Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35322e302f32322d3232203d3e203532353936.roa
File:                     3137392e3139312e35322e302f32322d3232203d3e203532353936.roa (raw, json)
Hash identifier:          1hUcnq5NqBu4pGAUr2KZ9zjDKXesmmZcffr4ItGvdJY=
Subject key identifier:   CE:C5:1E:44:7A:8B:A4:C0:1D:8B:89:5E:A3:74:BB:C0:8D:3E:3E:50
Certificate issuer:       /CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
Certificate serial:       090119BD371C31CBC08EA860A4A49476D103DCF2
Authority key identifier: 35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35322e302f32322d3232203d3e203532353936.roa
Signing time:             Mon 03 Feb 2025 20:16:43 +0000
ROA not before:           Mon 03 Feb 2025 20:11:43 +0000
ROA not after:            Mon 02 Feb 2026 20:16:43 +0000
asID:                     52596
IP address blocks:        179.191.52.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:01:19:bd:37:1c:31:cb:c0:8e:a8:60:a4:a4:94:76:d1:03:dc:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
        Validity
            Not Before: Feb  3 20:11:43 2025 GMT
            Not After : Feb  2 20:16:43 2026 GMT
        Subject: CN=CEC51E447A8BA4C01D8B895EA374BBC08D3E3E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:02:f7:a6:c2:9d:5b:07:95:6f:f7:02:01:
                    44:9c:a2:f9:86:74:84:89:e6:0f:9e:31:41:3d:dc:
                    60:b9:b3:52:df:1c:74:e2:0e:df:d6:b3:47:64:7a:
                    f9:83:57:15:9f:c5:3a:5c:c1:df:35:f8:2c:46:7b:
                    43:33:5f:42:72:5c:ec:35:41:27:bf:94:53:8f:c5:
                    5a:e6:6a:ba:86:3d:d0:b0:48:d2:40:b7:db:b0:35:
                    a9:a8:36:8f:0b:16:a4:5f:3a:6e:c5:b7:77:6d:91:
                    ee:6c:68:45:28:4f:03:f3:30:e6:37:ef:c0:48:83:
                    5f:d0:bb:7a:7b:ae:67:8d:6f:e4:16:f3:f3:4b:3e:
                    c2:55:3a:bc:14:5e:d8:9d:5b:53:a4:e5:59:5c:87:
                    b7:aa:6b:cb:36:9c:cf:f5:7f:43:81:97:df:89:77:
                    d5:72:e2:5a:82:28:65:65:86:5d:80:1a:a3:c2:3d:
                    1c:75:a1:0c:c3:63:e6:64:8a:9c:c6:91:2c:b9:cf:
                    b9:43:07:c3:93:78:cc:4d:f3:cb:4a:52:79:52:b4:
                    7a:85:40:6b:54:f9:10:aa:be:97:5e:e9:4c:55:e0:
                    3c:21:49:13:5e:04:09:89:9e:61:ba:b2:5e:21:db:
                    62:cf:03:af:23:6e:b7:4c:92:8c:b7:8d:1b:be:f5:
                    10:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C5:1E:44:7A:8B:A4:C0:1D:8B:89:5E:A3:74:BB:C0:8D:3E:3E:50
            X509v3 Authority Key Identifier:
                keyid:35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35322e302f32322d3232203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:86:12:2a:27:47:e4:15:32:ca:35:ab:f5:bc:3d:b1:90:85:
         e4:13:4c:4c:f9:59:79:94:0c:61:9e:72:3b:02:8e:a7:d7:16:
         c1:75:56:ee:08:cc:d5:21:28:16:43:d3:84:d4:9c:3e:a3:46:
         46:b0:7c:14:0b:37:5d:81:4d:a5:65:68:b1:d0:5e:08:96:33:
         f7:6b:2c:1c:31:6d:aa:32:5b:04:71:3e:2d:0d:05:22:de:ac:
         9f:cd:94:5e:47:56:9a:7a:37:ae:71:7a:a9:10:82:3d:3a:58:
         0d:cb:cd:85:4f:5f:40:32:b5:7e:32:0a:1c:5b:ba:67:60:e7:
         b6:f4:66:7a:e6:a5:cc:f5:df:fa:d6:ed:55:74:2b:16:b4:8c:
         f8:49:85:7a:0e:4a:a0:de:10:9d:65:c8:c3:3a:03:d1:8a:d4:
         7f:6e:fd:ff:7d:1f:a3:d1:10:58:8f:43:56:8a:c9:65:f7:ae:
         68:29:7a:85:fe:6b:d5:2e:71:9e:c7:3b:aa:fb:34:84:3e:42:
         50:fb:9e:72:70:38:6b:26:ce:5f:62:5f:24:ba:7c:f2:45:9a:
         4a:46:8c:ba:2b:37:cf:47:f5:dd:66:ce:68:22:b4:90:00:3c:
         1e:d4:c8:1f:24:93:6a:a7:e5:ab:d2:7e:35:6b:a2:32:68:37:
         95:37:a9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:14:58 2025 by rpki-client