Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/1/3137392e3139312e392e302f32342d3234203d3e20323635343430.roa
File:                     3137392e3139312e392e302f32342d3234203d3e20323635343430.roa (raw, json)
Hash identifier:          TA3O0h/WFT5MzFWc0h5Iu4f5Gh74L/T6CMHLC4Pe6uY=
Subject key identifier:   08:42:5B:62:BE:FA:50:2F:F2:18:FB:B1:0B:E5:36:5E:E5:04:C0:A2
Certificate issuer:       /CN=6582E4C6A5C5A7EC00B3D04AB9ED76420081A1A9
Certificate serial:       54CA3B868A72EED4F7BCEC3E013297C7C05BDF3F
Authority key identifier: 65:82:E4:C6:A5:C5:A7:EC:00:B3:D0:4A:B9:ED:76:42:00:81:A1:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6582E4C6A5C5A7EC00B3D04AB9ED76420081A1A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/1/3137392e3139312e392e302f32342d3234203d3e20323635343430.roa
Signing time:             Sat 16 Dec 2023 15:04:22 +0000
ROA not before:           Sat 16 Dec 2023 14:59:22 +0000
ROA not after:            Sat 14 Dec 2024 15:04:22 +0000
asID:                     265440
IP address blocks:        179.191.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ca:3b:86:8a:72:ee:d4:f7:bc:ec:3e:01:32:97:c7:c0:5b:df:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6582E4C6A5C5A7EC00B3D04AB9ED76420081A1A9
        Validity
            Not Before: Dec 16 14:59:22 2023 GMT
            Not After : Dec 14 15:04:22 2024 GMT
        Subject: CN=08425B62BEFA502FF218FBB10BE5365EE504C0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ec:6e:17:42:8c:6b:3c:2f:9d:ea:4b:26:b8:
                    85:a0:f3:aa:09:7c:99:03:e1:0e:d1:21:2d:b3:aa:
                    99:64:3c:ac:d4:b6:bc:14:87:95:21:b2:70:0d:6f:
                    ed:cc:d9:10:02:71:3c:4d:c3:6b:7e:ee:7d:26:ba:
                    8e:5e:e6:ec:83:bd:c6:50:91:a1:d7:36:a2:c1:de:
                    4c:e3:07:08:77:70:f3:b6:3b:1c:cb:f0:6b:44:d8:
                    4a:c9:70:29:54:e2:7a:b7:0c:ff:71:97:50:77:45:
                    cb:a0:ee:f2:59:dc:5e:9a:4a:ad:aa:f2:15:4a:71:
                    8f:9d:51:ca:f6:03:e4:b8:40:f3:9c:43:8a:7f:d7:
                    3c:0f:55:de:a7:33:e2:ec:8b:18:5f:41:d7:34:d4:
                    2d:a4:13:ac:19:a4:36:c5:07:11:a3:ba:d5:07:d6:
                    5c:83:2f:b4:c4:08:77:d7:97:ba:3e:21:c3:38:d4:
                    37:91:71:f9:1c:84:85:ca:b5:1d:a3:b1:1d:15:22:
                    5b:0d:7e:00:9b:bc:ce:b4:f7:9f:ab:03:b6:bb:6e:
                    7a:29:f8:cc:c1:bb:7a:86:0d:c5:1a:44:f2:eb:fa:
                    23:b9:59:1e:20:f8:36:1f:30:d0:23:64:0e:92:c8:
                    69:76:a7:ae:34:ab:2b:11:0f:c8:28:bb:73:28:dd:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:42:5B:62:BE:FA:50:2F:F2:18:FB:B1:0B:E5:36:5E:E5:04:C0:A2
            X509v3 Authority Key Identifier:
                keyid:65:82:E4:C6:A5:C5:A7:EC:00:B3:D0:4A:B9:ED:76:42:00:81:A1:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/1/6582E4C6A5C5A7EC00B3D04AB9ED76420081A1A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6582E4C6A5C5A7EC00B3D04AB9ED76420081A1A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/1/3137392e3139312e392e302f32342d3234203d3e20323635343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:d7:2d:e4:5e:64:8c:3e:ab:1e:c1:2a:8f:5c:5c:f8:d8:19:
         27:d1:68:d3:26:4c:cc:d7:26:bc:5d:ca:61:94:f6:af:72:ce:
         ba:be:4f:a4:15:b1:8f:cd:6a:0e:43:dc:78:8d:4a:20:92:98:
         72:5a:3f:55:42:3d:43:12:84:67:bc:83:4e:fd:53:98:d8:84:
         24:33:db:2d:9e:f7:4a:8c:8a:61:eb:92:d0:8e:20:e9:52:d7:
         6c:ab:1a:65:96:15:c9:2c:20:3b:71:8f:3e:94:36:66:d4:03:
         93:de:f2:a0:a6:c1:1c:0b:89:86:42:3b:43:2f:a2:c9:4a:3b:
         c3:78:dc:23:26:f3:b4:c5:d4:9e:42:85:2d:27:4e:b2:92:68:
         14:60:ff:ff:2b:88:0c:d6:f8:60:14:88:44:2e:a4:92:40:92:
         9e:d4:ec:4c:24:e8:46:1b:43:c5:f7:cf:ef:7e:b9:bf:a1:49:
         48:03:1d:cd:d0:02:17:99:85:c1:91:ea:88:f7:e4:06:0d:8f:
         de:c0:0b:7c:b9:2a:e7:c5:b6:1b:4d:b5:bf:4f:f5:02:9d:08:
         82:3d:77:b2:f0:a6:29:c3:d9:0b:dc:a2:94:75:84:0e:2d:62:
         ef:40:ec:b0:c2:a2:f7:15:fa:e5:bc:cf:2b:81:be:a0:e2:27:
         09:54:f6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:07 2025 by rpki-client