Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3230203d3e203238323730.roa
File:                     3137392e3139312e3132382e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          Z+/uuGdZIqkXNmvEujHOEGtHE6HLVO97bCXsDcutZ9k=
Subject key identifier:   B8:F3:26:45:71:FA:0D:A7:40:B4:C1:28:96:E5:55:D5:11:F5:D4:43
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       0A0122BBCEC3C25F6D25E7D3724278CCE66CBB29
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3230203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:49:52 +0000
ROA not before:           Mon 14 Oct 2024 01:44:52 +0000
ROA not after:            Mon 13 Oct 2025 01:49:52 +0000
asID:                     28270
IP address blocks:        179.191.128.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:01:22:bb:ce:c3:c2:5f:6d:25:e7:d3:72:42:78:cc:e6:6c:bb:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:52 2024 GMT
            Not After : Oct 13 01:49:52 2025 GMT
        Subject: CN=B8F3264571FA0DA740B4C12896E555D511F5D443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:cc:ae:f8:96:ef:be:11:56:cb:cd:10:b9:
                    7b:63:36:f0:1b:be:38:f0:e8:e8:0c:66:67:b7:f3:
                    e3:78:0e:14:a1:14:8e:e0:8b:89:13:33:64:bb:e2:
                    c8:ff:87:3f:60:ae:92:a2:7c:b1:a5:00:7b:75:9c:
                    06:b1:e4:9a:71:ba:2e:ff:13:38:4c:d7:ba:38:7e:
                    c4:e8:02:b4:f1:c8:f1:7d:11:6d:ab:33:ff:14:1f:
                    73:17:8e:ce:16:80:57:23:20:46:a7:b0:52:c8:01:
                    d7:66:37:39:0d:ed:cb:9d:44:c2:63:53:40:cf:7d:
                    dd:dc:d1:59:ba:18:c6:3d:12:5f:eb:c4:22:d7:09:
                    38:d5:d4:f5:61:86:ab:46:fc:5b:17:aa:f8:ac:12:
                    d9:31:13:65:bd:c5:59:73:95:72:b3:57:6c:06:bc:
                    4c:c7:65:9c:90:d4:23:07:71:9e:89:9e:aa:14:5b:
                    79:98:96:0b:04:87:6a:d7:c1:72:56:5a:ae:3d:27:
                    7b:17:f6:ad:8c:37:1f:a0:aa:b6:9f:76:80:64:7e:
                    e0:da:b8:0d:e8:f8:0f:5a:ae:c1:09:5d:c1:c5:52:
                    da:02:96:06:57:35:5f:1d:bf:9b:a3:8a:46:9d:5e:
                    c3:9c:01:fc:7b:ae:4e:a9:6a:25:a1:e8:6c:72:2c:
                    d9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F3:26:45:71:FA:0D:A7:40:B4:C1:28:96:E5:55:D5:11:F5:D4:43
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:29:8c:84:88:a5:39:34:7a:f7:9a:1c:18:03:d5:6f:94:49:
         a1:16:13:37:12:1a:34:0a:6c:72:c8:97:d9:a2:d9:27:41:c8:
         be:b9:91:52:3a:6a:05:ef:7d:ea:70:d0:5d:9e:24:ad:11:e5:
         ac:cc:a4:cf:1e:ed:dc:11:99:9f:45:5e:45:60:30:fb:71:2b:
         cf:5c:5a:2a:85:08:a3:81:d4:bd:74:0b:81:4d:7b:00:ba:a7:
         b4:60:6f:46:9d:1b:6a:20:7b:e1:d0:11:63:53:4f:12:f5:da:
         dd:6f:ea:2a:73:ad:ae:c4:fe:c8:e5:d9:02:ca:f2:37:20:3b:
         43:31:6a:7f:dd:a4:7f:3e:48:88:0d:44:f7:32:9f:87:8f:f0:
         7a:e2:58:bf:09:d5:5a:1c:96:f3:19:c6:f4:05:0b:3a:ec:fa:
         03:e4:01:7b:70:0b:e1:9f:fb:1b:81:3c:b1:0c:14:67:cd:e8:
         d6:02:4b:37:de:d2:31:56:a1:0a:63:97:44:6c:45:87:99:64:
         a8:9e:c0:f6:ae:ed:ed:c9:29:11:6c:58:8a:4a:2b:63:69:04:
         7b:f3:9f:df:a9:d3:6f:42:90:f5:24:0b:4b:7b:26:c2:a9:38:
         e2:27:d7:5a:6d:5f:af:a2:af:ba:dc:14:46:7e:97:8b:73:00:
         19:c0:a0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 12:35:15 2025 by rpki-client