Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3137302e37392e3234302e302f32342d3234203d3e203631353739.roa
File:                     3137302e37392e3234302e302f32342d3234203d3e203631353739.roa (raw, json)
Hash identifier:          gnUoulx62d6gqdxUhr62zb6DEfbRQd7wgKfWfRYCrqw=
Subject key identifier:   20:FC:2D:D0:62:EE:E7:E0:0A:DF:67:DC:BD:E9:64:76:8B:BD:FB:6B
Certificate issuer:       /CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
Certificate serial:       1C9A96272BF622174141FE53A1EF6FF2CC004558
Authority key identifier: A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3137302e37392e3234302e302f32342d3234203d3e203631353739.roa
Signing time:             Tue 06 Feb 2024 12:01:38 +0000
ROA not before:           Tue 06 Feb 2024 11:56:38 +0000
ROA not after:            Tue 04 Feb 2025 12:01:38 +0000
asID:                     61579
IP address blocks:        170.79.240.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9a:96:27:2b:f6:22:17:41:41:fe:53:a1:ef:6f:f2:cc:00:45:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
        Validity
            Not Before: Feb  6 11:56:38 2024 GMT
            Not After : Feb  4 12:01:38 2025 GMT
        Subject: CN=20FC2DD062EEE7E00ADF67DCBDE964768BBDFB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:15:24:ba:02:1c:cb:2d:58:cc:39:8e:7a:02:
                    ed:fb:d4:52:93:eb:8d:33:0c:ed:30:32:0f:77:2b:
                    47:cf:16:d8:72:66:5b:ab:38:b2:e0:7c:6b:08:e5:
                    6b:a7:9a:bc:c2:67:3d:b3:d0:d8:bf:46:78:1f:5c:
                    b1:fc:e7:51:95:89:9d:38:06:a1:99:18:54:39:46:
                    21:1c:ab:0c:74:e5:42:05:ad:de:ab:94:f4:2d:81:
                    75:32:70:1f:69:d9:a3:bb:07:16:a1:45:1a:f1:d7:
                    70:8a:0e:56:30:b6:7a:d4:e0:90:d7:df:d7:c7:48:
                    12:55:b1:05:00:38:e5:ce:5c:c4:11:61:c6:0e:67:
                    c6:7b:1d:8b:0e:30:26:2e:a9:07:9d:ab:ef:ed:95:
                    a4:a4:67:b0:74:55:d0:fb:56:16:98:33:88:e8:8b:
                    4d:ab:81:44:5f:eb:11:d5:f1:55:18:66:df:2c:40:
                    9a:ae:c8:f8:ab:55:53:c9:6e:e9:ce:70:80:d1:10:
                    55:f3:11:52:f8:d8:69:58:15:25:c3:76:6c:a0:2d:
                    13:6e:73:43:24:73:07:87:c7:a5:2c:51:20:06:5e:
                    73:4b:fa:28:58:b3:be:b3:5b:67:e8:73:3c:be:82:
                    1b:88:83:97:a4:50:e4:12:fe:f1:2f:3c:e6:b5:42:
                    9a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FC:2D:D0:62:EE:E7:E0:0A:DF:67:DC:BD:E9:64:76:8B:BD:FB:6B
            X509v3 Authority Key Identifier:
                keyid:A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3137302e37392e3234302e302f32342d3234203d3e203631353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:83:01:40:f3:9c:23:4b:25:86:6b:5c:92:7e:13:76:b8:4b:
         05:21:06:9b:00:2e:7e:37:e9:1e:29:05:24:1f:55:49:12:ef:
         89:93:67:4b:79:ed:fc:b1:a0:4f:6d:e9:fa:0b:e2:29:3e:de:
         58:72:e3:c4:98:50:90:12:c6:28:6e:95:d8:30:0d:85:b5:53:
         1b:fc:df:64:cc:56:ef:d7:33:75:0a:ac:0c:1d:15:a2:e2:f4:
         d5:e9:ef:05:06:cb:f6:96:4c:20:ea:34:a4:ba:c5:78:f8:d8:
         8f:c2:c4:e6:57:78:0b:3b:23:1c:85:da:69:41:3f:a5:5a:e7:
         26:86:ea:ab:e2:bc:2d:31:75:c3:02:40:76:8d:30:a9:ab:7b:
         e6:72:fd:1b:d3:d8:6a:81:52:d1:88:f9:6f:93:77:6d:eb:2e:
         8a:9f:48:e9:79:b2:d8:6b:c8:ef:42:5f:13:12:a9:c7:96:6b:
         46:08:68:dd:3f:4a:70:c5:9c:bb:3d:f0:fe:e2:c5:29:89:8d:
         09:dd:a2:6c:50:04:d6:b1:a0:28:fe:3f:c2:19:aa:6b:38:90:
         45:81:47:08:88:c7:f5:1a:32:87:87:39:84:d1:13:0d:fe:fe:
         a9:b5:da:ea:5a:44:e9:67:ba:3c:b3:21:f4:d2:21:e0:2c:62:
         9d:fb:58:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:41:46 2025 by rpki-client