Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/3137392e3130362e36372e302f32342d3234203d3e203532353235.roa
File:                     3137392e3130362e36372e302f32342d3234203d3e203532353235.roa (raw, json)
Hash identifier:          eaxK2tIXSgWrt7iRqdk5E/cckWAbTafHNK75beaOgV8=
Subject key identifier:   0F:56:AB:E6:96:86:92:82:0C:18:4B:3F:D1:72:1E:ED:1D:B9:35:19
Certificate issuer:       /CN=1C6016755CC52A3177ED1F706975750B6CD6C7A9
Certificate serial:       173B8A53681191543F26F6B470D8723F6F97E331
Authority key identifier: 1C:60:16:75:5C:C5:2A:31:77:ED:1F:70:69:75:75:0B:6C:D6:C7:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/3137392e3130362e36372e302f32342d3234203d3e203532353235.roa
Signing time:             Mon 18 Dec 2023 18:07:26 +0000
ROA not before:           Mon 18 Dec 2023 18:02:26 +0000
ROA not after:            Mon 16 Dec 2024 18:07:26 +0000
asID:                     52525
IP address blocks:        179.106.67.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3b:8a:53:68:11:91:54:3f:26:f6:b4:70:d8:72:3f:6f:97:e3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C6016755CC52A3177ED1F706975750B6CD6C7A9
        Validity
            Not Before: Dec 18 18:02:26 2023 GMT
            Not After : Dec 16 18:07:26 2024 GMT
        Subject: CN=0F56ABE6968692820C184B3FD1721EED1DB93519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:1e:7f:a2:be:7f:ae:12:72:8d:19:a0:36:
                    5d:10:59:3f:f0:bc:d7:13:48:db:ab:c4:b1:b6:49:
                    fd:bd:53:de:7b:22:34:51:65:cf:4c:29:d1:8f:4b:
                    19:00:30:29:24:e2:41:2a:19:4a:36:0f:52:1e:56:
                    2b:bd:d9:51:5c:ae:8e:54:80:51:20:ce:b4:e5:9c:
                    cb:58:4e:cc:a5:00:55:06:49:67:db:94:8c:fa:c6:
                    f2:14:da:61:1d:b8:66:b6:85:87:b1:03:fa:bc:78:
                    36:c3:0c:ba:d5:b5:ee:a2:ec:18:7e:96:a0:8c:d8:
                    6a:8c:d9:b8:b1:e4:51:54:33:72:1d:48:8b:bf:2b:
                    9e:9e:e6:bd:bf:9b:3c:3a:15:8e:24:db:2e:db:65:
                    97:b9:16:a9:93:34:73:e9:7e:30:40:be:b3:be:7d:
                    f1:69:e3:5a:91:96:16:78:6d:71:61:ac:a6:4a:df:
                    0a:18:4c:0a:7a:f7:5d:c0:5a:3a:5c:44:3b:eb:58:
                    0a:c7:67:fe:3f:f1:07:94:85:4d:0c:db:6a:65:ef:
                    3b:b5:07:bc:1b:b0:ab:3f:7a:9f:f2:07:86:fb:2e:
                    b9:5c:14:d4:db:e2:62:dc:d8:99:9e:bd:9b:99:54:
                    08:5e:e4:e9:f5:63:9d:ce:da:73:51:e3:d3:f0:3a:
                    6b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:56:AB:E6:96:86:92:82:0C:18:4B:3F:D1:72:1E:ED:1D:B9:35:19
            X509v3 Authority Key Identifier:
                keyid:1C:60:16:75:5C:C5:2A:31:77:ED:1F:70:69:75:75:0B:6C:D6:C7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/3137392e3130362e36372e302f32342d3234203d3e203532353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:de:18:2e:e6:21:53:12:e0:6b:75:7e:89:f2:35:69:00:7e:
         ad:64:1c:2f:59:65:66:45:53:6f:e7:52:99:60:81:85:ae:15:
         d6:d9:8d:35:17:54:24:2b:e1:c7:db:ef:ca:4a:a3:fc:9c:88:
         7b:e4:d7:89:6a:64:8e:11:c7:55:c1:e6:44:c3:76:4e:87:c0:
         7b:4c:ab:de:11:db:c1:74:c1:25:05:d3:2e:ee:ea:ae:0b:41:
         1c:74:1a:6e:ac:ae:87:19:05:1c:2e:97:1b:ca:15:0e:1d:f8:
         a8:f7:1e:6d:37:27:59:47:42:1a:2f:25:4e:c2:24:e6:50:9a:
         48:24:41:99:96:c5:5e:06:07:f5:41:d8:3d:de:67:e8:91:9a:
         54:d6:d6:8c:e4:2c:d8:fb:ff:be:6a:69:03:e8:ff:7b:75:27:
         f4:17:51:f5:2e:1a:73:b6:d1:d6:b2:4f:4d:36:27:a8:8b:fe:
         76:de:52:73:63:b2:71:2f:90:fc:74:42:67:0a:47:68:a3:a1:
         06:6b:ad:1f:88:5e:77:37:a2:5d:b6:70:18:2c:f6:84:1a:69:
         8c:05:c6:1c:9f:b3:7f:8e:d9:6c:68:95:9c:d1:dc:80:2c:2a:
         79:ec:ad:8f:6c:a8:78:ec:c0:ff:7c:32:66:2b:9c:79:3b:1c:
         b3:3a:c8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:35 2025 by rpki-client