Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/3137392e302e3132342e302f32322d3234203d3e20323636343534.roa
File:                     3137392e302e3132342e302f32322d3234203d3e20323636343534.roa (raw, json)
Hash identifier:          5SPwCEprmyLNiSIGYlPpLgwkxnlXxcSdxfaD6SItz8o=
Subject key identifier:   02:95:90:30:83:18:25:CE:FC:3F:32:31:6D:FE:18:FA:C9:5B:34:05
Certificate issuer:       /CN=78A4A875BA6BBD81EBF95316342157431299CE88
Certificate serial:       224693F8FCE4A1828D0AA4D76E52A8240AFA1E9B
Authority key identifier: 78:A4:A8:75:BA:6B:BD:81:EB:F9:53:16:34:21:57:43:12:99:CE:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78A4A875BA6BBD81EBF95316342157431299CE88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/3137392e302e3132342e302f32322d3234203d3e20323636343534.roa
Signing time:             Sat 25 Jan 2025 16:03:59 +0000
ROA not before:           Sat 25 Jan 2025 15:58:59 +0000
ROA not after:            Sat 24 Jan 2026 16:03:59 +0000
asID:                     266454
IP address blocks:        179.0.124.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:46:93:f8:fc:e4:a1:82:8d:0a:a4:d7:6e:52:a8:24:0a:fa:1e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A4A875BA6BBD81EBF95316342157431299CE88
        Validity
            Not Before: Jan 25 15:58:59 2025 GMT
            Not After : Jan 24 16:03:59 2026 GMT
        Subject: CN=02959030831825CEFC3F32316DFE18FAC95B3405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:36:e3:b0:44:35:f3:bb:ae:ae:0f:90:48:6f:
                    75:81:55:d1:a2:eb:7b:7d:98:40:c8:79:8a:b6:e5:
                    19:61:45:ff:40:fa:f5:51:e3:41:ae:73:ff:19:37:
                    b6:a1:4c:62:7d:ce:e5:63:5e:c1:bd:1a:44:ea:3e:
                    1c:84:c5:5e:d9:e6:7a:14:2b:3e:11:09:c6:46:49:
                    39:5b:64:81:00:e2:b0:cd:f9:ca:98:ce:a3:bf:fa:
                    01:8a:ac:3e:2f:dd:8b:a0:32:f8:3f:79:c3:77:de:
                    0b:e9:6e:8f:ce:94:84:8f:54:85:09:b9:57:a6:7f:
                    1f:88:60:42:70:2c:0b:b7:2b:d5:78:83:ff:ce:8e:
                    d2:ed:ba:f4:2d:a7:0c:6f:13:43:72:ab:98:d2:24:
                    36:fd:2c:0d:08:c1:18:e4:4b:c9:cf:7c:cd:0c:d3:
                    76:a1:e0:6a:14:6a:71:a9:83:ac:89:a0:c6:c1:a5:
                    d1:11:d9:1e:93:62:2c:f6:c5:82:b5:09:23:26:3c:
                    1f:59:e8:f6:35:bb:ee:84:d1:d2:48:ea:02:37:6f:
                    ff:fa:67:ec:36:fe:60:e5:5b:77:d1:80:ec:92:79:
                    34:8c:56:69:3c:cf:3c:99:fd:c8:7f:4d:48:dd:0a:
                    e2:3a:ef:dc:89:fd:f6:51:c9:ea:87:5d:5c:d3:8b:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:95:90:30:83:18:25:CE:FC:3F:32:31:6D:FE:18:FA:C9:5B:34:05
            X509v3 Authority Key Identifier:
                keyid:78:A4:A8:75:BA:6B:BD:81:EB:F9:53:16:34:21:57:43:12:99:CE:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/78A4A875BA6BBD81EBF95316342157431299CE88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78A4A875BA6BBD81EBF95316342157431299CE88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/3137392e302e3132342e302f32322d3234203d3e20323636343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:48:2e:e9:a6:80:97:5d:cf:25:7f:47:a7:70:9c:c9:30:da:
         29:a0:87:ba:db:ae:4e:d3:71:a5:42:a1:4a:64:c3:e2:b8:37:
         ca:82:db:11:e2:32:9d:ea:89:b8:dd:6f:70:79:bf:73:50:e8:
         7d:45:e8:26:d0:dd:de:ce:69:99:74:8f:08:d9:60:d8:15:c7:
         1f:d3:45:c8:92:e4:ae:ab:c3:7d:f3:13:61:f6:1a:f0:6b:74:
         2e:59:3b:d4:10:d7:67:9d:81:af:f5:c1:be:46:4f:84:f1:65:
         ca:0b:57:12:34:9f:01:3c:eb:ff:81:34:fe:57:29:3a:d7:cf:
         a9:d5:df:54:45:ca:36:08:9d:ef:99:af:a9:ab:e7:cc:07:00:
         bf:75:d2:ca:8e:37:39:a8:37:9f:1f:bb:83:09:74:ae:77:9f:
         2d:4c:c9:2d:39:21:c8:9c:bc:2b:49:71:1b:ad:2d:4f:66:50:
         d2:d1:1b:bf:63:15:d4:75:40:c2:7a:49:4d:8f:0d:aa:fd:8e:
         fd:b6:b9:c8:88:81:11:00:33:8c:98:7b:b7:0b:32:24:e5:5b:
         1f:df:1a:af:3b:bc:83:8f:50:cd:66:26:9b:d8:73:3d:7e:7b:
         07:e3:91:ee:db:11:fc:a8:94:17:12:a5:95:7e:6d:86:2f:76:
         e8:8e:8a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:13:05 2025 by rpki-client