Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa
File:                     3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          DHwUsbqimEDvWCPxswBV80NNXLzXD8vJVrGf7btegks=
Subject key identifier:   A9:B0:84:BC:90:52:99:F0:B9:94:CF:A1:69:A8:1C:40:DC:D3:9C:AC
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       62640154243CCCD021CB999D57F3342B25955482
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     262903
IP address blocks:        179.109.56.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:64:01:54:24:3c:cc:d0:21:cb:99:9d:57:f3:34:2b:25:95:54:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100CA00F068B2AA7334F5BCDED14F55E2262F405B3541B76302EDDDC210EC90B0CA4597E3981231F6C75B5790313B0932FA6D2B12A89B7D1F3CA556EBAB9791FD0656C226CD256583DF1401073B6D1579CE52D41BAAB456AAAB8F9E568ECDAE1C59040A118645220401187DB3FC70DE877605E1CCA6904F8D56EDC61762B232E4E89503CD6F9679B2BF3724071DDADB39E41AC36182483D80E3748080CC116B7F1317F3C198E812916864EA344358E154A552BA9CB18A56B251DE5793229CE4E3FC9EDE598C138B3419799F0884C1E667835E739DA521FEA5F396480449B5136D3CCE016A90B9C27E9AEC2A9CDADA6436237F900D55F0828E53D28913FE8D6C4B4D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:00:f0:68:b2:aa:73:34:f5:bc:de:d1:4f:55:
                    e2:26:2f:40:5b:35:41:b7:63:02:ed:dd:c2:10:ec:
                    90:b0:ca:45:97:e3:98:12:31:f6:c7:5b:57:90:31:
                    3b:09:32:fa:6d:2b:12:a8:9b:7d:1f:3c:a5:56:eb:
                    ab:97:91:fd:06:56:c2:26:cd:25:65:83:df:14:01:
                    07:3b:6d:15:79:ce:52:d4:1b:aa:b4:56:aa:ab:8f:
                    9e:56:8e:cd:ae:1c:59:04:0a:11:86:45:22:04:01:
                    18:7d:b3:fc:70:de:87:76:05:e1:cc:a6:90:4f:8d:
                    56:ed:c6:17:62:b2:32:e4:e8:95:03:cd:6f:96:79:
                    b2:bf:37:24:07:1d:da:db:39:e4:1a:c3:61:82:48:
                    3d:80:e3:74:80:80:cc:11:6b:7f:13:17:f3:c1:98:
                    e8:12:91:68:64:ea:34:43:58:e1:54:a5:52:ba:9c:
                    b1:8a:56:b2:51:de:57:93:22:9c:e4:e3:fc:9e:de:
                    59:8c:13:8b:34:19:79:9f:08:84:c1:e6:67:83:5e:
                    73:9d:a5:21:fe:a5:f3:96:48:04:49:b5:13:6d:3c:
                    ce:01:6a:90:b9:c2:7e:9a:ec:2a:9c:da:da:64:36:
                    23:7f:90:0d:55:f0:82:8e:53:d2:89:13:fe:8d:6c:
                    4b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B0:84:BC:90:52:99:F0:B9:94:CF:A1:69:A8:1C:40:DC:D3:9C:AC
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:b9:42:1f:cc:6a:fb:de:bd:cc:69:a8:2a:a6:5e:7f:70:02:
         9b:e9:22:b7:3d:38:d7:80:6f:d6:ab:77:9a:6c:21:69:db:63:
         94:e3:31:f8:53:d4:7b:ed:62:e6:3d:9b:0c:e2:47:0e:2d:c8:
         f4:ea:7a:13:49:d0:b4:49:f7:27:64:6e:18:87:f8:69:b3:c2:
         a3:76:d3:f5:d4:be:14:6f:e4:e1:e6:ff:b4:d5:1b:21:f1:a6:
         69:e7:f5:b6:9a:01:72:1e:68:0c:f8:d1:b3:ec:8f:7e:f4:13:
         bb:f8:cf:f7:ef:5c:d2:69:3e:12:68:d0:ce:87:49:13:03:71:
         ce:20:7b:f3:ae:8d:83:98:aa:33:de:63:5d:8f:98:ce:8b:37:
         af:97:c1:48:ed:49:e9:de:d2:52:86:0f:47:c9:ca:5a:e4:df:
         e9:18:e9:bb:49:2b:03:b5:bb:c2:f4:46:25:19:05:6f:53:66:
         88:64:ba:44:8b:72:e5:91:68:a7:98:bb:ef:a0:36:ed:11:a1:
         93:03:07:d5:7a:11:fd:05:0f:0b:97:4d:0c:ae:33:bb:25:d0:
         96:d9:7d:78:01:46:be:f5:09:e7:ea:2a:dd:f7:f6:04:cf:be:
         b6:e3:9f:66:98:a5:82:30:ed:26:ed:40:3b:0c:ff:07:a3:b2:
         77:83:67:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:46:26 2025 by rpki-client