Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/0/3137392e39362e3137362e302f32312d3234203d3e203532363339.roa
File:                     3137392e39362e3137362e302f32312d3234203d3e203532363339.roa (raw, json)
Hash identifier:          XVNgosAVHz4mUEQocHgzf6rctQsH/o9l4eJJyqmw7qs=
Subject key identifier:   AC:59:EF:63:DA:6B:59:99:03:FD:F8:71:B6:CC:B6:3D:39:54:A7:D3
Certificate issuer:       /CN=D1093B85DBCF9DC2341A82B6E6D2BA0D0CB0F98D
Certificate serial:       1D9C8CE0DE86020AE25052E7DDA67D56607C0A84
Authority key identifier: D1:09:3B:85:DB:CF:9D:C2:34:1A:82:B6:E6:D2:BA:0D:0C:B0:F9:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1093B85DBCF9DC2341A82B6E6D2BA0D0CB0F98D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/0/3137392e39362e3137362e302f32312d3234203d3e203532363339.roa
Signing time:             Tue 01 Nov 2022 17:54:31 +0000
ROA not before:           Tue 01 Nov 2022 17:49:31 +0000
ROA not after:            Tue 31 Oct 2023 17:54:31 +0000
asID:                     52639
IP address blocks:        179.96.176.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9c:8c:e0:de:86:02:0a:e2:50:52:e7:dd:a6:7d:56:60:7c:0a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1093B85DBCF9DC2341A82B6E6D2BA0D0CB0F98D
        Validity
            Not Before: Nov  1 17:49:31 2022 GMT
            Not After : Oct 31 17:54:31 2023 GMT
        Subject: CN=AC59EF63DA6B599903FDF871B6CCB63D3954A7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:0b:f4:f3:f9:00:3e:a4:12:9d:7e:8a:e3:
                    4f:aa:05:2c:f9:6d:56:02:9a:be:b4:1f:aa:98:13:
                    14:84:c1:0d:2c:11:bf:65:4c:64:e4:1a:dc:58:ed:
                    eb:97:22:bf:48:74:29:fb:dc:36:3f:b6:94:1b:c5:
                    93:3a:d4:70:84:0e:ea:df:64:99:dd:95:fc:8f:7b:
                    64:55:74:42:20:5f:3f:4c:71:de:c6:90:00:dc:60:
                    4b:cd:ee:d8:32:ff:e9:68:42:3e:a5:d4:48:5e:fc:
                    de:18:2a:4c:8f:a7:eb:6b:7b:31:de:19:d1:b4:3a:
                    4a:2b:4e:d9:ec:a8:0f:31:28:29:72:a0:3e:c8:5a:
                    96:28:9e:7f:18:76:e3:41:f5:6d:21:b8:db:f0:5d:
                    77:4c:0b:74:e9:5b:f5:f9:c2:c2:82:ca:e8:b8:ed:
                    3b:63:f1:43:b1:a7:40:7b:cc:cf:0c:ca:83:22:09:
                    7b:8b:3d:2b:78:1a:cd:72:05:ab:ec:7c:5e:06:80:
                    cf:1b:9a:df:22:c1:20:51:ca:e0:71:20:1d:5c:0f:
                    b3:41:7a:c8:fd:48:81:a3:64:ee:59:47:f7:ab:43:
                    4a:e4:da:d7:8e:0e:50:d0:c3:b0:b8:06:9d:ad:b5:
                    a8:d9:c9:e0:fd:46:61:c0:30:8f:ec:b7:b1:78:99:
                    01:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:59:EF:63:DA:6B:59:99:03:FD:F8:71:B6:CC:B6:3D:39:54:A7:D3
            X509v3 Authority Key Identifier:
                keyid:D1:09:3B:85:DB:CF:9D:C2:34:1A:82:B6:E6:D2:BA:0D:0C:B0:F9:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/0/D1093B85DBCF9DC2341A82B6E6D2BA0D0CB0F98D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1093B85DBCF9DC2341A82B6E6D2BA0D0CB0F98D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/0/3137392e39362e3137362e302f32312d3234203d3e203532363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d2:f8:03:2f:bb:fa:74:0d:d8:75:18:39:2a:e9:f7:7f:e5:ac:
         7b:b0:45:7e:4b:55:c3:4c:40:d8:f1:6f:e3:99:63:7b:22:c3:
         31:6b:65:d8:ae:e6:64:83:af:51:30:d4:9a:f6:c7:c1:df:02:
         1c:0f:1e:ee:7f:21:03:c7:18:80:6d:7b:30:57:41:62:c7:1a:
         9e:a3:41:bb:22:db:1f:32:07:ef:59:0e:ef:1e:c1:e6:71:0e:
         3d:57:dd:c7:80:55:13:b1:69:26:68:f0:57:ee:da:58:92:41:
         73:14:95:7d:07:68:20:29:fa:36:03:3c:d1:f7:31:dc:6d:68:
         06:a6:11:fc:14:ba:89:7a:74:37:64:52:86:e1:05:a5:ee:e9:
         07:78:1b:77:e9:de:3e:bf:f9:22:f8:3a:0f:ea:a2:30:b7:1f:
         2c:8d:8c:74:14:af:ca:66:26:d8:e5:24:e3:00:7f:d0:85:b6:
         2b:f0:61:61:13:1a:4a:30:8b:fe:a4:0a:91:48:e2:ad:e0:43:
         b8:bf:c0:85:bf:25:16:74:1f:42:25:01:36:4b:f0:1b:56:07:
         54:11:14:b7:f4:96:b4:b7:14:d4:47:a2:1c:34:54:fa:09:1a:
         15:ff:70:3e:9b:82:12:ac:be:dd:f9:92:51:13:91:ad:ef:09:
         81:0b:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:10:50 2025 by rpki-client