Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/5/3137392e302e37322e302f32342d3234203d3e20323731343433.roa
File:                     3137392e302e37322e302f32342d3234203d3e20323731343433.roa (raw, json)
Hash identifier:          sXZwkTggJkzEnZFcX4PbIKSmAXu7G0+9+73cBOoel/c=
Subject key identifier:   ED:9B:2E:C4:B8:9A:E0:D4:D6:CD:5B:DA:8D:92:B4:B6:9A:D5:60:DA
Certificate issuer:       /CN=953C20849494211C871ED33EC10446FED42AF4C7
Certificate serial:       33EB77DC33D0B14E8FF9453BA03706FFBD41EFF9
Authority key identifier: 95:3C:20:84:94:94:21:1C:87:1E:D3:3E:C1:04:46:FE:D4:2A:F4:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/953C20849494211C871ED33EC10446FED42AF4C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/5/3137392e302e37322e302f32342d3234203d3e20323731343433.roa
Signing time:             Mon 17 Oct 2022 20:32:43 +0000
ROA not before:           Mon 17 Oct 2022 20:27:43 +0000
ROA not after:            Mon 16 Oct 2023 20:32:43 +0000
asID:                     271443
IP address blocks:        179.0.72.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:eb:77:dc:33:d0:b1:4e:8f:f9:45:3b:a0:37:06:ff:bd:41:ef:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=953C20849494211C871ED33EC10446FED42AF4C7
        Validity
            Not Before: Oct 17 20:27:43 2022 GMT
            Not After : Oct 16 20:32:43 2023 GMT
        Subject: CN=ED9B2EC4B89AE0D4D6CD5BDA8D92B4B69AD560DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:87:7c:86:53:eb:61:84:cf:c4:79:f7:e4:93:
                    9c:16:aa:25:71:ff:28:f0:f3:41:e8:9c:b1:aa:68:
                    79:9f:9d:3c:09:49:ba:12:2e:52:9c:c2:9c:0a:aa:
                    a1:5e:41:f1:80:fe:8e:13:dc:ca:a7:2e:39:63:24:
                    53:0b:af:f1:62:c0:f0:8c:6d:f6:ab:a7:20:ed:36:
                    04:27:ff:a2:5d:c4:e9:e3:6a:8f:d4:b7:b9:92:3f:
                    ff:90:9c:20:4e:c0:15:c0:bd:68:77:a1:8b:52:28:
                    77:19:4a:91:ce:80:dc:d2:7f:a6:26:90:2d:5c:14:
                    43:d7:04:58:b9:7a:61:30:bc:8a:56:ac:7e:7f:be:
                    3e:64:48:85:33:c4:54:f5:08:d7:40:96:e0:73:ce:
                    78:27:f3:a8:bb:6b:d8:94:f5:b4:94:4c:58:39:9c:
                    ca:94:d9:e8:17:7f:79:9f:87:d6:c5:61:f2:55:d8:
                    1c:2e:80:96:3c:2b:a5:fb:88:50:77:65:b3:3d:6d:
                    dd:ca:43:74:32:f1:6d:c2:40:14:76:15:50:b2:99:
                    7b:c0:66:10:d9:4f:ff:bc:02:1b:b2:77:59:59:90:
                    9b:c3:ef:c7:7d:cb:68:4a:7e:78:de:ff:d2:ee:c1:
                    4c:4e:83:16:b7:ca:51:44:13:2c:35:b1:d9:05:09:
                    35:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9B:2E:C4:B8:9A:E0:D4:D6:CD:5B:DA:8D:92:B4:B6:9A:D5:60:DA
            X509v3 Authority Key Identifier:
                keyid:95:3C:20:84:94:94:21:1C:87:1E:D3:3E:C1:04:46:FE:D4:2A:F4:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/5/953C20849494211C871ED33EC10446FED42AF4C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/953C20849494211C871ED33EC10446FED42AF4C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/5/3137392e302e37322e302f32342d3234203d3e20323731343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:d4:d5:db:c7:e2:64:dc:6c:61:db:e4:46:2d:09:ed:39:0d:
         2f:cf:79:a1:40:26:6f:72:53:2c:f8:85:33:6c:c1:5b:fc:46:
         fa:9d:a1:0f:77:fc:c3:be:45:7b:b1:06:08:ba:cf:ea:7e:45:
         de:9a:0f:00:6b:e8:c9:fb:dc:69:7e:5d:07:f1:55:70:c4:d4:
         96:f0:ba:30:ee:fd:08:00:ae:05:9d:02:38:2a:5b:c4:f0:cc:
         3b:b9:16:c3:55:0c:39:3c:01:3b:49:09:d8:e3:f0:86:66:25:
         2b:75:8c:53:f2:15:4c:da:a3:6a:44:a3:3a:99:3f:b0:c8:69:
         88:e0:c2:c5:5f:fe:bf:04:a2:15:9e:78:d0:de:5b:d3:4d:ba:
         f9:1b:0b:dd:ae:1d:f3:fa:6d:a4:8e:23:4c:2f:ab:7e:c1:9d:
         1d:a9:64:19:3f:69:45:c6:2e:c7:46:73:fd:b4:c4:3f:e7:8f:
         45:6a:0f:34:33:13:3a:80:bd:b8:c9:ab:bb:f1:83:af:f2:a0:
         22:7e:56:e1:66:76:40:c4:cc:31:af:46:81:44:d2:4d:5f:50:
         c7:96:42:f8:66:3e:a3:93:c0:46:04:ee:49:c4:2f:43:65:0c:
         3e:b6:76:c9:5d:ad:7f:5f:95:f5:73:f9:ba:7d:45:2d:6c:9b:
         ac:eb:83:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:37 2025 by rpki-client