Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32322d3232203d3e203532353936.roa
File:                     3137392e3139312e34382e302f32322d3232203d3e203532353936.roa (raw, json)
Hash identifier:          YgGWnxKhxzXFKXbYQiuqdaMRlK7brEEJI7rYuQXBXLw=
Subject key identifier:   BD:A8:3D:02:FB:E4:06:E0:92:3E:52:D4:7B:F6:20:90:0D:4C:53:9E
Certificate issuer:       /CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
Certificate serial:       496BC660F68A4FE2B1BAB7C6DA9F4345321A3760
Authority key identifier: 35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32322d3232203d3e203532353936.roa
Signing time:             Mon 03 Feb 2025 20:16:41 +0000
ROA not before:           Mon 03 Feb 2025 20:11:41 +0000
ROA not after:            Mon 02 Feb 2026 20:16:41 +0000
asID:                     52596
IP address blocks:        179.191.48.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6b:c6:60:f6:8a:4f:e2:b1:ba:b7:c6:da:9f:43:45:32:1a:37:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
        Validity
            Not Before: Feb  3 20:11:41 2025 GMT
            Not After : Feb  2 20:16:41 2026 GMT
        Subject: CN=BDA83D02FBE406E0923E52D47BF620900D4C539E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:82:92:5e:dc:29:6d:e0:d7:81:83:0f:ec:
                    4e:de:ac:3f:cc:8c:b9:f2:7a:bb:72:2b:97:04:f8:
                    25:4b:57:ff:68:b9:16:9d:38:db:2c:b9:5c:15:f0:
                    b5:ef:45:07:78:05:6d:c8:57:1b:7a:89:ba:56:20:
                    f0:94:a3:28:d0:d4:fb:5e:19:5a:5f:6e:e4:d5:7a:
                    cc:f8:c3:6e:77:55:aa:b2:70:66:2f:9b:40:0c:55:
                    4a:64:a3:5e:ad:dd:6e:c4:b0:d4:72:0f:53:63:6b:
                    3e:4a:29:70:c1:8b:e5:c1:1f:86:34:92:4d:75:1a:
                    7d:36:16:cd:6f:58:95:55:d3:8a:61:95:7b:52:0c:
                    b1:c1:7a:b4:fe:95:34:30:53:7e:26:e7:37:ca:f5:
                    db:4b:7b:3c:bd:db:4d:28:85:6f:40:5a:fb:27:b6:
                    83:9f:96:6a:96:71:b2:f7:ee:a5:b3:fe:7f:36:0e:
                    32:a8:bc:a9:18:e7:68:3b:83:96:d9:70:d9:2c:8d:
                    89:c9:b4:31:be:f2:10:18:c5:73:ea:37:ea:bb:26:
                    d7:30:5d:83:e9:e0:65:5f:33:56:08:00:3e:ed:de:
                    9f:a6:b0:64:71:99:43:64:77:4e:e2:a2:51:37:2e:
                    23:71:84:39:1c:5a:ca:7a:39:d8:f8:6b:da:05:d2:
                    3d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A8:3D:02:FB:E4:06:E0:92:3E:52:D4:7B:F6:20:90:0D:4C:53:9E
            X509v3 Authority Key Identifier:
                keyid:35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32322d3232203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:3d:e5:a0:b7:36:29:8b:61:d8:00:e9:7c:fe:85:ee:ab:a3:
         62:23:72:bb:71:e8:a0:d6:af:03:3c:2f:5e:09:77:b2:1a:b6:
         b9:b2:12:05:43:e9:21:45:8f:92:af:53:f1:e8:de:d2:82:3d:
         73:56:1b:4d:c8:f5:ed:21:0e:44:ba:27:73:74:f6:f7:c4:22:
         a4:c2:e1:70:08:f9:c8:70:03:14:c9:f5:f2:62:13:0f:25:1b:
         19:67:9f:c8:30:48:2c:38:75:2f:6f:49:57:0c:86:e2:12:f0:
         d4:42:d5:69:30:b0:ae:23:ef:06:c6:37:fd:d5:03:5b:ae:3b:
         f5:f2:8d:36:7d:2e:72:7b:c6:22:33:e1:7c:f6:62:1c:cd:48:
         d1:d9:6d:dc:d9:8e:22:56:16:26:1e:ad:13:57:24:dc:4b:ac:
         41:e3:30:66:bb:61:da:9b:6c:2a:69:bc:91:1d:1a:16:45:05:
         3f:27:dc:f0:89:fe:61:2a:59:8c:d7:3a:74:b7:ba:ed:c7:6e:
         54:e3:8e:ca:07:0e:67:01:90:62:74:a9:bf:48:64:7b:f7:fe:
         d8:96:6d:f9:17:4d:47:28:4a:8d:2e:22:71:6e:1e:6d:85:43:
         18:3d:0d:81:68:7f:6a:d9:13:9e:c9:de:84:db:84:b2:c2:c6:
         73:ba:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:49 2025 by rpki-client