Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137352e302f32342d3234203d3e20323731353636.roa
File:                     3137392e36332e3137352e302f32342d3234203d3e20323731353636.roa (raw, json)
Hash identifier:          xvlOQTm7xjL7vFV4dK1CylagVGgdULwlfPaGsYLrdvI=
Subject key identifier:   FD:1A:81:7A:0A:0E:B0:5D:7A:C9:23:80:32:0F:35:FB:DA:CF:75:9F
Certificate issuer:       /CN=8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521
Certificate serial:       01F7BB9F52EDE048A9AD1276553420CC24F596A2
Authority key identifier: 8C:3A:73:A3:F4:E7:E3:89:1D:0D:C6:F8:E4:5F:E4:7C:B0:3D:85:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137352e302f32342d3234203d3e20323731353636.roa
Signing time:             Wed 20 Mar 2024 14:12:39 +0000
ROA not before:           Wed 20 Mar 2024 14:07:39 +0000
ROA not after:            Wed 19 Mar 2025 14:12:39 +0000
asID:                     271566
IP address blocks:        179.63.175.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f7:bb:9f:52:ed:e0:48:a9:ad:12:76:55:34:20:cc:24:f5:96:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521
        Validity
            Not Before: Mar 20 14:07:39 2024 GMT
            Not After : Mar 19 14:12:39 2025 GMT
        Subject: CN=FD1A817A0A0EB05D7AC92380320F35FBDACF759F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b5:d3:ea:53:0e:7c:4e:ee:50:f4:51:08:fa:
                    3f:f9:d3:30:28:28:6c:2b:28:6a:ce:8f:71:17:d4:
                    83:8a:8f:a1:5a:3e:f2:0d:56:8c:26:89:2b:9b:19:
                    8f:77:e5:6b:a1:20:62:ee:53:d1:e1:bd:b6:38:82:
                    4b:20:42:2a:8b:30:3f:b0:85:31:7d:ec:5a:5c:f7:
                    a4:e4:bf:85:cb:2a:a1:0f:cf:93:79:35:de:f2:8c:
                    f1:50:c6:25:43:a9:47:c2:c4:f3:55:a7:13:a9:f1:
                    63:76:cf:a1:80:cf:04:2b:13:26:e6:76:55:9d:02:
                    c4:84:1d:cb:af:3d:0f:ee:52:19:ee:89:50:e8:64:
                    b6:53:db:4d:c1:01:d3:57:c4:6e:b6:9c:96:18:db:
                    2b:4e:d2:86:b5:5b:2f:07:84:22:4f:ba:d0:21:aa:
                    98:dd:15:9a:d8:97:a7:e9:7c:25:8a:aa:55:3e:7e:
                    e4:a5:c8:75:44:30:a8:cc:0c:3c:36:0e:61:58:e2:
                    d4:be:2b:a6:a6:37:08:69:70:83:7e:c4:9a:f6:f8:
                    e7:8d:7a:6a:cd:b9:24:68:d0:be:23:77:8d:43:ed:
                    39:6e:6e:89:99:64:d2:62:a9:9b:11:69:21:e0:51:
                    5b:96:88:6c:f8:5a:09:9b:4e:8e:92:92:33:57:60:
                    63:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1A:81:7A:0A:0E:B0:5D:7A:C9:23:80:32:0F:35:FB:DA:CF:75:9F
            X509v3 Authority Key Identifier:
                keyid:8C:3A:73:A3:F4:E7:E3:89:1D:0D:C6:F8:E4:5F:E4:7C:B0:3D:85:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C3A73A3F4E7E3891D0DC6F8E45FE47CB03D8521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137352e302f32342d3234203d3e20323731353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:bc:13:74:ec:db:c5:fd:1a:7d:0d:08:88:5b:75:dd:ad:82:
         50:65:14:82:f5:29:8d:5b:91:87:c8:a7:61:bc:98:2e:20:f7:
         97:40:e4:4a:c3:5f:9b:aa:6c:01:b5:68:64:2e:e3:d5:25:06:
         87:d8:c0:bb:db:0f:b7:fe:45:43:e3:78:94:9f:ed:24:52:0d:
         39:49:f0:c6:be:6f:56:df:02:67:45:ee:69:41:f0:f8:eb:da:
         c5:1c:f3:16:ab:19:bf:d1:a0:98:ca:d6:52:bc:9f:82:cb:ea:
         51:9e:40:1d:27:14:70:9f:b1:45:7e:6c:6c:9a:ce:85:ee:11:
         bf:1c:3c:f6:6c:57:1d:16:d3:9f:c1:26:1c:7b:c5:af:39:33:
         8b:ef:f9:c0:2b:30:29:95:20:33:dd:bf:60:2a:f6:b8:0b:7d:
         7c:77:6e:3c:ca:ff:ff:75:56:f5:9c:9c:78:a2:c9:86:b1:40:
         fc:5e:a2:c2:55:39:7c:ce:61:0a:fe:51:1b:0b:20:46:18:02:
         8f:f4:6c:a8:f3:a1:2e:52:b5:e3:da:e8:33:82:c6:b8:ae:e0:
         4d:70:a8:35:00:76:07:3f:68:b7:4d:d5:3f:73:5e:fc:01:b0:
         11:4d:aa:00:1c:14:7e:14:aa:35:7a:e3:49:ab:e4:2a:3c:b5:
         74:37:85:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:48:38 2025 by rpki-client