Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa
File:                     3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa (raw, json)
Hash identifier:          eiCBi8VqHNpC/9iGRGjG8ESWLMNop386uvSRuMGYccQ=
Subject key identifier:   0E:6B:D8:41:71:6A:03:D4:9C:E4:93:B8:E6:4C:BD:50:E7:38:37:09
Certificate issuer:       /CN=BE068B06DE5C783A9921447A392452ED53F22837
Certificate serial:       385A50BBC70D9F1BCD500CFC6375E933FDE272AE
Authority key identifier: BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa
Signing time:             Fri 07 Mar 2025 01:31:26 +0000
ROA not before:           Fri 07 Mar 2025 01:26:26 +0000
ROA not after:            Fri 06 Mar 2026 01:31:26 +0000
asID:                     262441
IP address blocks:        179.106.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5a:50:bb:c7:0d:9f:1b:cd:50:0c:fc:63:75:e9:33:fd:e2:72:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE068B06DE5C783A9921447A392452ED53F22837
        Validity
            Not Before: Mar  7 01:26:26 2025 GMT
            Not After : Mar  6 01:31:26 2026 GMT
        Subject: CN=0E6BD841716A03D49CE493B8E64CBD50E7383709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b6:a9:d3:8b:06:f6:2b:ba:d1:1d:fd:aa:01:
                    06:09:12:b7:75:c2:5d:dc:f2:60:f9:ba:81:de:cf:
                    03:f2:ca:86:71:1b:06:31:73:40:d2:82:8e:c7:95:
                    47:5c:ad:b8:bd:b5:96:84:f1:ba:a5:e8:a6:75:12:
                    6c:03:5b:75:d8:39:e5:50:84:2f:9a:66:75:25:57:
                    1a:32:b0:8f:7b:6a:2c:f4:d3:5b:75:7e:d0:0f:56:
                    65:2d:ac:e3:6e:0f:b7:23:ac:71:aa:0a:26:2a:dc:
                    a6:a0:f8:a5:27:2e:f9:ae:ce:30:82:bb:92:f5:36:
                    31:5f:c4:98:68:fc:7d:83:cc:79:c8:3c:2d:e7:bd:
                    ae:ba:f6:99:5d:c7:69:a6:34:50:97:79:be:ed:7d:
                    31:71:85:e9:85:a6:69:b3:a0:92:f3:ed:43:45:4a:
                    5b:02:2b:c0:9e:8a:8b:2d:f1:59:8d:0d:0f:6a:5d:
                    c8:1e:e1:e0:7f:9b:02:22:dd:33:cc:9c:28:bd:0d:
                    25:35:43:c5:f6:c3:c5:0b:2f:78:cb:ed:89:53:98:
                    68:bf:9f:5c:e2:c9:b3:12:b9:e2:0b:21:a0:64:5c:
                    67:e3:86:e9:df:02:23:b0:a6:f8:0e:62:3d:6f:05:
                    df:6b:d0:85:f0:bc:bd:78:5b:15:45:14:6f:3a:fd:
                    a1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6B:D8:41:71:6A:03:D4:9C:E4:93:B8:E6:4C:BD:50:E7:38:37:09
            X509v3 Authority Key Identifier:
                keyid:BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:d2:a5:29:cf:c6:51:e5:4e:04:0b:ba:1e:bf:aa:ee:42:a2:
         7a:33:91:83:98:36:e0:66:b0:7b:c7:fa:27:43:33:68:00:f3:
         ab:a6:db:55:11:bc:0f:84:ff:0b:8e:1e:7f:7e:fb:02:d8:63:
         d6:a0:c7:cb:65:a6:b8:27:42:c2:45:1c:95:7c:c0:8d:ab:41:
         6c:78:e8:fe:ea:01:cc:e5:32:b6:d2:3a:8e:1a:87:3a:54:06:
         12:7a:c7:dd:3b:bd:4a:99:42:b3:7f:bd:41:cd:c2:43:78:e5:
         14:aa:bf:f6:f2:33:3c:08:05:e3:7f:e4:51:9b:92:b7:71:8e:
         f6:eb:f1:76:29:30:d1:a1:c6:7d:8c:d5:24:20:ab:69:e8:ea:
         f8:5a:16:c4:9e:73:21:fb:31:18:82:b9:de:ed:e2:fe:2b:88:
         2d:06:76:87:2f:00:e9:43:0e:e5:ea:43:dd:3c:36:97:b8:ca:
         27:f9:ff:7a:7f:11:0f:0e:1b:23:1b:72:58:23:a6:df:da:27:
         74:65:51:0d:12:9f:c8:86:8c:37:c2:35:c9:08:26:30:69:9f:
         23:d4:ef:b1:de:01:4f:78:58:11:4e:67:98:58:a9:67:b6:97:
         08:61:96:8d:18:97:cf:f4:a3:47:3e:98:ab:52:43:7a:95:15:
         e9:cd:41:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:10 2025 by rpki-client