Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137392e3132342e3133362e302f32312d3234203d3e203532393635.roa
File:                     3137392e3132342e3133362e302f32312d3234203d3e203532393635.roa (raw, json)
Hash identifier:          tRq4l/rYy6ms1HEEjAKzD7Vmo9EvUFZL+4S1OC/M7EU=
Subject key identifier:   F2:DC:58:13:DE:9B:A2:89:28:4A:1A:31:14:E7:BC:A9:E5:8B:56:E4
Certificate issuer:       /CN=3235A266D447CA3B72A35513BA9761F5805F23E2
Certificate serial:       7054A548E0C859D5C25D91BFEC1BDB148FECC2C2
Authority key identifier: 32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137392e3132342e3133362e302f32312d3234203d3e203532393635.roa
Signing time:             Thu 06 Oct 2022 19:09:14 +0000
ROA not before:           Thu 06 Oct 2022 19:04:14 +0000
ROA not after:            Thu 05 Oct 2023 19:09:14 +0000
asID:                     52965
IP address blocks:        179.124.136.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:54:a5:48:e0:c8:59:d5:c2:5d:91:bf:ec:1b:db:14:8f:ec:c2:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3235A266D447CA3B72A35513BA9761F5805F23E2
        Validity
            Not Before: Oct  6 19:04:14 2022 GMT
            Not After : Oct  5 19:09:14 2023 GMT
        Subject: CN=F2DC5813DE9BA289284A1A3114E7BCA9E58B56E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:90:3b:c3:36:92:b1:7c:2b:4e:a0:8c:7c:48:
                    1a:a0:d4:b8:fa:aa:1b:9d:07:12:f7:91:51:3e:7c:
                    02:f4:e5:55:c9:a5:dc:15:9e:ba:39:38:a9:d7:e1:
                    d0:b5:0b:2b:e1:56:01:a8:8d:dd:29:ed:88:cb:c5:
                    25:04:2c:8c:11:16:36:33:0e:2a:22:86:dc:f1:db:
                    12:29:70:9c:5b:6f:a6:63:d2:ca:87:5c:8b:12:ec:
                    2f:ae:fe:e0:d3:e9:d1:f3:cd:d2:5d:0b:d1:44:2b:
                    d8:4c:cd:53:ff:6b:e1:8c:06:ba:7c:20:25:81:14:
                    8c:7b:69:97:ca:b4:c7:5a:00:b6:9a:ad:46:d0:7a:
                    46:90:51:68:4d:86:6f:d3:95:ee:fa:69:ed:07:81:
                    6b:c8:27:09:84:2e:4b:0c:db:5a:30:54:d4:2f:b7:
                    1f:0d:b2:e9:37:87:bc:55:0e:8d:7d:89:f3:f8:02:
                    4a:c7:fc:c5:ee:ac:a3:1b:fc:b9:29:42:8a:03:61:
                    cb:2f:02:b1:47:d2:a8:f2:7d:b0:2c:c5:05:db:3f:
                    21:4a:ee:16:09:42:d5:fc:61:18:e4:a1:91:86:88:
                    b6:41:a1:98:88:f8:7d:24:31:e0:cb:bf:80:16:85:
                    36:6c:44:b3:2c:4e:6c:d3:44:43:60:5f:15:48:cf:
                    10:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DC:58:13:DE:9B:A2:89:28:4A:1A:31:14:E7:BC:A9:E5:8B:56:E4
            X509v3 Authority Key Identifier:
                keyid:32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3235A266D447CA3B72A35513BA9761F5805F23E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137392e3132342e3133362e302f32312d3234203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:bb:af:ca:f3:41:58:6e:02:95:cb:f2:92:98:e8:66:6f:18:
         02:bb:f4:fa:7a:25:fc:11:4b:7c:67:0e:bc:1d:18:5d:45:29:
         1f:f5:66:e1:63:1f:41:0b:3e:7d:f7:86:98:24:ee:b3:5c:46:
         96:c2:b9:27:3a:bd:ce:c8:34:3a:6b:cb:68:e2:89:15:7c:71:
         d6:52:eb:ee:37:51:b7:a0:f0:e0:c2:9f:43:70:4d:d9:d2:49:
         e1:07:c4:1f:24:5d:87:08:5e:c8:84:2f:98:55:41:5e:cc:4f:
         35:3f:80:ae:ac:b2:25:ee:c3:82:0e:1b:d3:56:0b:df:b6:3f:
         00:40:7e:1e:79:88:7d:07:d4:09:78:c9:27:47:11:0f:ff:9a:
         47:97:3d:e9:90:70:a9:4a:6b:4a:a6:02:c2:33:fd:3e:cf:99:
         a3:5d:7b:28:d3:8b:f9:d3:07:9d:40:cc:fd:8f:47:97:db:0c:
         0d:06:8a:0b:dd:fc:ec:ab:61:e6:4f:e7:97:67:a8:a1:2d:f1:
         74:0a:93:ea:19:6a:a7:23:88:98:23:fc:03:f8:3d:83:27:d7:
         68:d5:05:2d:7b:dc:96:9b:79:cd:b1:6a:af:b6:a7:7e:39:5e:
         6b:45:9c:89:dd:ab:a8:2e:1f:a6:82:c6:bb:ee:02:31:9a:29:
         93:7d:c5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:16 2025 by rpki-client