Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37382e302f32342d3234203d3e20323731333631.roa
File:                     3137392e302e37382e302f32342d3234203d3e20323731333631.roa (raw, json)
Hash identifier:          P9kFocfAonnQYKWJ1IVzx1FuboZIRrO3pfEgQcEMcYY=
Subject key identifier:   61:F7:C8:36:EA:15:61:9B:1F:6C:0B:D0:0A:8E:D3:A9:A9:84:D9:55
Certificate issuer:       /CN=F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8
Certificate serial:       3EDBB793CB6C8DD206466556D6BFD2CCD5ED849F
Authority key identifier: F2:2E:53:90:6E:36:BA:15:DB:A0:D8:E1:57:DB:4D:F9:A8:69:9A:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37382e302f32342d3234203d3e20323731333631.roa
Signing time:             Thu 13 Feb 2025 18:36:46 +0000
ROA not before:           Thu 13 Feb 2025 18:31:46 +0000
ROA not after:            Thu 12 Feb 2026 18:36:46 +0000
asID:                     271361
IP address blocks:        179.0.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:db:b7:93:cb:6c:8d:d2:06:46:65:56:d6:bf:d2:cc:d5:ed:84:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8
        Validity
            Not Before: Feb 13 18:31:46 2025 GMT
            Not After : Feb 12 18:36:46 2026 GMT
        Subject: CN=61F7C836EA15619B1F6C0BD00A8ED3A9A984D955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:06:cc:6f:5b:6e:ff:b4:86:19:f5:4e:ab:
                    bf:25:7e:0c:0e:44:2a:90:37:99:12:be:87:e6:85:
                    b4:ad:0a:b3:69:b6:5f:d9:eb:7d:ba:60:ee:6e:42:
                    56:0f:7b:96:36:55:9e:a4:0f:92:ae:ac:a3:f1:89:
                    ea:c1:26:b7:ba:6a:bb:f0:92:18:3d:a6:e6:94:c3:
                    5d:d1:9a:80:bf:64:ce:71:72:08:d6:7f:a8:8d:2c:
                    5f:c6:6d:bf:d6:04:6c:05:f8:73:c3:37:48:17:62:
                    9f:10:bb:17:ea:cf:d0:2f:78:3c:66:8d:82:88:f8:
                    fa:c5:c3:5c:99:6e:17:c2:78:e1:c7:7f:3e:63:ca:
                    75:f9:90:0e:38:b3:69:65:84:7b:23:29:51:b8:40:
                    2d:90:31:9d:a4:c4:ff:91:d5:02:fb:09:66:20:1f:
                    2e:c0:67:fd:25:49:43:2c:b7:6a:61:7c:32:c3:41:
                    73:eb:7d:82:ab:3d:e5:33:ef:16:02:ff:86:6e:4c:
                    9a:72:c1:fd:9d:55:8a:6e:ef:7b:0c:12:fc:63:0f:
                    bb:18:75:da:0d:03:5e:b8:2b:63:b3:9e:2b:72:d0:
                    6e:86:7d:f5:5f:61:39:99:7b:23:df:cb:00:f5:66:
                    25:14:9f:8a:40:d2:98:a3:a8:e6:53:0a:f8:81:12:
                    90:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F7:C8:36:EA:15:61:9B:1F:6C:0B:D0:0A:8E:D3:A9:A9:84:D9:55
            X509v3 Authority Key Identifier:
                keyid:F2:2E:53:90:6E:36:BA:15:DB:A0:D8:E1:57:DB:4D:F9:A8:69:9A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F22E53906E36BA15DBA0D8E157DB4DF9A8699AA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37382e302f32342d3234203d3e20323731333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:f1:2d:38:1c:81:f4:71:9c:51:4c:5a:f2:a7:15:3f:83:da:
         2e:a0:5e:d4:35:13:a3:81:95:b7:df:5b:2e:9c:da:6b:6b:4a:
         69:8f:76:8c:c3:02:2c:c1:b7:6b:21:98:28:6e:ef:48:36:a0:
         74:43:9b:1d:51:2f:55:cd:51:22:37:1f:d3:c8:a4:80:cb:de:
         bc:2c:ca:e6:bd:40:95:79:3e:bd:2d:0b:66:f1:50:48:e6:30:
         8e:13:8c:17:83:33:ef:d6:74:cf:6d:25:5f:9d:47:f9:4e:42:
         5c:c5:09:09:b7:9a:e4:52:d1:ec:1f:58:07:e9:7a:a5:61:c4:
         cc:c4:7e:b3:65:ad:7e:05:c5:3d:73:23:1e:d9:b4:a1:b6:60:
         e1:a5:36:6e:e6:4b:45:cc:65:56:49:74:6e:90:a9:81:55:61:
         1a:51:7d:74:8b:d8:a4:b0:9f:1e:f4:eb:5c:77:ce:32:80:f7:
         b0:e0:b5:ce:60:44:9d:da:9a:0a:59:59:72:d7:12:d5:2b:4d:
         07:65:5d:ad:1c:ee:0c:09:bc:b2:26:c8:fa:be:2b:46:35:b3:
         32:4e:6c:73:23:0f:67:a0:56:05:20:76:40:35:96:c6:f1:14:
         3e:74:cd:bd:82:e9:05:cf:16:22:dc:e7:35:56:b5:2a:bf:d6:
         bc:48:33:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 23:32:21 2025 by rpki-client on console.sobornost.net