Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32332d3233203d3e203532353936.roa
File:                     3137392e3139312e34382e302f32332d3233203d3e203532353936.roa (raw, json)
Hash identifier:          1FQiFjH4BGfo5XgxY3SLYff2bgiLYcYNz2lj3pgf9z4=
Subject key identifier:   CE:F3:6D:83:E9:DD:AC:FC:86:A0:E0:7A:02:50:49:2E:7E:A8:85:35
Certificate issuer:       /CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
Certificate serial:       3BE3D9B0340C8B60B7FCB1D8D3F4F72F680AFD9C
Authority key identifier: 35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32332d3233203d3e203532353936.roa
Signing time:             Mon 03 Feb 2025 20:16:45 +0000
ROA not before:           Mon 03 Feb 2025 20:11:45 +0000
ROA not after:            Mon 02 Feb 2026 20:16:45 +0000
asID:                     52596
IP address blocks:        179.191.48.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e3:d9:b0:34:0c:8b:60:b7:fc:b1:d8:d3:f4:f7:2f:68:0a:fd:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
        Validity
            Not Before: Feb  3 20:11:45 2025 GMT
            Not After : Feb  2 20:16:45 2026 GMT
        Subject: CN=CEF36D83E9DDACFC86A0E07A0250492E7EA88535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:59:7a:c7:3e:c1:c6:f1:2d:da:d0:44:67:
                    67:8b:d3:cf:ff:0a:7c:4e:30:c9:ed:61:b1:7e:a9:
                    d0:45:b3:eb:1d:27:b8:e1:c3:9b:44:f0:85:86:67:
                    1d:5f:9d:bd:9f:67:ac:00:6c:e5:a2:e6:08:ab:52:
                    1a:03:61:d9:73:6a:17:0a:81:35:7d:95:08:22:cf:
                    c2:8c:9c:8d:1f:b0:4c:bc:45:3f:17:99:55:d2:80:
                    b3:ef:dc:1f:03:a1:8c:e7:ed:f7:d1:4d:ad:b9:1e:
                    17:6f:3a:81:21:2b:43:eb:83:c2:ff:1b:7a:a7:1f:
                    02:3b:39:c5:67:28:46:7d:c4:78:ed:bd:cd:fd:a7:
                    72:4b:7b:02:14:1c:5b:11:5f:d4:1a:29:25:97:26:
                    d7:9e:27:03:d0:bf:72:55:4d:8b:57:22:a3:5f:bb:
                    38:f8:6c:74:39:52:66:83:9b:c4:4e:93:89:c2:83:
                    0d:10:0b:d2:58:02:76:7c:cf:b9:f0:39:0e:ad:97:
                    90:36:62:c4:b1:77:00:2b:09:33:c0:b2:78:f3:93:
                    9e:e2:91:9b:e1:7c:21:21:8f:b7:a1:b9:77:1d:1c:
                    62:04:a7:17:3a:1b:93:24:74:d1:99:81:37:8f:3d:
                    87:54:06:97:ec:78:b7:be:ff:70:e5:75:18:ba:6f:
                    af:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F3:6D:83:E9:DD:AC:FC:86:A0:E0:7A:02:50:49:2E:7E:A8:85:35
            X509v3 Authority Key Identifier:
                keyid:35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32332d3233203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:f7:7c:71:2c:cd:02:b0:bf:39:3e:90:ff:76:9e:ea:2b:37:
         6a:61:a2:d7:85:21:99:a3:eb:c9:d7:3f:9a:c8:ea:2b:20:07:
         d7:fc:b7:d9:20:b5:d6:d8:c9:47:d5:70:84:44:56:6f:77:a1:
         f8:57:c5:73:07:51:a3:be:3e:27:1e:54:97:35:ae:b7:d2:fb:
         d1:50:ce:32:de:21:d7:f2:e8:87:5a:98:9e:d5:be:23:84:e6:
         32:8f:e7:f6:45:3e:15:88:53:95:35:a0:46:26:17:79:50:42:
         b7:73:f7:88:6a:87:7a:8d:32:82:ff:5a:96:37:7b:eb:d8:d9:
         48:96:8d:eb:38:4d:4f:f4:99:fc:94:ae:5a:09:09:7e:4f:c6:
         b7:b5:21:58:02:74:b0:f8:48:83:4a:a9:0c:6a:c0:16:71:a2:
         2c:32:62:f9:09:a9:f6:0a:a4:98:24:9d:21:6f:f2:f6:1d:20:
         6e:0e:45:26:a3:7b:81:18:df:1c:5d:a6:31:68:36:40:fa:b6:
         b6:d0:72:8b:f1:54:cd:9a:99:a4:9b:22:cc:7c:e7:d6:55:d8:
         86:04:b5:80:8c:c6:a7:84:91:ae:a5:53:51:4c:3a:e7:53:ce:
         0f:c0:cc:50:56:53:fb:98:f2:a7:8c:28:4e:ca:e3:d1:bb:4c:
         19:82:0c:a1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUO+PZsDQMi2C3/LHY0/T3L2gK/ZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU4RDM1MjYyODNCQUY4MUJGMzk0RkQ1RDUxQTlBN0M2
QTZENUUwMTAeFw0yNTAyMDMyMDExNDVaFw0yNjAyMDIyMDE2NDVaMDMxMTAvBgNV
BAMTKENFRjM2RDgzRTlEREFDRkM4NkEwRTA3QTAyNTA0OTJFN0VBODg1MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClyll6xz7BxvEt2tBEZ2eL08//
CnxOMMntYbF+qdBFs+sdJ7jhw5tE8IWGZx1fnb2fZ6wAbOWi5girUhoDYdlzahcK
gTV9lQgiz8KMnI0fsEy8RT8XmVXSgLPv3B8DoYzn7ffRTa25HhdvOoEhK0Prg8L/
G3qnHwI7OcVnKEZ9xHjtvc39p3JLewIUHFsRX9QaKSWXJteeJwPQv3JVTYtXIqNf
uzj4bHQ5UmaDm8ROk4nCgw0QC9JYAnZ8z7nwOQ6tl5A2YsSxdwArCTPAsnjzk57i
kZvhfCEhj7ehuXcdHGIEpxc6G5MkdNGZgTePPYdUBpfseLe+/3DldRi6b69fAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzvNtg+ndrPyGoOB6AlBJLn6ohTUwHwYDVR0j
BBgwFoAUNY01Jig7r4G/OU/V1RqafGptXgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmliTllac1NnTXEyd3pFeGh5ZXNRVEJ0aEVhSE5ISmE0OG1lb0ZwVWJm
V3gvMC8zNThEMzUyNjI4M0JBRjgxQkYzOTRGRDVENTFBOUE3QzZBNkQ1RTAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1OEQzNTI2MjgzQkFGODFC
RjM5NEZENUQ1MUE5QTdDNkE2RDVFMDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZpYk5ZWnNTZ01xMnd6RXhoeWVzUVRCdGhFYUhOSEphNDhtZW9GcFViZld4LzAv
MzEzNzM5MmUzMTM5MzEyZTM0MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzUzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBs78wMA0GCSqGSIb3DQEBCwUAA4IBAQCG93xxLM0C
sL85PpD/dp7qKzdqYaLXhSGZo+vJ1z+ayOorIAfX/LfZILXW2MlH1XCERFZvd6H4
V8VzB1Gjvj4nHlSXNa630vvRUM4y3iHX8uiHWpie1b4jhOYyj+f2RT4ViFOVNaBG
Jhd5UEK3c/eIaod6jTKC/1qWN3vr2NlIlo3rOE1P9Jn8lK5aCQl+T8a3tSFYAnSw
+EiDSqkMasAWcaIsMmL5Can2CqSYJJ0hb/L2HSBuDkUmo3uBGN8cXaYxaDZA+ra2
0HKL8VTNmpmkmyLMfOfWVdiGBLWAjManhJGupVNRTDrnU84PwMxQVlP7mPKnjChO
yuPRu0wZggyh
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:28:24 2025 by rpki-client