Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37362e302f32322d3233203d3e20323731333631.roa
File:                     3137392e302e37362e302f32322d3233203d3e20323731333631.roa (raw, json)
Hash identifier:          lwhzRHNrMGUAXzylAZFUH4GxhAISbMLLn2wrdRqMJdI=
Subject key identifier:   D8:FB:25:BB:3D:02:85:05:EE:62:37:B0:FF:BB:76:C5:E8:A9:49:66
Certificate issuer:       /CN=F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8
Certificate serial:       5E364E75AD647D9BF153331812B6998D384554D2
Authority key identifier: F2:2E:53:90:6E:36:BA:15:DB:A0:D8:E1:57:DB:4D:F9:A8:69:9A:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37362e302f32322d3233203d3e20323731333631.roa
Signing time:             Thu 13 Feb 2025 18:37:47 +0000
ROA not before:           Thu 13 Feb 2025 18:32:47 +0000
ROA not after:            Thu 12 Feb 2026 18:37:47 +0000
asID:                     271361
IP address blocks:        179.0.76.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:36:4e:75:ad:64:7d:9b:f1:53:33:18:12:b6:99:8d:38:45:54:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8
        Validity
            Not Before: Feb 13 18:32:47 2025 GMT
            Not After : Feb 12 18:37:47 2026 GMT
        Subject: CN=D8FB25BB3D028505EE6237B0FFBB76C5E8A94966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:16:f1:db:08:52:43:08:34:f1:3f:06:89:9c:
                    c2:af:8c:b9:8c:87:e3:b8:f5:8c:38:e5:5b:c8:93:
                    83:23:36:51:82:8b:ee:cb:c2:8a:76:9a:f7:3d:34:
                    07:06:38:60:c1:6e:b8:df:eb:f0:e6:70:4a:8e:e2:
                    ba:e1:43:f4:c9:e4:28:c7:c4:ee:d1:c1:39:44:4e:
                    11:3b:95:4b:01:a8:e0:5f:41:f9:74:3a:eb:48:d2:
                    b1:12:7b:ac:25:23:e1:40:e6:9d:a2:72:be:eb:4e:
                    f3:e5:e6:c4:36:56:69:48:37:ca:87:c8:58:d6:f9:
                    5a:d3:95:2f:51:c9:9b:d7:99:fa:2f:8d:a4:74:4b:
                    cf:6f:e9:97:e9:61:b7:19:ce:2e:49:c7:5d:83:d1:
                    57:72:03:9d:41:23:ea:b3:bd:9a:8e:61:20:2f:a9:
                    de:5a:89:78:d9:ad:8a:66:7d:b9:f6:7c:4f:68:a8:
                    81:a9:bb:9f:68:b2:34:23:ba:c3:d3:0f:8b:3d:23:
                    12:4e:ee:db:b7:38:ad:aa:40:ea:16:60:59:0d:18:
                    e1:88:13:9b:01:f6:5d:04:70:3c:cc:b7:13:94:66:
                    9a:97:74:ce:1b:43:da:6b:e6:3b:d0:4b:9c:c8:e5:
                    80:65:b2:c3:5d:74:b0:02:94:bd:ec:95:c4:75:fe:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FB:25:BB:3D:02:85:05:EE:62:37:B0:FF:BB:76:C5:E8:A9:49:66
            X509v3 Authority Key Identifier:
                keyid:F2:2E:53:90:6E:36:BA:15:DB:A0:D8:E1:57:DB:4D:F9:A8:69:9A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37362e302f32322d3233203d3e20323731333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:e9:eb:70:09:01:a6:61:8b:53:43:cd:84:47:fe:4f:c1:75:
         8a:da:73:70:4d:f7:be:2b:13:fe:40:2c:78:3c:5a:48:24:ab:
         91:de:d2:8e:45:95:4e:12:fc:8f:05:d3:00:32:62:c1:b6:87:
         82:ad:8a:d6:ff:36:f7:db:cb:c3:08:f5:c1:6c:f7:a2:8b:28:
         23:7f:31:15:f0:23:1b:40:d3:ce:c0:70:57:c1:4c:f6:b0:70:
         d5:82:51:d8:fe:0b:95:97:fb:9f:a8:73:3c:f0:52:42:ba:dc:
         ce:49:28:13:aa:b4:5f:00:d3:55:24:53:bc:08:fe:29:57:eb:
         8a:a6:69:2d:db:4e:b6:73:50:6b:f9:19:48:f6:61:a8:fe:23:
         5b:16:ea:59:c8:0b:bb:e7:bc:b8:a1:6a:2a:18:91:de:e6:4a:
         72:97:b7:4d:31:19:3d:af:6c:82:90:73:a3:47:44:94:08:f2:
         54:74:b6:00:e6:5a:96:f5:18:73:99:d0:da:d9:1d:5e:03:f7:
         67:60:e6:65:10:0f:44:20:bf:32:18:43:54:6b:88:28:b1:73:
         bc:1b:6f:28:47:79:e9:e8:a6:85:07:bc:a3:c7:af:b1:59:82:
         5d:5d:17:03:b5:fb:5a:eb:0f:de:f7:36:38:1a:0a:1f:64:1f:
         02:3a:8a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:27:19 2025 by rpki-client