Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e203532363339.roa
File:                     3137392e34392e3134342e302f32322d3332203d3e203532363339.roa (raw, json)
Hash identifier:          NnuYACUqArTYq78D0d3XSs++1nj66wHpEhyHI7yEeZo=
Subject key identifier:   4A:46:2F:78:97:0F:F8:2A:F7:44:71:16:1F:A7:E0:22:DD:8D:00:4A
Certificate issuer:       /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial:       6882A2D9F2CE9C5921D0EDAE5C40BD457F257109
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e203532363339.roa
Signing time:             Wed 05 Mar 2025 23:58:50 +0000
ROA not before:           Wed 05 Mar 2025 23:53:50 +0000
ROA not after:            Wed 04 Mar 2026 23:58:50 +0000
asID:                     52639
IP address blocks:        179.49.144.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:82:a2:d9:f2:ce:9c:59:21:d0:ed:ae:5c:40:bd:45:7f:25:71:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Validity
            Not Before: Mar  5 23:53:50 2025 GMT
            Not After : Mar  4 23:58:50 2026 GMT
        Subject: CN=4A462F78970FF82AF74471161FA7E022DD8D004A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:7e:4e:a2:2e:d8:c6:56:d9:e0:32:7c:96:
                    01:b6:0d:ef:c0:1b:a7:05:b6:68:12:52:c1:64:3b:
                    8a:94:8e:5a:d5:85:4e:73:97:cb:26:c5:0e:d8:2c:
                    e1:68:e7:de:f3:73:04:17:e1:2f:39:76:77:ee:43:
                    d8:cc:57:ce:1a:7a:e4:c2:96:bd:48:78:fe:07:96:
                    1d:cb:82:d6:7d:4c:5f:94:bf:23:10:90:43:01:ec:
                    30:e6:f9:51:13:da:c6:29:42:af:6e:5c:6b:52:b1:
                    e6:a1:28:02:10:8e:28:6f:5a:bd:d1:1c:89:26:1f:
                    ce:df:ce:bd:a7:79:f6:5e:e3:16:1b:4b:0c:ea:8a:
                    e7:c2:ee:07:f5:a5:13:d3:6f:42:9a:65:97:4e:f3:
                    02:35:54:28:b8:b6:a6:d7:67:56:c1:0b:85:6d:80:
                    ed:60:b9:f8:f8:8f:6c:d9:85:19:4a:98:2b:fd:04:
                    08:98:41:05:96:05:4e:a4:09:a5:e4:8e:be:32:26:
                    f7:61:b5:c5:c0:2f:8e:3b:8a:a5:43:75:2b:20:58:
                    d3:42:da:84:f2:ce:f0:3d:e0:ac:6b:a7:c9:cf:aa:
                    e9:39:70:e1:f5:04:bd:3f:a5:8c:10:18:77:87:a6:
                    3f:db:58:d8:1c:74:e7:65:8a:69:b2:12:c1:2b:ac:
                    61:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:46:2F:78:97:0F:F8:2A:F7:44:71:16:1F:A7:E0:22:DD:8D:00:4A
            X509v3 Authority Key Identifier:
                keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e203532363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:5a:ac:50:eb:fb:09:7d:59:65:4f:ea:e3:d2:c5:34:c1:a9:
         67:21:6b:eb:02:f6:03:50:ad:20:db:60:cd:8e:21:84:e7:8e:
         c2:ba:82:37:b9:3a:9c:61:88:63:f4:1f:73:1f:2c:0e:be:b6:
         50:04:ac:8e:8a:f9:ea:b6:2f:bf:ed:1e:4c:15:02:2e:b8:4a:
         9d:3a:a4:a9:c4:7d:3a:63:ea:57:11:8b:49:8e:ae:64:9a:b7:
         a5:7d:0f:8f:e8:ce:f7:16:3c:f5:17:38:dd:bc:88:bf:07:9e:
         c3:d9:3b:3c:44:a7:82:ed:54:bd:ba:e5:d0:a3:02:4f:6a:76:
         a0:a5:d2:d6:05:70:90:93:96:fc:52:62:ea:f2:93:0c:1d:99:
         b5:4f:d6:3a:96:49:ef:e4:32:ee:bc:e8:46:10:df:9f:5f:e2:
         fe:92:6a:b5:22:06:d0:39:05:d3:90:2c:c3:bd:07:c6:88:fe:
         02:b4:84:e3:8e:84:c1:dd:c5:01:9a:4a:01:b4:e3:e3:a0:10:
         04:40:51:3c:7d:99:ae:0b:e3:47:a2:1b:5a:d3:61:5b:80:fc:
         e4:41:ba:5b:5d:7f:7f:c0:3a:dc:80:9b:06:a9:17:d8:f2:4a:
         66:13:fd:50:1e:10:78:1b:d8:b0:f1:5d:dc:23:e7:44:d1:9c:
         68:7c:30:7e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaIKi2fLOnFkh0O2uXEC9RX8lcQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY0NUY1NDQyMDQ5NzkzNDkwRTQ4NEUxOEFEMTUxNkM4
RkRDODA4NzAeFw0yNTAzMDUyMzUzNTBaFw0yNjAzMDQyMzU4NTBaMDMxMTAvBgNV
BAMTKDRBNDYyRjc4OTcwRkY4MkFGNzQ0NzExNjFGQTdFMDIyREQ4RDAwNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqI35Ooi7YxlbZ4DJ8lgG2De/A
G6cFtmgSUsFkO4qUjlrVhU5zl8smxQ7YLOFo597zcwQX4S85dnfuQ9jMV84aeuTC
lr1IeP4Hlh3LgtZ9TF+UvyMQkEMB7DDm+VET2sYpQq9uXGtSseahKAIQjihvWr3R
HIkmH87fzr2nefZe4xYbSwzqiufC7gf1pRPTb0KaZZdO8wI1VCi4tqbXZ1bBC4Vt
gO1gufj4j2zZhRlKmCv9BAiYQQWWBU6kCaXkjr4yJvdhtcXAL447iqVDdSsgWNNC
2oTyzvA94Kxrp8nPquk5cOH1BL0/pYwQGHeHpj/bWNgcdOdlimmyEsErrGFhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSkYveJcP+Cr3RHEWH6fgIt2NAEowHwYDVR0j
BBgwFoAUv0X1RCBJeTSQ5IThitFRbI/cgIcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0M0S1F0QlFXeFRqMW5ZYTdUTmhVdng5eG1hN1pyeUYxVWt6TnZhclNY
RWkvMS9CRjQ1RjU0NDIwNDk3OTM0OTBFNDg0RTE4QUQxNTE2QzhGREM4MDg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNDVGNTQ0MjA0OTc5MzQ5
MEU0ODRFMThBRDE1MTZDOEZEQzgwODcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NDNEtRdEJRV3hUajFuWWE3VE5oVXZ4OXhtYTdacnlGMVVrek52YXJTWEVpLzEv
MzEzNzM5MmUzNDM5MmUzMTM0MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMy
MzYzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCszGQMA0GCSqGSIb3DQEBCwUAA4IBAQBBWqxQ6/sJ
fVllT+rj0sU0walnIWvrAvYDUK0g22DNjiGE547CuoI3uTqcYYhj9B9zHywOvrZQ
BKyOivnqti+/7R5MFQIuuEqdOqSpxH06Y+pXEYtJjq5kmrelfQ+P6M73Fjz1Fzjd
vIi/B57D2Ts8RKeC7VS9uuXQowJPanagpdLWBXCQk5b8UmLq8pMMHZm1T9Y6lknv
5DLuvOhGEN+fX+L+kmq1IgbQOQXTkCzDvQfGiP4CtITjjoTB3cUBmkoBtOPjoBAE
QFE8fZmuC+NHohta02FbgPzkQbpbXX9/wDrcgJsGqRfY8kpmE/1QHhB4G9iw8V3c
I+dE0ZxofDB+
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:11:31 2025 by rpki-client