Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137392e34332e342e302f32322d3234203d3e20323632343137.roa
File:                     3137392e34332e342e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          VOUZ4abT12dF+8Z3Wo9b5GAz4Qh2gRcz9Y4w1mHI498=
Subject key identifier:   2C:D6:49:2B:69:2E:D3:24:37:94:10:B1:A5:58:98:50:2B:59:84:52
Certificate issuer:       /CN=EB846310FC1F1BA82FBB3923B2F76ED66DA86097
Certificate serial:       50278ADF7D9C122E4ED64143947C17991F379FE8
Authority key identifier: EB:84:63:10:FC:1F:1B:A8:2F:BB:39:23:B2:F7:6E:D6:6D:A8:60:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB846310FC1F1BA82FBB3923B2F76ED66DA86097.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137392e34332e342e302f32322d3234203d3e20323632343137.roa
Signing time:             Fri 23 Aug 2024 16:16:15 +0000
ROA not before:           Fri 23 Aug 2024 16:11:15 +0000
ROA not after:            Fri 22 Aug 2025 16:16:15 +0000
asID:                     262417
IP address blocks:        179.43.4.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:27:8a:df:7d:9c:12:2e:4e:d6:41:43:94:7c:17:99:1f:37:9f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB846310FC1F1BA82FBB3923B2F76ED66DA86097
        Validity
            Not Before: Aug 23 16:11:15 2024 GMT
            Not After : Aug 22 16:16:15 2025 GMT
        Subject: CN=2CD6492B692ED324379410B1A55898502B598452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:6e:63:69:ee:3c:2a:b1:fa:bd:34:2e:65:
                    dc:c3:22:2a:c4:f7:1f:ad:5f:8f:33:6a:ce:90:9e:
                    7d:00:f4:7b:58:ab:c6:18:8b:91:9f:2c:5a:ed:4e:
                    e1:ec:5b:ce:6a:89:76:24:0b:c7:32:35:fa:b0:2a:
                    40:51:69:13:8b:07:77:0a:c1:7b:69:29:f5:33:ac:
                    a3:38:9c:29:31:25:5d:9b:12:33:8f:7d:e2:bc:90:
                    5b:52:d5:47:53:36:ac:17:33:6c:4d:c7:01:e7:4e:
                    06:70:49:a4:60:5d:56:b7:52:47:84:8d:47:15:be:
                    4e:0e:8a:df:db:58:a6:7f:38:55:44:1b:99:91:be:
                    6f:87:e6:8a:88:0a:54:55:02:fd:17:55:bc:da:c4:
                    43:0c:3b:b5:12:ae:23:cf:52:62:2d:60:9e:d3:33:
                    2c:ec:f1:d3:13:37:34:67:36:3f:68:39:28:21:0b:
                    1b:b3:2c:2f:76:fc:74:43:31:fa:0c:a9:a6:01:15:
                    61:3e:7f:35:f6:78:f1:91:70:fd:b8:2b:64:fc:17:
                    e1:08:4f:6c:1d:b8:81:05:a9:93:7c:aa:e1:1a:a9:
                    0c:67:a4:74:84:40:03:37:99:bb:b3:48:01:43:8a:
                    63:a6:90:3e:3d:58:32:cc:21:bd:48:93:33:48:33:
                    da:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D6:49:2B:69:2E:D3:24:37:94:10:B1:A5:58:98:50:2B:59:84:52
            X509v3 Authority Key Identifier:
                keyid:EB:84:63:10:FC:1F:1B:A8:2F:BB:39:23:B2:F7:6E:D6:6D:A8:60:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EB846310FC1F1BA82FBB3923B2F76ED66DA86097.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB846310FC1F1BA82FBB3923B2F76ED66DA86097.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137392e34332e342e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:12:0b:f5:8b:e6:11:be:0e:ff:46:8d:9a:76:a0:45:d6:b0:
         99:ea:74:01:d1:ec:aa:fe:a0:70:53:51:43:75:25:a3:7d:d6:
         4a:8b:88:90:4a:04:12:98:aa:b4:6f:41:58:21:a4:20:5f:0c:
         eb:a5:10:20:42:8f:48:fd:27:a0:4d:49:e2:24:95:41:42:12:
         9d:0a:8a:3b:d0:9b:35:1d:e0:01:35:35:92:f5:56:06:56:cf:
         48:1c:b9:45:38:f6:40:97:19:5d:18:08:6d:b1:50:84:76:39:
         d7:a9:6b:c8:18:31:3d:af:8f:5b:54:f2:8d:73:15:0d:a3:82:
         19:00:fa:eb:97:73:50:2a:9e:6c:da:fa:55:25:10:c7:f3:16:
         73:74:f2:a9:52:82:5d:ec:f1:cd:b6:5f:fa:ee:20:7d:4b:e9:
         5e:63:0b:5f:32:48:ff:4f:4c:87:51:95:50:78:53:a1:c3:c7:
         e2:b4:26:82:73:67:3b:bf:61:5e:af:21:de:4b:c1:9b:94:83:
         6e:c3:9a:27:1c:52:0e:39:d8:1c:97:9c:95:17:0e:43:4b:f4:
         80:f4:47:ae:43:9c:ce:57:5b:a5:c8:42:ce:48:e9:47:cb:6a:
         3a:c9:50:da:e1:fd:68:b1:5f:51:53:28:ff:a9:48:43:50:9e:
         5a:fc:e7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:17 2025 by rpki-client