Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e34322e3135302e302f32342d3234203d3e20323635303636.roa
File:                     3137392e34322e3135302e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          JZ9cccdyTeiV/uT05k4wALZFU6JWFhbXR104DxDc/ts=
Subject key identifier:   EF:E5:01:57:E8:1B:EF:39:CB:A1:0D:0E:24:66:6C:0E:4C:3A:AB:74
Certificate issuer:       /CN=6B7F9AA02EB21C2A9C3090165A06361CBE0662CC
Certificate serial:       27E4E1A33C06D5526C45CB673B79998B1136A95D
Authority key identifier: 6B:7F:9A:A0:2E:B2:1C:2A:9C:30:90:16:5A:06:36:1C:BE:06:62:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B7F9AA02EB21C2A9C3090165A06361CBE0662CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e34322e3135302e302f32342d3234203d3e20323635303636.roa
Signing time:             Wed 10 Apr 2024 20:40:13 +0000
ROA not before:           Wed 10 Apr 2024 20:35:13 +0000
ROA not after:            Wed 09 Apr 2025 20:40:13 +0000
asID:                     265066
IP address blocks:        179.42.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e4:e1:a3:3c:06:d5:52:6c:45:cb:67:3b:79:99:8b:11:36:a9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B7F9AA02EB21C2A9C3090165A06361CBE0662CC
        Validity
            Not Before: Apr 10 20:35:13 2024 GMT
            Not After : Apr  9 20:40:13 2025 GMT
        Subject: CN=EFE50157E81BEF39CBA10D0E24666C0E4C3AAB74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:67:a1:21:28:12:33:d1:76:46:e7:2b:9f:7b:
                    77:9e:1d:fa:86:c0:58:74:1e:2e:03:9e:9e:cc:bb:
                    6f:ac:75:53:a3:ab:5a:3e:05:7f:1c:fe:b1:d0:0a:
                    47:d7:4b:d7:d3:60:2e:da:ce:96:05:dc:f6:fc:41:
                    ae:cc:68:c4:2d:f2:fd:00:50:c1:57:30:b0:94:65:
                    b6:77:d2:0c:41:67:be:cd:16:a4:2b:ab:21:7b:83:
                    08:f3:e1:7d:3b:98:07:d8:62:52:32:67:02:e3:c3:
                    35:12:c0:60:38:d9:54:30:e5:73:73:a2:51:0e:09:
                    04:81:db:65:4f:93:84:cb:43:cd:32:58:cd:b7:ac:
                    1d:b8:9b:e9:db:66:b1:4d:dd:72:4b:c4:54:79:d2:
                    ff:ff:c4:cb:83:7f:39:c6:b9:68:63:f1:bc:e4:25:
                    e4:e8:af:ad:4f:52:18:80:82:23:a1:9f:41:09:4f:
                    aa:c6:bd:28:ad:cb:09:43:52:85:5e:59:e2:df:bb:
                    7e:33:bb:b3:1c:ed:c2:27:11:66:ed:e9:21:1a:76:
                    88:86:9d:34:29:4f:f1:6d:18:7e:0f:42:4d:06:7e:
                    cf:84:95:ce:01:11:f0:f9:c6:fb:2f:87:31:bd:50:
                    d5:cf:7b:f5:20:e7:b9:9a:78:d4:67:18:19:f9:59:
                    c0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E5:01:57:E8:1B:EF:39:CB:A1:0D:0E:24:66:6C:0E:4C:3A:AB:74
            X509v3 Authority Key Identifier:
                keyid:6B:7F:9A:A0:2E:B2:1C:2A:9C:30:90:16:5A:06:36:1C:BE:06:62:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/6B7F9AA02EB21C2A9C3090165A06361CBE0662CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B7F9AA02EB21C2A9C3090165A06361CBE0662CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e34322e3135302e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:39:7a:40:77:a2:7c:f7:6d:7f:20:58:7d:32:31:59:02:b3:
         4e:54:ef:c7:a6:90:4a:25:a7:ac:94:fb:6a:87:1b:4e:b8:2c:
         b3:74:e1:20:f7:4b:1c:45:ba:09:b1:e5:63:60:d7:52:c3:7c:
         b5:f4:c8:71:10:4f:55:f5:83:22:2d:94:ae:d5:16:50:c0:8d:
         eb:15:07:14:15:97:69:8d:ae:7b:81:45:17:54:2b:40:18:82:
         21:1f:c2:56:ba:4b:ca:33:62:f3:63:1c:1e:35:14:47:89:17:
         05:f2:1a:69:77:67:38:7f:37:c6:43:ca:1c:c7:2b:7c:08:82:
         8e:6c:a7:05:d7:f3:32:4f:be:be:74:4b:df:b0:f9:4b:dc:c1:
         6d:fc:c0:3d:75:2d:82:cb:b6:17:aa:9b:b7:83:fc:ca:17:11:
         92:75:87:27:95:f0:17:d9:75:0c:09:f5:a1:4b:2b:42:d0:07:
         bb:8e:6d:ad:76:bf:78:c9:27:fa:d0:b3:50:dd:89:7e:35:27:
         9d:fb:be:9e:0a:c6:4f:0e:29:56:12:0a:c0:b6:bf:63:85:da:
         b1:22:59:df:f7:49:d1:84:6f:d9:43:27:48:ce:67:20:f5:3b:
         2a:ba:dc:c7:ae:48:9c:1a:7e:28:f2:75:aa:e8:5c:89:c9:18:
         87:a8:2a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:07:14 2025 by rpki-client