Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138312e302f32342d3234203d3e20323636353036.roa
File:                     3137302e3234342e3138312e302f32342d3234203d3e20323636353036.roa (raw, json)
Hash identifier:          xECio/rCjQtfA05Eh2ffTwyoda3AAGKbqBik74jZLMg=
Subject key identifier:   79:B7:83:D5:88:8E:5F:5D:30:A4:91:85:C8:DE:B3:EC:13:1E:9B:F1
Certificate issuer:       /CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED
Certificate serial:       2CC81F0139E803E3F0BBF0A634186C55A2DA8088
Authority key identifier: 6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138312e302f32342d3234203d3e20323636353036.roa
Signing time:             Wed 05 Mar 2025 20:53:44 +0000
ROA not before:           Wed 05 Mar 2025 20:48:44 +0000
ROA not after:            Wed 04 Mar 2026 20:53:44 +0000
asID:                     266506
IP address blocks:        170.244.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c8:1f:01:39:e8:03:e3:f0:bb:f0:a6:34:18:6c:55:a2:da:80:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED
        Validity
            Not Before: Mar  5 20:48:44 2025 GMT
            Not After : Mar  4 20:53:44 2026 GMT
        Subject: CN=79B783D5888E5F5D30A49185C8DEB3EC131E9BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:97:e9:78:e8:4d:de:30:5a:b8:53:ed:56:
                    56:a4:0f:fb:16:ff:76:3f:a6:93:25:cb:e3:f6:8a:
                    45:fe:9c:25:ed:fe:86:ec:7d:1f:03:3c:15:68:60:
                    8f:8c:17:07:ee:e2:a4:98:e1:9b:5c:d3:fa:75:b7:
                    55:0b:b1:5a:a8:ac:60:74:e5:92:17:70:ef:7c:c6:
                    5f:b2:29:3e:87:fa:de:db:46:36:91:ea:8e:19:8e:
                    a6:a9:e5:d7:99:14:d9:6c:f6:6d:95:d5:86:5f:f2:
                    3b:7e:9d:ed:28:89:20:d6:47:17:9b:31:02:62:68:
                    e2:d4:61:fa:6d:45:9a:ef:77:43:ea:12:35:60:9d:
                    11:08:56:f6:df:da:a7:9e:bd:96:a5:b1:be:e1:c1:
                    0d:5e:78:3d:70:1b:24:2f:3f:33:b3:00:e7:95:b4:
                    84:fe:95:a6:da:88:ba:90:9c:87:79:ad:17:da:9b:
                    ad:5f:f3:df:68:9d:97:42:a1:a5:c1:aa:3c:c2:33:
                    89:e4:9f:73:4d:a1:2c:43:ba:54:79:15:57:b9:99:
                    d2:68:71:b3:6d:45:bf:de:e7:18:32:e2:9a:64:b2:
                    f9:2a:b7:d1:91:6f:ef:e6:51:c5:24:c1:3e:0d:63:
                    4c:48:42:f9:f2:68:b0:98:3d:d1:b7:85:53:9e:e9:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B7:83:D5:88:8E:5F:5D:30:A4:91:85:C8:DE:B3:EC:13:1E:9B:F1
            X509v3 Authority Key Identifier:
                keyid:6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138312e302f32342d3234203d3e20323636353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:e2:ae:a0:0e:8d:f1:fa:23:ff:9b:e0:19:4b:5c:a2:b1:7e:
         af:47:5c:38:ee:32:31:8f:33:65:c1:bc:e5:0e:99:43:3f:59:
         9d:b4:73:92:3b:1e:ea:7d:b4:ca:d3:34:23:d6:81:67:13:cd:
         86:81:0b:bd:b2:49:55:f9:41:35:cb:f3:33:b5:ee:91:ac:7b:
         91:24:61:61:91:94:7f:41:ff:f7:21:dc:76:c9:3e:a7:d2:be:
         28:8c:43:8b:f6:eb:47:8a:89:98:5d:72:dc:70:36:ae:a4:ce:
         39:1b:6e:76:de:ac:0f:84:23:10:d1:2e:24:38:ca:94:16:a8:
         fe:22:77:56:0b:1e:8f:8b:89:8f:06:3a:42:c3:0a:76:16:cd:
         c9:0b:4b:79:79:c6:73:f1:87:4b:2f:9f:2e:94:71:20:14:b8:
         24:de:39:b5:8e:cf:99:04:b6:31:d1:2f:19:57:dc:c8:9b:b7:
         7f:74:9c:a1:6a:42:72:69:31:1f:d8:f7:b7:37:4d:d7:6f:ed:
         13:ac:76:1b:30:26:46:d9:a2:f3:a4:20:f3:b7:52:10:03:d6:
         06:84:07:6c:ff:42:09:ec:ad:d3:ef:08:af:8f:98:c6:f5:be:
         e8:e8:5a:d0:79:a3:55:b7:e5:49:ad:2d:af:06:0d:51:64:ea:
         10:4e:5d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:34:06 2025 by rpki-client