Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32322d3232203d3e203532353936.roa
File:                     3137392e3139312e34382e302f32322d3232203d3e203532353936.roa (raw, json)
Hash identifier:          4b/g5hCFB7oMP2AXbUDInJDLMI8kvF1tKuz1kDrf6iw=
Subject key identifier:   CA:64:02:0C:E7:74:F1:63:25:E5:77:70:1D:3C:EA:00:38:F8:7D:3F
Certificate issuer:       /CN=01AC8DA5ED5081878802B288269F263B6EA0F002
Certificate serial:       2946AEB987297191392E844D67B9F29057D38256
Authority key identifier: 01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32322d3232203d3e203532353936.roa
Signing time:             Mon 07 Apr 2025 14:01:00 +0000
ROA not before:           Mon 07 Apr 2025 13:56:00 +0000
ROA not after:            Mon 06 Apr 2026 14:01:00 +0000
asID:                     52596
IP address blocks:        179.191.48.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:46:ae:b9:87:29:71:91:39:2e:84:4d:67:b9:f2:90:57:d3:82:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01AC8DA5ED5081878802B288269F263B6EA0F002
        Validity
            Not Before: Apr  7 13:56:00 2025 GMT
            Not After : Apr  6 14:01:00 2026 GMT
        Subject: CN=CA64020CE774F16325E577701D3CEA0038F87D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:89:3c:a7:7b:7d:9f:5a:0f:30:ff:9c:da:e9:
                    ac:29:54:d9:6e:6a:29:66:bb:04:f0:e2:a0:c6:1e:
                    0c:6a:0b:f8:79:56:6d:05:73:d9:63:71:33:f1:a4:
                    53:b8:56:6f:c2:9d:06:ed:d8:b3:5a:a9:57:c4:81:
                    18:4b:31:08:34:5b:ce:d9:6f:ba:87:74:2e:b9:59:
                    3c:ce:64:64:68:9e:83:53:ce:ec:86:8f:4a:1e:bd:
                    f7:8c:b5:02:94:58:2a:c3:aa:f3:46:3c:7d:a8:ec:
                    a4:9b:66:1a:ae:04:30:62:39:c4:18:34:b6:23:28:
                    66:09:30:c6:50:4c:5b:0c:fc:94:89:03:bb:8f:92:
                    c1:1d:13:95:c9:53:ff:3f:4e:01:c2:07:fc:a8:3d:
                    6f:68:2f:81:b7:7e:2f:01:7a:b3:fb:e1:8a:72:78:
                    c2:fa:bc:21:6b:44:5e:91:e4:04:63:c6:3f:b8:a4:
                    54:5a:4a:28:5c:37:83:d2:e5:e1:d3:b8:8a:63:9e:
                    05:b4:61:0e:c8:8c:a9:70:5e:f2:ea:db:3e:39:97:
                    0d:8f:2d:24:8d:4d:07:d4:19:f3:dc:89:cb:22:02:
                    02:36:4a:53:54:fc:b9:c1:f5:31:c8:8c:a8:46:ef:
                    1a:be:2d:57:8b:88:4d:d4:be:09:9e:c5:d5:60:bb:
                    15:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:64:02:0C:E7:74:F1:63:25:E5:77:70:1D:3C:EA:00:38:F8:7D:3F
            X509v3 Authority Key Identifier:
                keyid:01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32322d3232203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:64:71:19:f0:74:fa:1f:9a:d0:30:ed:85:07:30:30:50:c5:
         10:5c:d2:97:89:d9:75:5b:b4:e7:fe:ed:22:ff:e5:c0:ce:b4:
         63:11:ae:58:48:27:2e:b3:4a:78:54:eb:b1:75:79:ad:f5:7f:
         46:05:9b:78:bb:3c:83:8e:4a:28:09:f8:be:58:94:15:4b:d0:
         ac:76:c6:7f:eb:1f:45:b9:d6:01:b0:1d:7a:19:0a:67:b7:1a:
         ff:72:bb:a8:d8:82:47:a4:26:7d:c3:d6:6c:85:2a:14:1f:20:
         e0:8c:b1:f8:30:d2:bd:7d:9e:1b:44:5e:db:a1:f4:ae:f4:41:
         46:23:61:7a:41:01:65:13:0e:21:03:27:87:6a:11:1c:7c:63:
         b5:c7:7e:c5:39:4f:38:a7:98:0c:d7:2a:e8:69:c1:77:6b:14:
         0f:19:17:e6:37:02:47:39:6a:92:4b:c1:c0:f2:1a:0f:9e:f4:
         0a:17:50:ef:48:d1:dc:6f:a3:68:9b:27:b5:ff:e6:eb:22:e9:
         f2:d4:da:2b:40:77:42:85:30:f4:9a:85:3c:04:12:66:eb:87:
         bc:31:e4:89:93:f7:15:48:8c:d5:49:a6:9b:a8:81:b5:48:d5:
         fd:e1:50:35:db:7c:02:ac:da:2e:fa:28:84:03:72:e7:6d:4a:
         44:ca:55:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:50:42 2025 by rpki-client