Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPN1JjWezMLNgGD2G5tqMd2Gzg5FEHvGTNp35hhGgx8q/0/3137392e34332e32312e302f32342d3234203d3e20323730383437.roa
File:                     3137392e34332e32312e302f32342d3234203d3e20323730383437.roa (raw, json)
Hash identifier:          6mgWRHmGBEItDIhJHGpLln2myRndqC93XO3fLHCx9e8=
Subject key identifier:   6C:9E:E3:6D:5F:D5:1B:63:06:A5:7B:FB:1A:D0:B6:C7:27:50:98:C8
Certificate issuer:       /CN=C80AE066544790CE90A3B1D268F54E82538AAF46
Certificate serial:       4DE2AA64E6E5392AED9AED9CB929B608E347E5EE
Authority key identifier: C8:0A:E0:66:54:47:90:CE:90:A3:B1:D2:68:F5:4E:82:53:8A:AF:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C80AE066544790CE90A3B1D268F54E82538AAF46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPN1JjWezMLNgGD2G5tqMd2Gzg5FEHvGTNp35hhGgx8q/0/3137392e34332e32312e302f32342d3234203d3e20323730383437.roa
Signing time:             Thu 18 Jul 2024 21:12:31 +0000
ROA not before:           Thu 18 Jul 2024 21:07:31 +0000
ROA not after:            Thu 17 Jul 2025 21:12:31 +0000
asID:                     270847
IP address blocks:        179.43.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e2:aa:64:e6:e5:39:2a:ed:9a:ed:9c:b9:29:b6:08:e3:47:e5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C80AE066544790CE90A3B1D268F54E82538AAF46
        Validity
            Not Before: Jul 18 21:07:31 2024 GMT
            Not After : Jul 17 21:12:31 2025 GMT
        Subject: CN=6C9EE36D5FD51B6306A57BFB1AD0B6C7275098C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:27:fa:7c:3a:74:56:70:07:3a:90:86:85:
                    21:84:aa:63:f9:c6:ec:e5:eb:1a:db:3d:6c:a9:5b:
                    78:fb:50:12:9b:6b:94:fb:1d:df:ef:dd:77:b0:83:
                    29:96:0f:e0:d5:ce:45:92:79:3d:88:c2:55:74:3f:
                    b8:8e:98:fb:c2:09:17:78:74:0a:9f:83:9c:2d:be:
                    26:0e:2c:fb:0d:94:97:4a:cd:73:a3:1f:22:47:ca:
                    b4:6b:67:16:41:2d:d5:31:f8:9a:71:e1:93:f2:dd:
                    3f:40:48:d1:f6:5c:a0:28:61:7d:8b:4e:32:ca:e5:
                    3d:16:f4:cf:78:84:5b:ac:e5:7c:07:2b:68:73:42:
                    3f:ed:7e:ea:de:2d:cb:43:a3:ea:b2:b2:46:c5:2b:
                    d1:cc:33:cf:10:73:d3:41:21:dc:a5:8a:10:f2:b5:
                    cd:8f:31:cc:7c:1a:6e:cc:b3:31:c4:86:b5:31:45:
                    14:e0:cd:f7:52:97:76:13:41:b7:56:fc:5a:7e:3c:
                    74:9f:c6:9c:fc:dd:6e:57:7c:75:9e:da:db:81:50:
                    28:5e:ce:fc:56:15:5c:85:aa:a2:8a:dd:fb:e0:36:
                    4e:34:4d:b5:61:24:72:a5:ff:11:13:96:dc:4d:c9:
                    91:7f:eb:ec:04:c2:aa:8a:39:5f:10:31:52:c4:19:
                    da:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9E:E3:6D:5F:D5:1B:63:06:A5:7B:FB:1A:D0:B6:C7:27:50:98:C8
            X509v3 Authority Key Identifier:
                keyid:C8:0A:E0:66:54:47:90:CE:90:A3:B1:D2:68:F5:4E:82:53:8A:AF:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPN1JjWezMLNgGD2G5tqMd2Gzg5FEHvGTNp35hhGgx8q/0/C80AE066544790CE90A3B1D268F54E82538AAF46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C80AE066544790CE90A3B1D268F54E82538AAF46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPN1JjWezMLNgGD2G5tqMd2Gzg5FEHvGTNp35hhGgx8q/0/3137392e34332e32312e302f32342d3234203d3e20323730383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:aa:64:70:56:39:d5:15:b5:b0:a3:8c:21:71:a6:28:fd:a5:
         c3:c8:90:e0:a4:aa:6f:31:b9:5a:e0:8c:ed:84:42:78:e7:99:
         d5:78:de:96:6e:4d:4a:c5:76:ac:fd:7d:09:a0:36:41:a2:ed:
         6e:8e:bb:cc:93:91:4c:12:92:dd:40:78:fd:c8:66:89:df:c7:
         f7:9c:43:76:02:28:4d:97:5a:53:20:1f:0d:a3:36:ff:6d:a7:
         33:a4:31:2d:3d:43:07:f1:10:a8:f5:25:f7:48:e8:8e:96:d9:
         f3:bf:1a:d8:21:4a:bb:de:3a:b7:57:7a:6c:cc:65:5c:20:25:
         84:47:0a:23:ec:e7:ff:03:83:a8:ad:6d:a5:02:de:81:97:a9:
         51:31:4f:4e:96:8c:7a:6f:b7:8f:7c:bd:51:c5:51:7b:7a:8f:
         e9:df:84:e6:0a:f6:ff:22:f3:9c:52:33:98:f7:09:49:63:8d:
         d4:d1:01:1e:b8:58:b9:7c:9c:93:ca:2b:83:a6:33:d0:ae:87:
         8a:26:85:12:f7:17:5c:b3:bf:df:0a:15:1c:3b:68:82:4f:58:
         2e:ab:20:ff:10:2b:c7:b2:7a:fa:e2:35:d3:6e:e5:2d:43:79:
         8b:7c:d9:bf:cb:82:dd:c0:5e:0e:f6:a4:ba:ed:a7:7b:3e:0a:
         9e:bb:a6:86
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTeKqZOblOSrtmu2cuSm2CONH5e4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgwQUUwNjY1NDQ3OTBDRTkwQTNCMUQyNjhGNTRFODI1
MzhBQUY0NjAeFw0yNDA3MTgyMTA3MzFaFw0yNTA3MTcyMTEyMzFaMDMxMTAvBgNV
BAMTKDZDOUVFMzZENUZENTFCNjMwNkE1N0JGQjFBRDBCNkM3Mjc1MDk4QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNif6fDp0VnAHOpCGhSGEqmP5
xuzl6xrbPWypW3j7UBKba5T7Hd/v3XewgymWD+DVzkWSeT2IwlV0P7iOmPvCCRd4
dAqfg5wtviYOLPsNlJdKzXOjHyJHyrRrZxZBLdUx+Jpx4ZPy3T9ASNH2XKAoYX2L
TjLK5T0W9M94hFus5XwHK2hzQj/tfureLctDo+qyskbFK9HMM88Qc9NBIdylihDy
tc2PMcx8Gm7MszHEhrUxRRTgzfdSl3YTQbdW/Fp+PHSfxpz83W5XfHWe2tuBUChe
zvxWFVyFqqKK3fvgNk40TbVhJHKl/xETltxNyZF/6+wEwqqKOV8QMVLEGdrpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbJ7jbV/VG2MGpXv7GtC2xydQmMgwHwYDVR0j
BBgwFoAUyArgZlRHkM6Qo7HSaPVOglOKr0YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1BOMUpqV2V6TUxOZ0dEMkc1dHFNZDJHemc1RkVIdkdUTnAzNWhoR2d4
OHEvMC9DODBBRTA2NjU0NDc5MENFOTBBM0IxRDI2OEY1NEU4MjUzOEFBRjQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4MEFFMDY2NTQ0NzkwQ0U5
MEEzQjFEMjY4RjU0RTgyNTM4QUFGNDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NQTjFKaldlek1MTmdHRDJHNXRxTWQyR3pnNUZFSHZHVE5wMzVoaEdneDhxLzAv
MzEzNzM5MmUzNDMzMmUzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzgzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsysVMA0GCSqGSIb3DQEBCwUAA4IBAQA3qmRwVjnV
FbWwo4whcaYo/aXDyJDgpKpvMbla4IzthEJ455nVeN6Wbk1KxXas/X0JoDZBou1u
jrvMk5FMEpLdQHj9yGaJ38f3nEN2AihNl1pTIB8Nozb/baczpDEtPUMH8RCo9SX3
SOiOltnzvxrYIUq73jq3V3pszGVcICWERwoj7Of/A4OorW2lAt6Bl6lRMU9Olox6
b7ePfL1RxVF7eo/p34TmCvb/IvOcUjOY9wlJY43U0QEeuFi5fJyTyiuDpjPQroeK
JoUS9xdcs7/fChUcO2iCT1guqyD/ECvHsnr64jXTbuUtQ3mLfNm/y4LdwF4O9qS6
7ad7Pgqeu6aG
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:54:31 2025 by rpki-client