Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBVXyuX6D8eE3FUAB97qDMCeiaWvxJ9HbptK7txek33N/0/3137392e34382e3233372e302f32342d3234203d3e20323731303539.roa
File:                     3137392e34382e3233372e302f32342d3234203d3e20323731303539.roa (raw, json)
Hash identifier:          0EmzPnHII5PR0nncD7goqU1UB5ScdKpFzu4QWknNFug=
Subject key identifier:   E8:AE:46:69:4D:EA:9F:72:4A:B2:3E:46:85:F6:31:2F:5B:58:C2:FA
Certificate issuer:       /CN=29A77F8F885A2F253F4307C78B11CC052A9ADA14
Certificate serial:       345EDA6939E87D4BC6586E60ED2136F6747A4255
Authority key identifier: 29:A7:7F:8F:88:5A:2F:25:3F:43:07:C7:8B:11:CC:05:2A:9A:DA:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29A77F8F885A2F253F4307C78B11CC052A9ADA14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBVXyuX6D8eE3FUAB97qDMCeiaWvxJ9HbptK7txek33N/0/3137392e34382e3233372e302f32342d3234203d3e20323731303539.roa
Signing time:             Tue 05 Dec 2023 16:40:02 +0000
ROA not before:           Tue 05 Dec 2023 16:35:02 +0000
ROA not after:            Tue 03 Dec 2024 16:40:02 +0000
asID:                     271059
IP address blocks:        179.48.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5e:da:69:39:e8:7d:4b:c6:58:6e:60:ed:21:36:f6:74:7a:42:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A77F8F885A2F253F4307C78B11CC052A9ADA14
        Validity
            Not Before: Dec  5 16:35:02 2023 GMT
            Not After : Dec  3 16:40:02 2024 GMT
        Subject: CN=E8AE46694DEA9F724AB23E4685F6312F5B58C2FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:84:44:6a:8a:6a:e7:8c:21:98:a0:30:7c:f4:
                    4c:3a:b2:ba:4a:8a:c5:43:62:63:cf:93:04:b3:50:
                    90:c3:18:24:c8:19:27:37:05:a5:d6:a5:cb:b6:17:
                    9b:de:b7:ca:f1:f2:e7:7b:08:98:2b:64:37:bf:a3:
                    02:63:a8:5c:2f:c4:d7:3a:00:0d:42:0c:37:ab:c9:
                    7a:82:b8:f2:b4:69:39:2e:5a:42:99:66:87:62:ea:
                    b3:f1:f4:13:b0:a9:e2:cb:2a:02:33:8f:bc:72:bb:
                    54:53:24:11:88:5a:71:23:c8:f3:3b:7b:4a:e8:eb:
                    d3:ff:91:26:6d:10:db:bf:5a:88:65:4a:38:07:64:
                    26:6e:de:bc:cc:d8:49:9f:73:11:65:36:c0:66:66:
                    dc:f2:2f:59:89:78:98:50:88:d9:71:b6:7c:33:df:
                    62:95:56:55:bd:50:25:7a:fd:61:55:98:c6:e8:8a:
                    ca:d3:b0:99:a6:aa:a7:db:ab:63:65:ad:bf:d8:03:
                    23:da:58:91:b0:b4:66:78:ed:80:ba:ed:e1:9d:bc:
                    2f:f6:58:0a:53:60:15:8d:db:2d:57:f8:46:c0:25:
                    a2:0b:34:43:73:37:f2:e0:f8:b5:9c:80:a3:36:3d:
                    65:99:ea:51:d2:e8:14:55:57:4d:bd:10:9c:13:d3:
                    2a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AE:46:69:4D:EA:9F:72:4A:B2:3E:46:85:F6:31:2F:5B:58:C2:FA
            X509v3 Authority Key Identifier:
                keyid:29:A7:7F:8F:88:5A:2F:25:3F:43:07:C7:8B:11:CC:05:2A:9A:DA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBVXyuX6D8eE3FUAB97qDMCeiaWvxJ9HbptK7txek33N/0/29A77F8F885A2F253F4307C78B11CC052A9ADA14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29A77F8F885A2F253F4307C78B11CC052A9ADA14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBVXyuX6D8eE3FUAB97qDMCeiaWvxJ9HbptK7txek33N/0/3137392e34382e3233372e302f32342d3234203d3e20323731303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:50:42:c6:a1:f0:fc:2d:f7:84:6d:f3:cb:49:85:0b:c2:db:
         18:d1:2b:d8:99:5e:35:ad:3a:a2:58:08:fa:3d:0e:23:1d:b5:
         66:e1:1e:af:57:5d:84:05:4a:e6:73:bd:84:ed:00:d9:48:03:
         fc:fd:fc:4a:7f:2a:0c:c1:6a:48:d2:fd:b1:08:91:b5:fd:eb:
         24:b1:01:83:16:d5:4d:20:25:03:62:79:82:e0:27:11:66:58:
         cd:ee:2b:51:bb:d2:a9:b8:5f:79:aa:12:1a:1e:68:e0:7f:86:
         c9:18:f1:20:6d:10:27:aa:54:c0:9b:8a:20:73:06:25:2e:62:
         fa:cc:90:e3:d9:d7:a6:45:bc:5c:55:6b:13:9b:64:81:27:4b:
         40:e1:57:bd:d7:6a:fb:65:5f:77:e9:8e:2e:25:61:d8:b6:81:
         79:b6:6c:e1:9b:d1:42:68:7e:31:97:83:aa:d0:31:a5:16:f8:
         94:1a:2b:5f:aa:30:93:e4:06:eb:8d:b8:ff:80:0c:14:cc:cb:
         45:8a:98:29:68:79:38:41:04:98:9b:fd:0e:00:bc:25:5a:51:
         27:f2:53:8a:17:05:46:6b:9f:b6:4a:b0:82:17:3a:25:fb:67:
         cc:ac:d2:27:49:ad:8f:52:13:20:f4:9d:db:f9:e3:80:2a:cb:
         e2:eb:bc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:53:14 2025 by rpki-client