Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39342e302f32342d3234203d3e20323731363132.roa
File:                     3137392e36332e39342e302f32342d3234203d3e20323731363132.roa (raw, json)
Hash identifier:          9vwL1A0cdNR8WOfwDjWjVpn4T6UCZS/HrTNy7xSWkzY=
Subject key identifier:   86:E5:F2:2E:26:CC:53:9E:73:DE:E6:50:3E:D8:95:44:56:67:91:CC
Certificate issuer:       /CN=365EB380D1AF8407FD93545D5B6D63209853804F
Certificate serial:       25DE905D20BB2E3D03FE4C88B44C68042F31AA68
Authority key identifier: 36:5E:B3:80:D1:AF:84:07:FD:93:54:5D:5B:6D:63:20:98:53:80:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/365EB380D1AF8407FD93545D5B6D63209853804F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39342e302f32342d3234203d3e20323731363132.roa
Signing time:             Fri 08 Dec 2023 21:35:29 +0000
ROA not before:           Fri 08 Dec 2023 21:30:29 +0000
ROA not after:            Fri 06 Dec 2024 21:35:29 +0000
asID:                     271612
IP address blocks:        179.63.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:de:90:5d:20:bb:2e:3d:03:fe:4c:88:b4:4c:68:04:2f:31:aa:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365EB380D1AF8407FD93545D5B6D63209853804F
        Validity
            Not Before: Dec  8 21:30:29 2023 GMT
            Not After : Dec  6 21:35:29 2024 GMT
        Subject: CN=86E5F22E26CC539E73DEE6503ED89544566791CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9c:bb:b7:72:05:e3:56:9d:19:27:30:18:e8:
                    f4:00:31:2a:40:fe:e5:a5:38:3f:92:d9:b9:06:2f:
                    05:00:6c:08:c4:f2:ab:10:f7:f5:19:7a:5f:f9:3f:
                    b5:9e:76:f1:4f:b8:d4:6d:df:b0:14:70:21:8f:5d:
                    9d:6e:c9:20:a4:32:55:45:6d:aa:39:e0:a6:aa:41:
                    d3:3c:c6:f6:21:91:92:40:6b:66:25:57:9b:bd:46:
                    91:cc:1b:f0:cb:44:a7:9c:ed:29:be:97:7d:19:88:
                    d6:a1:9b:db:dd:3d:1a:c7:96:c6:12:98:d6:c6:c5:
                    35:63:68:94:d5:c5:17:63:77:57:6a:c4:b9:3f:f4:
                    e4:7d:50:0f:3c:62:f1:c7:da:21:d4:be:f7:f4:95:
                    92:03:68:62:c0:16:cc:eb:9a:10:c5:41:1d:f3:94:
                    9b:e3:73:3e:3d:1d:17:60:27:f6:61:21:e7:43:b4:
                    95:07:14:e4:bd:b4:91:bc:60:ef:90:78:69:4c:dd:
                    03:2a:21:e7:b6:f8:8a:d4:15:f7:de:d6:55:b3:85:
                    09:30:a5:e9:1f:c0:08:d1:29:ac:9e:27:81:45:cc:
                    86:7a:89:6b:df:d6:a7:0a:53:a2:05:49:96:2f:76:
                    6f:75:bd:9c:b3:37:8f:61:00:c0:db:a9:a7:a0:6c:
                    8c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E5:F2:2E:26:CC:53:9E:73:DE:E6:50:3E:D8:95:44:56:67:91:CC
            X509v3 Authority Key Identifier:
                keyid:36:5E:B3:80:D1:AF:84:07:FD:93:54:5D:5B:6D:63:20:98:53:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/365EB380D1AF8407FD93545D5B6D63209853804F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/365EB380D1AF8407FD93545D5B6D63209853804F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39342e302f32342d3234203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:b9:8d:28:32:b9:56:3d:1e:8d:d0:22:7e:fb:0e:43:87:f5:
         dd:87:9e:57:4d:4c:a3:68:44:40:66:d2:96:ef:a4:34:9f:c7:
         3e:e5:90:c5:06:08:aa:80:0f:91:ce:4c:75:bb:8b:72:14:98:
         2b:25:94:2a:b4:e0:78:83:a1:cd:1d:9d:30:b5:54:45:6e:02:
         f9:a2:36:7c:f2:43:ea:28:c9:70:ee:67:38:e5:03:a8:db:34:
         78:46:78:89:7d:c1:f8:63:0e:ff:af:15:f3:7a:3a:f5:d3:b8:
         92:a9:dd:31:5a:3a:32:e9:9d:29:69:28:f2:3a:63:e5:95:12:
         9e:51:5e:64:d4:82:f0:d8:03:4e:0f:78:b7:db:07:6b:72:ff:
         f3:53:85:c7:ce:d5:75:c2:50:12:22:01:ff:b7:9a:ef:0c:83:
         39:34:cd:fb:bd:f4:83:59:e3:e2:e6:db:e4:7c:9d:28:ef:c2:
         1d:fc:88:b9:ee:ee:93:1e:49:6c:2b:b4:80:7b:d6:d8:e9:e6:
         5d:76:01:da:bd:7a:ad:ce:bf:a6:f3:5d:8c:d0:b1:79:47:d3:
         35:66:1c:64:c4:86:39:b8:f7:fc:17:ff:f0:5e:14:3c:82:43:
         b2:52:bc:fb:77:52:41:de:9d:61:36:c8:31:a7:09:d9:53:a5:
         07:9c:7f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:53 2025 by rpki-client