Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3137392e3139312e36342e302f31392d3234203d3e203137323232.roa
File:                     3137392e3139312e36342e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          rOlOgh/IN0K5RZgxZIkSS9kyJ6GQbXj9VN+ZlChDTQE=
Subject key identifier:   B5:9C:95:0C:84:64:AC:84:56:21:5C:A8:4D:07:D8:DA:C9:DF:E6:6A
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       6FDD5BB6B47944CFED6EBC45546752813C6E8F79
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3137392e3139312e36342e302f31392d3234203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:40 +0000
ROA not before:           Mon 25 Mar 2024 22:50:40 +0000
ROA not after:            Mon 24 Mar 2025 22:55:40 +0000
asID:                     17222
IP address blocks:        179.191.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:dd:5b:b6:b4:79:44:cf:ed:6e:bc:45:54:67:52:81:3c:6e:8f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:40 2024 GMT
            Not After : Mar 24 22:55:40 2025 GMT
        Subject: CN=B59C950C8464AC8456215CA84D07D8DAC9DFE66A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:11:1d:e8:82:e5:95:4b:14:b5:c6:be:9c:
                    80:81:c3:5e:14:b4:8c:d7:d3:34:cd:c2:82:87:ef:
                    9e:27:a7:fc:11:1f:7a:fd:a8:c2:1a:f5:f9:33:1a:
                    2c:cb:eb:2f:b6:da:de:50:fe:db:e6:74:1d:83:f9:
                    a7:27:ee:e1:18:4a:9e:7d:0b:0f:fd:31:86:83:50:
                    48:f0:8b:83:38:97:81:ae:da:24:58:47:64:bf:9d:
                    45:9b:23:ed:81:9b:8a:f3:b1:3b:1f:e2:95:e4:62:
                    49:50:d0:24:25:c1:79:ce:06:68:5b:70:4c:de:52:
                    bf:69:48:6b:2e:43:57:cd:15:ed:2a:71:a9:fd:c4:
                    da:fb:07:d3:c5:2c:5b:48:0f:9d:d3:e7:95:b5:52:
                    31:92:a9:5c:fd:69:3d:a0:3f:0b:ec:3c:5e:d0:75:
                    67:66:3f:3f:41:cb:0f:2f:fe:61:fb:e3:87:1f:0e:
                    19:48:37:14:eb:fd:ff:9f:67:2e:a2:e0:15:aa:81:
                    87:5f:ee:98:b8:69:d4:bb:dc:a3:bc:b4:51:24:ae:
                    d0:8e:75:c8:92:28:67:62:6c:ea:f5:73:ba:7b:91:
                    7c:dc:ec:bf:e1:55:42:96:f1:2d:7e:21:1a:70:aa:
                    aa:20:16:8e:a5:c8:9a:8c:b4:26:f5:be:80:0d:98:
                    b7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9C:95:0C:84:64:AC:84:56:21:5C:A8:4D:07:D8:DA:C9:DF:E6:6A
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3137392e3139312e36342e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:63:89:6d:14:77:a5:c2:d8:ea:b8:1b:ee:a8:f9:10:25:ba:
         4d:74:54:29:b0:69:78:ec:d8:fa:78:0f:52:ac:e0:ae:11:21:
         cd:d8:8e:19:0a:e3:a6:8e:f2:26:84:e0:be:2a:2e:e8:d2:e8:
         1c:3a:a3:d9:17:b9:15:c1:8e:18:73:f4:9c:f6:e5:cd:ae:fb:
         67:4f:6c:78:57:46:da:d2:14:70:fb:ec:f9:80:85:5f:26:59:
         0b:b9:8f:db:d2:32:d6:40:dc:39:7b:d6:ff:26:8e:75:06:c5:
         66:ac:f8:c1:f4:02:a8:51:af:f1:ea:3e:62:1f:aa:e4:f8:f0:
         53:fa:9f:6a:6d:26:8f:bd:8d:d1:b1:85:51:54:5d:fe:9b:b9:
         6d:48:31:f8:ed:bf:81:d5:43:d2:d7:40:a6:07:2a:3e:cb:17:
         5e:2e:89:36:79:bc:8b:83:ab:48:9c:28:7d:fd:07:05:b5:51:
         67:ed:b5:52:56:6f:a1:cf:b1:e7:51:e1:c3:d6:f7:27:52:09:
         37:3e:c4:20:f0:9a:19:88:16:f0:4d:dc:3b:a3:4e:90:96:24:
         d9:75:d6:30:2f:ae:45:52:4b:1b:a7:76:8a:21:44:b3:40:ba:
         50:61:8c:33:f5:af:78:26:d4:8d:24:ac:44:3e:d5:0a:d6:ef:
         68:3d:da:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:01 2025 by rpki-client