Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/3137392e34392e3234342e302f32322d3232203d3e20323731323230.roa
File:                     3137392e34392e3234342e302f32322d3232203d3e20323731323230.roa (raw, json)
Hash identifier:          fPEDZTFYUcBxdMjvdLTbN98ZaOluQLC1Z6wOsvZrGio=
Subject key identifier:   39:B5:EF:81:EA:A8:2A:7A:BB:E4:63:30:F4:FB:9C:FE:01:12:B2:9D
Certificate issuer:       /CN=6A9CDB21CBC72920359F90CB77FF7ECAFDAB0833
Certificate serial:       0A05510C8EE2EB96D745C100B8467248F50A7763
Authority key identifier: 6A:9C:DB:21:CB:C7:29:20:35:9F:90:CB:77:FF:7E:CA:FD:AB:08:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A9CDB21CBC72920359F90CB77FF7ECAFDAB0833.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/3137392e34392e3234342e302f32322d3232203d3e20323731323230.roa
Signing time:             Wed 09 Aug 2023 20:57:58 +0000
ROA not before:           Wed 09 Aug 2023 20:52:58 +0000
ROA not after:            Wed 07 Aug 2024 20:57:58 +0000
asID:                     271220
IP address blocks:        179.49.244.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:05:51:0c:8e:e2:eb:96:d7:45:c1:00:b8:46:72:48:f5:0a:77:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A9CDB21CBC72920359F90CB77FF7ECAFDAB0833
        Validity
            Not Before: Aug  9 20:52:58 2023 GMT
            Not After : Aug  7 20:57:58 2024 GMT
        Subject: CN=39B5EF81EAA82A7ABBE46330F4FB9CFE0112B29D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:4b:57:e8:99:02:9f:fe:f1:01:d3:4a:d9:
                    24:5c:09:39:70:b7:44:f0:1e:72:54:ef:44:bc:b3:
                    79:ac:53:a5:a5:f1:80:b5:77:65:89:46:ee:12:ea:
                    76:cd:7a:ab:34:0d:8d:63:f7:6c:09:10:09:54:d9:
                    5d:9e:16:68:f1:19:76:a8:51:67:93:16:a5:49:60:
                    f2:19:bb:bd:89:b2:3e:d2:2e:4f:f3:83:d2:90:e3:
                    39:e5:8f:8d:f2:dc:b8:fd:d1:4c:4c:f9:28:d4:18:
                    3e:bf:17:0b:6f:01:c5:0d:48:c5:c7:24:3f:43:14:
                    96:62:47:41:cc:5f:95:cc:db:35:9b:a3:85:53:cb:
                    d6:7e:65:5a:b2:f8:4b:3c:7c:92:f9:be:f6:68:19:
                    1a:be:d3:37:36:aa:0a:b9:24:64:42:e4:34:04:2f:
                    87:22:c9:f9:3b:7d:ba:d3:bf:14:5e:1d:a9:39:43:
                    40:a6:c2:91:7b:46:9a:7c:48:8c:45:70:d1:31:9f:
                    2e:c2:e0:23:b7:c7:f9:61:ad:17:72:b6:34:2f:f3:
                    11:c6:cc:ba:a7:f8:53:7a:36:62:d7:84:d9:cc:35:
                    b2:56:38:ac:e5:c6:c7:16:63:da:bc:60:16:ba:13:
                    0c:29:1f:42:a0:c1:26:c8:ca:d3:39:f1:4f:4d:dc:
                    63:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B5:EF:81:EA:A8:2A:7A:BB:E4:63:30:F4:FB:9C:FE:01:12:B2:9D
            X509v3 Authority Key Identifier:
                keyid:6A:9C:DB:21:CB:C7:29:20:35:9F:90:CB:77:FF:7E:CA:FD:AB:08:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/6A9CDB21CBC72920359F90CB77FF7ECAFDAB0833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A9CDB21CBC72920359F90CB77FF7ECAFDAB0833.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/3137392e34392e3234342e302f32322d3232203d3e20323731323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:a0:6d:22:01:ef:32:2d:3d:97:bc:2c:f2:31:f2:95:95:cb:
         72:72:0c:1a:32:8e:4e:dd:31:dc:59:2d:8f:79:48:da:64:d1:
         ae:78:14:28:d3:a0:78:74:a5:8c:e2:02:02:68:4a:2a:33:21:
         de:9f:10:6e:6e:d3:f3:89:40:be:f9:38:36:16:45:5c:d6:88:
         c8:81:af:27:f4:de:ba:8a:51:71:1b:77:78:8d:6c:28:e2:a9:
         19:d9:29:12:a2:6b:bd:9f:a7:78:16:80:11:c8:a1:89:c8:4b:
         07:92:4b:90:b9:97:5a:11:df:98:0e:77:cd:04:45:ed:7d:9d:
         84:77:f5:c1:d3:e5:95:3a:86:47:aa:38:93:c2:03:f5:a1:94:
         f0:39:f9:f8:57:ca:86:2f:89:1f:c9:4f:b7:73:76:42:bd:f7:
         48:be:29:fc:25:3a:ad:ba:47:31:2d:3d:8f:fc:a3:50:77:bc:
         b5:23:dc:b0:2c:63:91:a6:a3:48:f0:22:88:a0:e9:6e:36:14:
         f2:a9:d2:3a:01:8b:28:2d:f2:86:90:9f:dc:e8:5d:ba:63:25:
         8e:29:ea:7f:99:e9:ae:16:69:22:45:cd:2c:0c:de:61:d8:3f:
         1d:ad:de:41:a7:8f:8f:7d:5b:29:77:2c:44:28:14:6b:a0:fc:
         b1:72:a4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:00:49 2025 by rpki-client