Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230322e302f32332d3233203d3e20323636333034.roa
File:                     3137302e37392e3230322e302f32332d3233203d3e20323636333034.roa (raw, json)
Hash identifier:          jtea0vE8Zvg3OjOQA1lX63MmECCDruJpGomVH4EHDAE=
Subject key identifier:   9B:DF:C4:73:ED:83:86:9F:D6:3E:45:D7:42:BE:80:9B:13:B2:0C:D0
Certificate issuer:       /CN=4EF48600F37E79A912CA7BA866732DB82D2751EC
Certificate serial:       08160C045040E24B2F338C3029F9CEF3DF6A71D8
Authority key identifier: 4E:F4:86:00:F3:7E:79:A9:12:CA:7B:A8:66:73:2D:B8:2D:27:51:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF48600F37E79A912CA7BA866732DB82D2751EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230322e302f32332d3233203d3e20323636333034.roa
Signing time:             Tue 05 Nov 2024 14:56:23 +0000
ROA not before:           Tue 05 Nov 2024 14:51:23 +0000
ROA not after:            Tue 04 Nov 2025 14:56:23 +0000
asID:                     266304
IP address blocks:        170.79.202.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:16:0c:04:50:40:e2:4b:2f:33:8c:30:29:f9:ce:f3:df:6a:71:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EF48600F37E79A912CA7BA866732DB82D2751EC
        Validity
            Not Before: Nov  5 14:51:23 2024 GMT
            Not After : Nov  4 14:56:23 2025 GMT
        Subject: CN=9BDFC473ED83869FD63E45D742BE809B13B20CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:88:de:79:2f:a0:14:cb:56:00:9e:5b:da:
                    f0:b9:f1:6f:0a:3d:87:31:ab:b4:79:af:41:d9:14:
                    25:93:5a:76:28:05:bb:31:80:45:60:58:66:e4:c9:
                    f2:58:8e:09:a4:21:60:1d:2d:98:36:89:60:fe:d9:
                    95:1e:be:8a:d1:d0:51:52:2d:b7:bf:6e:c5:8f:a5:
                    77:79:ac:5d:f8:a8:67:a0:39:25:95:10:82:03:10:
                    cc:65:78:cd:83:4c:e3:bc:75:38:18:9a:2a:44:ff:
                    2c:18:47:9e:a2:01:40:1b:1b:91:f2:2e:c0:d5:20:
                    ea:bd:90:36:27:08:c4:e4:66:73:1c:c2:11:cc:f0:
                    15:59:fc:20:f3:e8:83:39:19:50:58:f3:7b:eb:5f:
                    c0:0d:e3:4d:7d:04:38:1b:21:61:06:de:a4:ac:02:
                    a6:a9:a0:53:bc:ad:be:11:54:d3:ea:f4:93:3f:35:
                    c1:69:d3:69:c6:ca:92:e5:6b:35:40:3d:83:75:bf:
                    35:71:71:1d:28:1d:fd:44:6c:4c:43:9e:cb:a1:24:
                    9f:7e:30:6f:df:13:15:7e:fe:a4:98:ff:e3:50:3a:
                    9b:6a:c5:52:bd:f0:0a:ce:93:5a:d8:0f:a7:d5:f0:
                    41:6d:88:98:6f:3d:9a:6b:20:4c:15:03:ce:ee:a9:
                    34:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DF:C4:73:ED:83:86:9F:D6:3E:45:D7:42:BE:80:9B:13:B2:0C:D0
            X509v3 Authority Key Identifier:
                keyid:4E:F4:86:00:F3:7E:79:A9:12:CA:7B:A8:66:73:2D:B8:2D:27:51:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/4EF48600F37E79A912CA7BA866732DB82D2751EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF48600F37E79A912CA7BA866732DB82D2751EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230322e302f32332d3233203d3e20323636333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:88:a1:11:4d:6f:ac:20:53:ab:56:94:76:b4:84:7f:a2:ef:
         c4:f9:de:e8:7f:7f:5d:a9:91:ca:2a:04:f6:1b:17:64:21:81:
         34:61:2c:eb:ee:5e:32:bd:1c:b2:a4:c1:7b:d9:6a:21:ab:73:
         a4:bd:9d:7a:0f:c6:29:b3:15:53:92:cc:30:a0:7c:28:c7:fe:
         d1:a2:05:19:80:91:cd:55:6b:3e:78:10:62:9e:04:5d:09:f1:
         1a:55:92:5e:4d:e0:5e:77:13:0b:b6:9c:ad:71:d1:85:d7:31:
         30:16:b6:98:bc:3a:64:eb:e9:40:d6:1b:ff:c7:91:e1:9d:25:
         39:f0:ed:bd:05:9b:eb:29:39:5a:1e:50:c8:65:3a:4b:bf:21:
         9c:b6:13:d7:74:63:05:7e:45:cc:f6:ad:7d:ff:ab:3d:bc:5c:
         06:7a:c9:4b:4d:bd:0b:b1:d3:be:f2:9c:c2:44:2a:00:58:75:
         76:17:b1:ff:0e:76:93:ef:29:00:58:62:73:9c:22:32:02:2a:
         b4:8e:3b:9c:66:55:81:24:eb:cf:02:88:fd:97:5e:72:66:24:
         d8:a7:b3:ef:57:fa:4d:01:d4:f0:4a:ae:6c:b8:a8:1f:56:a2:
         e9:eb:34:b5:3a:6e:3a:be:fe:bc:fb:ef:87:c4:e7:26:98:94:
         a6:4a:16:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:38:48 2025 by rpki-client