6:4E:C4:25:C4:50:9C:FA:AA:F1:27:D1
            X509v3 Authority Key Identifier:
                keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:39:cb:61:9f:fb:4f:5c:e8:6a:e1:63:23:15:a0:22:5c:58:
         52:f0:78:06:fd:62:4b:01:4f:ec:da:1a:84:99:31:f0:90:d6:
         37:56:f8:da:6d:7f:e3:ea:f8:77:9f:e7:74:5b:d4:18:ef:47:
         41:56:8d:cc:25:0e:66:6b:4f:66:f6:b3:a0:16:ac:d0:59:33:
         6a:b2:bd:c4:4c:78:3e:21:d2:af:51:cc:68:cb:68:fa:71:b6:
         c5:95:76:7e:3a:af:ea:5e:3a:09:f9:d5:cb:a4:52:f7:4d:04:
         43:ea:6c:e8:a3:f8:26:8b:33:a1:21:6b:34:ab:d1:7a:cb:b6:
         ec:fa:83:58:c3:d7:fd:51:e5:bd:30:a3:9c:f4:a5:30:22:76:
         0a:c9:36:92:3b:f3:16:92:6b:bb:6d:b4:27:09:70:ab:94:21:
         d9:04:1a:fa:9f:a1:d4:c2:25:72:b9:41:3d:0a:53:87:85:f3:
         b1:4d:9b:62:07:36:47:f6:9f:d9:eb:0d:12:72:f3:92:1e:65:
         e7:ab:3c:3d:1f:67:23:18:e1:d5:aa:ab:1e:73:27:65:08:f9:
         08:95:d8:cb:0e:24:24:bb:b0:7c:80:5f:a4:5e:73:88:d3:4e:
         d1:6e:ed:91:bb:8f:87:1e:a0:d7:4c:5d:8b:58:0a:e0:57:83:
         fa:79:50:17
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFR6Dv0nY+IM28SCH4fw4g4G4lMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY0NUY1NDQyMDQ5NzkzNDkwRTQ4NEUxOEFEMTUxNkM4
RkRDODA4NzAeFw0yNTAzMDUyMzUzNTBaFw0yNjAzMDQyMzU4NTBaMDMxMTAvBgNV
BAMTKDI2RjlGQTBCMkMwQzIzMTBCNjRFQzQyNUM0NTA5Q0ZBQUFGMTI3RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz5ACoJMEkQox5Az/F77PFpCib
WeF/oi9ZceSAMwgMsCcG3X/hhpl2qg+LafxbAbD486PnqWqDfSQS73oBeRvGcEwU
zAwyJFgXjoGm5YjNYFtlrLQK/4aWe+TS0PxF3RQPWLTowQq3rHNwbv0kJ0I990XX
fp91LOSF8Oyd2bf5MqkkExdKWPyUgkL9Ns+KJexg7SNmPsVenhL5Lbdux1jEHhFn
YKqdoTM5CMoPBOd16f3TJg0mMBE/9U/44qLW5nQLGLGEjPHg0n7ee6vHjz3ttOc3
nwl7CJugFXm6nKhxk+aUMfmOgrJGvZdZmPuehD/2CzLwKdoGo/uzbxc8T+HZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUJvn6CywMIxC2TsQlxFCc+qrxJ9EwHwYDVR0j
BBgwFoAUv0X1RCBJeTSQ5IThitFRbI/cgIcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0M0S1F0QlFXeFRqMW5ZYTdUTmhVdng5eG1hN1pyeUYxVWt6TnZhclNY
RWkvMS9CRjQ1RjU0NDIwNDk3OTM0OTBFNDg0RTE4QUQxNTE2QzhGREM4MDg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNDVGNTQ0MjA0OTc5MzQ5
MEU0ODRFMThBRDE1MTZDOEZEQzgwODcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NDNEtRdEJRV3hUajFuWWE3VE5oVXZ4OXhtYTdacnlGMVVrek52YXJTWEVpLzEv
MzEzNzM5MmUzNDM5MmUzMTM0MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMzMz
MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArMxkDANBgkqhkiG9w0BAQsFAAOCAQEACTnLYZ/7T1zo
auFjIxWgIlxYUvB4Bv1iSwFP7NoahJkx8JDWN1b42m1/4+r4d5/ndFvUGO9HQVaN
zCUOZmtPZvazoBas0FkzarK9xEx4PiHSr1HMaMto+nG2xZV2fjqv6l46CfnVy6RS
900EQ+ps6KP4JoszoSFrNKvResu27PqDWMPX/VHlvTCjnPSlMCJ2Csk2kjvzFpJr
u220Jwlwq5Qh2QQa+p+h1MIlcrlBPQpTh4XzsU2bYgc2R/af2esNEnLzkh5l56s8
PR9nIxjh1aqrHnMnZQj5CJXYyw4kJLuwfIBfpF5ziNNO0W7tkbuPhx6g10xdi1gK
4FeD+nlQFw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:01:47 2025 by rpki-client