Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32322d3232203d3e20323731313934.roa
File:                     3137392e34392e3134382e302f32322d3232203d3e20323731313934.roa (raw, json)
Hash identifier:          Zl5fa3l50U5sR91t76acuWxXm6F5QlFIzxMBz6M1qxI=
Subject key identifier:   D0:BA:36:9C:40:85:14:42:A6:49:CB:A9:FD:7F:BF:2B:C4:E5:CE:EC
Certificate issuer:       /CN=5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48
Certificate serial:       491F5E719F2025DE72CCD72D177818EAA737AE33
Authority key identifier: 5F:25:ED:3F:30:4B:5E:A7:77:D2:DF:5E:71:FD:F7:34:61:DF:0A:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32322d3232203d3e20323731313934.roa
Signing time:             Thu 02 Feb 2023 18:44:33 +0000
ROA not before:           Thu 02 Feb 2023 18:39:33 +0000
ROA not after:            Thu 01 Feb 2024 18:44:33 +0000
asID:                     271194
IP address blocks:        179.49.148.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1f:5e:71:9f:20:25:de:72:cc:d7:2d:17:78:18:ea:a7:37:ae:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48
        Validity
            Not Before: Feb  2 18:39:33 2023 GMT
            Not After : Feb  1 18:44:33 2024 GMT
        Subject: CN=D0BA369C40851442A649CBA9FD7FBF2BC4E5CEEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:e5:9f:0d:41:67:20:11:df:3e:ba:fc:ba:
                    46:b5:39:5e:95:0d:5e:97:b0:24:97:c0:c4:51:ba:
                    a7:e1:6e:63:48:27:12:e4:1e:2c:fb:d1:b7:c2:2a:
                    78:26:a3:80:03:e1:ea:7e:02:96:ce:c1:a6:65:d6:
                    1c:1d:a5:dc:88:70:ae:57:b6:56:d3:52:f8:db:38:
                    ae:a4:62:3a:dc:57:95:ee:e4:18:d0:50:5a:f3:77:
                    91:c6:79:cb:dc:f2:c9:bf:81:de:8f:71:b6:96:40:
                    a1:b8:92:2f:1b:5f:e0:9e:af:62:08:c6:6a:da:75:
                    7a:e6:82:39:04:b2:14:78:de:a4:04:0b:2a:46:ae:
                    7c:39:c3:f1:62:a6:90:9d:77:37:cc:b4:41:68:54:
                    90:4a:55:a4:63:42:9b:3c:ff:23:d5:7a:87:27:de:
                    a2:bc:b4:85:62:38:50:5c:da:09:6c:b2:15:17:13:
                    28:db:56:0a:76:0f:e7:13:a9:a3:1b:e9:50:d2:f7:
                    90:4c:85:4a:02:1e:b3:cf:8f:5a:4c:62:4c:7e:a6:
                    d6:db:43:5b:a3:1c:57:76:c8:83:4d:46:b3:2f:fc:
                    9e:bc:1b:64:e3:4c:77:36:cc:3a:65:f8:06:42:07:
                    64:a1:af:70:22:5e:09:93:67:b7:c0:2a:60:4c:f5:
                    63:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BA:36:9C:40:85:14:42:A6:49:CB:A9:FD:7F:BF:2B:C4:E5:CE:EC
            X509v3 Authority Key Identifier:
                keyid:5F:25:ED:3F:30:4B:5E:A7:77:D2:DF:5E:71:FD:F7:34:61:DF:0A:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32322d3232203d3e20323731313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:b7:84:8b:9c:b7:0b:80:ac:28:c6:c3:07:86:9e:74:b1:f3:
         4a:bc:9d:f8:2d:6e:4e:5a:f9:91:9c:bd:20:78:8d:f5:37:99:
         f2:37:1e:bb:8f:7a:39:95:8e:0a:25:7a:65:fc:ef:94:1a:20:
         45:f1:1a:0d:f2:05:b8:b4:9c:49:e6:b5:53:50:25:3a:c6:df:
         95:d5:b7:ed:88:31:9b:7a:f6:d6:e7:03:21:df:9d:a2:3b:f7:
         c3:cf:1a:12:a8:4c:c9:6a:30:5a:4a:40:31:3f:3c:c6:64:90:
         47:0b:cd:a5:f8:45:41:9d:f9:8d:25:ae:26:e1:9c:4d:d8:4a:
         dd:b4:8b:c6:c7:a3:6e:87:1d:bb:19:6a:60:07:d7:a2:51:0a:
         d2:64:24:1c:7b:50:a1:e1:db:4d:6b:9b:73:6f:39:2a:60:5e:
         c8:59:c4:86:c4:4d:ac:f3:a2:02:53:33:ed:62:0e:07:c6:12:
         4b:7d:18:18:72:19:49:91:9a:d5:ba:07:ac:c3:03:66:24:66:
         61:8c:20:ce:0a:01:60:cc:70:ad:89:90:67:b6:4d:ca:a1:bc:
         62:2d:a5:bd:ff:46:03:27:aa:d2:7f:42:20:eb:32:31:78:96:
         82:fe:34:a9:63:d1:d0:f6:d8:5e:f7:08:45:12:73:4f:f8:81:
         10:84:23:09
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSR9ecZ8gJd5yzNctF3gY6qc3rjMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYyNUVEM0YzMDRCNUVBNzc3RDJERjVFNzFGREY3MzQ2
MURGMEE0ODAeFw0yMzAyMDIxODM5MzNaFw0yNDAyMDExODQ0MzNaMDMxMTAvBgNV
BAMTKEQwQkEzNjlDNDA4NTE0NDJBNjQ5Q0JBOUZEN0ZCRjJCQzRFNUNFRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCziuWfDUFnIBHfPrr8uka1OV6V
DV6XsCSXwMRRuqfhbmNIJxLkHiz70bfCKngmo4AD4ep+ApbOwaZl1hwdpdyIcK5X
tlbTUvjbOK6kYjrcV5Xu5BjQUFrzd5HGecvc8sm/gd6PcbaWQKG4ki8bX+Cer2II
xmradXrmgjkEshR43qQECypGrnw5w/FippCddzfMtEFoVJBKVaRjQps8/yPVeocn
3qK8tIViOFBc2glsshUXEyjbVgp2D+cTqaMb6VDS95BMhUoCHrPPj1pMYkx+ptbb
Q1ujHFd2yINNRrMv/J68G2TjTHc2zDpl+AZCB2Shr3AiXgmTZ7fAKmBM9WMzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0Lo2nECFFEKmScup/X+/K8TlzuwwHwYDVR0j
BBgwFoAUXyXtPzBLXqd30t9ecf33NGHfCkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXdLSk12UXBMYnJ3U1ptTk1NTjZEUGpkRk1BVlFHQk5YckRROHg5REJ4
d0IvMC81RjI1RUQzRjMwNEI1RUE3NzdEMkRGNUU3MUZERjczNDYxREYwQTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVGMjVFRDNGMzA0QjVFQTc3
N0QyREY1RTcxRkRGNzM0NjFERjBBNDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V3S0pNdlFwTGJyd1NabU5NTU42RFBqZEZNQVZRR0JOWHJEUTh4OURCeHdCLzAv
MzEzNzM5MmUzNDM5MmUzMTM0MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzMTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzMZQwDQYJKoZIhvcNAQELBQADggEBANC3hIuc
twuArCjGwweGnnSx80q8nfgtbk5a+ZGcvSB4jfU3mfI3HruPejmVjgolemX875Qa
IEXxGg3yBbi0nEnmtVNQJTrG35XVt+2IMZt69tbnAyHfnaI798PPGhKoTMlqMFpK
QDE/PMZkkEcLzaX4RUGd+Y0lribhnE3YSt20i8bHo26HHbsZamAH16JRCtJkJBx7
UKHh201rm3NvOSpgXshZxIbETazzogJTM+1iDgfGEkt9GBhyGUmRmtW6B6zDA2Yk
ZmGMIM4KAWDMcK2JkGe2TcqhvGItpb3/RgMnqtJ/QiDrMjF4loL+NKlj0dD22F73
CEUSc0/4gRCEIwk=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:20 2025 by rpki-client