Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35342e302f32332d3233203d3e203532353936.roa
File:                     3137392e3139312e35342e302f32332d3233203d3e203532353936.roa (raw, json)
Hash identifier:          Pd7UkSPwB66qhzODZlHu2SFA/ZUWmNumDMikuFje+oA=
Subject key identifier:   A8:86:8A:28:24:77:42:65:DF:08:8C:3D:27:F4:D7:31:23:D9:7D:97
Certificate issuer:       /CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
Certificate serial:       414D4F13BAB87EEF9CD7BCCC77E6D8D77CB87F0B
Authority key identifier: 35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35342e302f32332d3233203d3e203532353936.roa
Signing time:             Mon 03 Feb 2025 20:16:40 +0000
ROA not before:           Mon 03 Feb 2025 20:11:40 +0000
ROA not after:            Mon 02 Feb 2026 20:16:40 +0000
asID:                     52596
IP address blocks:        179.191.54.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4d:4f:13:ba:b8:7e:ef:9c:d7:bc:cc:77:e6:d8:d7:7c:b8:7f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
        Validity
            Not Before: Feb  3 20:11:40 2025 GMT
            Not After : Feb  2 20:16:40 2026 GMT
        Subject: CN=A8868A2824774265DF088C3D27F4D73123D97D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b4:39:d9:1f:4c:76:6a:d9:ab:57:8c:53:d0:
                    00:f5:a5:60:50:2f:d8:85:63:0c:0a:d8:f5:0d:6e:
                    66:50:66:cf:ba:7b:1f:91:66:e8:4f:17:40:74:ee:
                    4e:00:85:a1:c4:64:76:3d:36:90:c5:ee:7c:e8:f3:
                    f9:71:3a:25:d3:1d:46:2a:86:6b:49:4f:3d:ed:ee:
                    76:ce:7d:8e:0f:39:39:74:81:cb:2d:a0:8e:c5:a1:
                    dd:8f:bb:24:d7:d1:0a:48:52:ea:9a:5a:ac:fd:c4:
                    f0:01:a5:e6:a2:ae:49:b2:94:a3:fd:54:f7:c4:ae:
                    f5:95:39:12:5c:e4:3a:d6:a1:bb:b5:af:c7:21:df:
                    ed:22:d7:e7:c6:b9:1d:05:50:76:12:a9:a8:73:96:
                    be:82:e4:79:90:af:a2:bf:cf:32:e1:a7:70:65:e5:
                    74:ba:43:00:ea:46:f1:19:a7:92:88:4a:62:8f:65:
                    c9:be:ff:71:3e:bc:71:3c:78:b0:d5:a3:af:45:f7:
                    22:96:18:74:a4:29:a8:73:45:7e:91:3f:93:e3:b4:
                    ba:2c:36:a3:c6:ba:2e:4b:12:dd:3f:24:ed:3f:39:
                    66:50:99:3a:8f:1b:67:b2:69:ee:35:52:71:c8:a7:
                    ef:3e:ac:60:86:e5:70:43:1f:0a:1e:82:49:cf:2e:
                    f7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:86:8A:28:24:77:42:65:DF:08:8C:3D:27:F4:D7:31:23:D9:7D:97
            X509v3 Authority Key Identifier:
                keyid:35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35342e302f32332d3233203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:65:65:fe:ec:bc:28:20:a7:22:7d:9d:39:14:e7:12:3f:93:
         11:ed:e2:88:01:51:b1:de:bb:5e:10:75:03:bf:04:d9:71:3c:
         f0:ef:36:aa:5d:87:89:1b:4d:04:2d:9d:54:ef:45:6d:c2:96:
         f2:ad:90:24:c4:03:09:cc:3a:ea:8a:ae:71:2d:f7:79:11:ac:
         7b:ad:bf:4c:2a:eb:b6:44:bc:6c:06:4b:82:9f:6e:3d:6c:24:
         0d:08:01:8f:ff:92:3b:1a:a8:20:2b:10:88:05:f7:ee:35:f5:
         3e:72:d8:f7:eb:39:b2:ec:bd:b6:97:5d:35:5c:a7:06:e7:de:
         6b:70:f6:14:8a:11:06:fb:30:84:55:f3:23:55:0c:33:09:a5:
         24:33:5c:cc:91:17:27:34:09:fe:5a:a5:a2:5b:04:ce:83:ac:
         a8:96:0a:cd:36:10:08:cb:e0:50:fa:44:56:f2:60:95:91:75:
         ea:3c:e4:8e:88:16:76:55:40:df:22:8c:dd:0d:d6:3a:31:31:
         4f:61:92:a9:64:9c:65:4e:31:68:60:1b:27:ac:6f:71:ad:20:
         fd:62:a4:0f:3f:14:33:66:b1:21:f7:23:00:1c:63:f2:60:89:
         61:9a:d4:a5:82:2b:6f:be:d1:5f:9f:fd:d8:8f:2a:4a:9e:0a:
         4d:06:0c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:12:51 2025 by rpki-client