Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/3137392e36332e3136302e302f32322d3232203d3e20323731363530.roa
File:                     3137392e36332e3136302e302f32322d3232203d3e20323731363530.roa (raw, json)
Hash identifier:          bx3L4nsDBZ8AKYN9yEXfwcil/2oOWnsx8gLNTCvLgcQ=
Subject key identifier:   70:AB:52:8C:15:C9:DF:F2:6F:3D:B9:50:37:CB:EA:15:21:79:45:8A
Certificate issuer:       /CN=62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED
Certificate serial:       78E6CA771FDFE4A39EFECA2B64BA1F1FD24B57BA
Authority key identifier: 62:E7:CA:E7:AA:D5:F2:C4:5D:76:2F:13:F5:53:A8:FF:38:D0:76:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/3137392e36332e3136302e302f32322d3232203d3e20323731363530.roa
Signing time:             Tue 14 Nov 2023 19:22:52 +0000
ROA not before:           Tue 14 Nov 2023 19:17:52 +0000
ROA not after:            Tue 12 Nov 2024 19:22:52 +0000
asID:                     271650
IP address blocks:        179.63.160.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e6:ca:77:1f:df:e4:a3:9e:fe:ca:2b:64:ba:1f:1f:d2:4b:57:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED
        Validity
            Not Before: Nov 14 19:17:52 2023 GMT
            Not After : Nov 12 19:22:52 2024 GMT
        Subject: CN=70AB528C15C9DFF26F3DB95037CBEA152179458A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:45:10:8e:c2:77:5e:31:71:5e:ce:74:a4:96:
                    8b:22:d0:ca:24:66:e0:e7:3b:0d:7a:ce:ef:a5:d5:
                    57:23:b5:4d:0a:59:72:c7:2e:de:6e:e0:fd:1d:2b:
                    18:ff:ba:74:e3:74:4b:31:d1:eb:55:79:02:1f:b8:
                    04:88:41:36:ba:81:11:40:2a:93:07:fe:27:a7:ee:
                    93:8e:02:93:44:1e:af:c2:53:16:66:8a:c9:fb:72:
                    6c:14:49:18:09:37:d5:a2:9c:6b:73:6c:8a:55:cd:
                    b5:85:bb:a6:6c:6c:c8:23:c6:94:64:f9:1b:87:05:
                    21:64:fb:26:94:56:a0:0f:29:e8:1f:6a:2f:cf:c6:
                    96:01:50:c3:c1:f8:34:66:46:1a:23:f6:d8:f1:27:
                    89:4e:d2:22:8f:2a:31:58:59:eb:29:30:28:c4:c9:
                    d3:d5:e1:97:e5:e5:df:45:eb:b0:83:c6:51:1d:96:
                    37:b5:31:56:b3:41:bb:7c:b6:e0:9f:7d:52:e2:14:
                    7d:79:3a:a4:96:1c:1c:62:e2:bd:a2:b5:0c:8e:6f:
                    3c:6b:a9:30:81:f5:4c:29:95:36:36:fc:31:09:f9:
                    4c:e2:15:c2:02:fa:1e:0f:75:04:33:55:ec:8f:16:
                    ac:3b:e0:8b:d1:25:4e:f0:f0:87:28:94:d4:6d:dc:
                    4e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AB:52:8C:15:C9:DF:F2:6F:3D:B9:50:37:CB:EA:15:21:79:45:8A
            X509v3 Authority Key Identifier:
                keyid:62:E7:CA:E7:AA:D5:F2:C4:5D:76:2F:13:F5:53:A8:FF:38:D0:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/3137392e36332e3136302e302f32322d3232203d3e20323731363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:0a:37:0f:88:d4:72:06:59:e1:ce:2e:24:21:ab:99:78:05:
         3b:b0:12:67:fc:d9:07:92:12:b7:92:bb:9d:94:26:75:0c:b2:
         2e:20:0d:c2:26:62:4e:9e:16:95:7c:ad:1f:ae:1d:7d:e4:e3:
         a4:2e:99:5b:ea:58:53:a4:3c:5b:84:80:35:56:9a:57:09:21:
         0b:49:b2:f5:e2:c9:18:da:c8:3a:77:36:35:1f:d1:10:ea:13:
         df:26:f6:50:69:d6:e5:a4:f0:b6:65:3a:0c:9e:d4:e8:38:35:
         48:cf:89:b2:83:db:b9:c3:c7:d3:98:92:d9:14:8e:e9:35:b6:
         31:b6:30:86:e5:5f:7f:99:8c:4a:92:7b:d8:8d:e4:0a:28:6d:
         3c:32:a3:a4:f4:5f:17:c5:19:ab:98:c5:39:ed:db:2c:5d:7b:
         7f:9d:29:d5:7e:4f:ff:28:c5:de:9a:af:30:aa:3c:af:df:91:
         a4:59:8e:d5:11:35:d6:94:9b:1f:f4:6a:03:e3:30:fa:0c:3e:
         d2:22:4c:ef:4b:84:2b:8f:ca:93:70:18:2a:ce:c9:ab:97:83:
         a7:b7:dc:83:ae:6b:1b:11:f2:26:01:a3:15:ba:19:ac:36:52:
         ed:e4:88:45:f4:97:9f:d4:3e:1c:0a:c5:63:77:dc:d5:bd:d8:
         da:cb:63:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:37:31 2025 by rpki-client