Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137392e3138382e302e302f31362d3332203d3e203237373135.roa
File:                     3137392e3138382e302e302f31362d3332203d3e203237373135.roa (raw, json)
Hash identifier:          aik6shqY0E+e5rbWPzH1PL7yiej9gbvFqCDQrXciQCg=
Subject key identifier:   C9:AB:FE:08:64:A3:E9:9E:4D:99:90:41:F0:5C:9E:29:3D:70:D9:D3
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       15BE228B9865E83B63566E6239FFCBC81AD77405
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137392e3138382e302e302f31362d3332203d3e203237373135.roa
Signing time:             Thu 06 Mar 2025 01:31:13 +0000
ROA not before:           Thu 06 Mar 2025 01:26:13 +0000
ROA not after:            Thu 05 Mar 2026 01:31:13 +0000
asID:                     27715
IP address blocks:        179.188.0.0/16 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:be:22:8b:98:65:e8:3b:63:56:6e:62:39:ff:cb:c8:1a:d7:74:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Mar  6 01:26:13 2025 GMT
            Not After : Mar  5 01:31:13 2026 GMT
        Subject: CN=C9ABFE0864A3E99E4D999041F05C9E293D70D9D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:7d:bd:cb:e7:5d:2f:9a:b1:9b:69:a9:13:
                    7b:39:54:08:94:77:6b:24:58:6f:3c:aa:95:38:78:
                    15:22:f8:76:ec:db:8f:88:a2:36:62:fa:4d:04:04:
                    32:bb:25:1b:7d:29:fc:8b:92:83:bd:78:c5:3b:ab:
                    f3:de:d4:93:69:c9:d5:48:0a:75:b1:f6:d0:d2:ed:
                    69:0e:91:27:b9:8a:db:5c:22:35:44:9f:78:5c:dd:
                    71:95:b1:f5:1a:67:d3:1d:6b:7b:5c:1b:39:67:2b:
                    26:5a:ca:bf:28:5d:17:43:c4:db:99:7a:2a:05:72:
                    e6:97:a2:49:78:ab:0d:8b:d4:e9:d7:2d:75:1e:8b:
                    7c:9e:1e:57:2b:d5:06:aa:9c:97:00:8f:f5:94:51:
                    89:ac:ce:94:21:c0:35:a5:12:19:c5:6d:70:28:fb:
                    44:bc:2d:16:7c:28:b0:83:6a:76:6e:42:30:13:f2:
                    19:f5:7b:dd:f4:f2:d9:b6:27:f1:7e:56:e7:dd:f8:
                    d7:c9:72:cb:1e:b0:cf:ae:48:b4:ba:ea:32:7c:7a:
                    8a:8a:32:8b:ee:2d:39:5f:3e:bf:75:64:e9:24:61:
                    fb:62:58:2b:18:c0:68:d2:90:5b:52:12:bd:62:4e:
                    cf:85:88:91:6c:bb:fb:0e:ac:54:00:ba:20:6b:81:
                    f8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AB:FE:08:64:A3:E9:9E:4D:99:90:41:F0:5C:9E:29:3D:70:D9:D3
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137392e3138382e302e302f31362d3332203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.188.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a4:e2:f3:50:fd:be:27:67:5f:7d:ac:6d:d9:f6:0e:cb:e1:10:
         cd:84:98:1f:07:97:14:f0:f0:a6:50:df:cd:a4:cd:7f:3c:09:
         52:d3:60:cd:1f:7e:64:44:db:47:b7:31:77:04:5d:87:23:fb:
         4a:23:0f:ae:67:0c:de:93:fd:63:6d:ec:f7:cc:68:00:6a:a4:
         de:0a:3b:a1:f3:ba:70:d5:45:dc:54:3c:28:61:34:9f:38:ed:
         bf:67:de:a2:a4:99:c1:96:ba:e7:76:dd:18:0f:0c:55:c4:47:
         9b:a7:a7:48:47:cc:d8:4e:2e:93:a5:9a:f4:40:b1:10:43:e3:
         26:88:49:23:84:e7:7b:3b:07:d4:04:69:16:a7:8c:bd:bf:62:
         41:81:05:d2:3d:4a:7a:69:6e:3a:83:4e:54:b2:ed:ca:88:17:
         db:da:31:a7:24:09:c6:7c:14:6e:68:f8:da:ee:cc:ce:a0:6c:
         33:20:05:bc:b9:fa:3e:a5:f9:df:63:3b:98:a8:8e:05:e6:da:
         b8:97:18:3a:09:86:78:f9:75:c6:a0:eb:9b:e8:9a:e6:84:36:
         c3:b4:42:8a:85:4e:5f:8b:35:5f:a0:5f:ae:b6:99:3a:2d:06:
         7a:1a:94:db:a4:e9:5e:18:38:bb:6e:2d:cd:f0:fc:f3:9b:b7:
         a3:d2:5a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:05 2025 by rpki-client