Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa
File:                     3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa (raw, json)
Hash identifier:          oKaogbl14tCZm0YEgP3o16QWaRyZ/5vgl5pgFw/+WwQ=
Subject key identifier:   FE:E0:EF:E4:43:B4:B0:88:F0:F8:49:C4:BB:B9:74:C0:43:E5:0E:F1
Certificate issuer:       /CN=011E03C9169DEFF662F6BE1D9EBF430BFA9E0453
Certificate serial:       273D61E30323ED9B2F8E5219353C2A106DA4A3F4
Authority key identifier: 01:1E:03:C9:16:9D:EF:F6:62:F6:BE:1D:9E:BF:43:0B:FA:9E:04:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa
Signing time:             Fri 10 Jan 2025 19:58:15 +0000
ROA not before:           Fri 10 Jan 2025 19:53:15 +0000
ROA not after:            Fri 09 Jan 2026 19:58:15 +0000
asID:                     28360
IP address blocks:        179.124.224.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3d:61:e3:03:23:ed:9b:2f:8e:52:19:35:3c:2a:10:6d:a4:a3:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011E03C9169DEFF662F6BE1D9EBF430BFA9E0453
        Validity
            Not Before: Jan 10 19:53:15 2025 GMT
            Not After : Jan  9 19:58:15 2026 GMT
        Subject: CN=FEE0EFE443B4B088F0F849C4BBB974C043E50EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b2:bf:cf:42:a7:97:c7:0d:9b:55:32:85:fe:
                    8f:6f:8f:48:f6:f6:c1:c3:03:b5:f9:0f:3f:35:e7:
                    c5:65:b8:f4:48:81:ba:83:29:e8:d2:e1:30:a0:d3:
                    48:c1:57:0e:f3:52:4f:3e:56:bf:d8:f0:a1:4e:88:
                    89:da:7d:c0:fe:04:b5:9d:e3:fa:69:7e:3c:f1:73:
                    03:e3:44:31:e8:0d:a6:3d:61:27:6d:78:f0:59:d1:
                    28:a5:8c:93:1a:6c:0c:bf:92:50:f6:e0:36:30:20:
                    02:db:e0:b0:8b:db:ef:9e:b0:74:6e:1e:1a:5e:a2:
                    bf:f9:4b:6f:25:80:cb:fd:5c:e5:2c:10:f4:65:8d:
                    cb:66:b4:73:b8:9b:ec:2f:a6:dd:7f:0a:ce:42:91:
                    01:9a:9d:e3:57:3a:52:d5:2d:c6:4a:55:ff:ba:f9:
                    59:79:d2:9b:b2:89:c4:78:4d:fd:12:4e:27:14:48:
                    03:52:50:ea:8c:5b:43:2d:53:04:37:21:2c:80:22:
                    27:21:cf:c4:92:98:58:da:e3:cc:fe:50:ee:0d:5b:
                    bb:95:f8:5f:4e:d3:2c:76:62:d4:62:b9:a0:29:bb:
                    f4:f1:ea:fb:d5:a2:f1:31:dc:c6:59:ac:e4:b7:63:
                    9b:54:a2:15:04:9c:c3:a8:6e:2a:32:be:4d:b7:8d:
                    34:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E0:EF:E4:43:B4:B0:88:F0:F8:49:C4:BB:B9:74:C0:43:E5:0E:F1
            X509v3 Authority Key Identifier:
                keyid:01:1E:03:C9:16:9D:EF:F6:62:F6:BE:1D:9E:BF:43:0B:FA:9E:04:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/011E03C9169DEFF662F6BE1D9EBF430BFA9E0453.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:ac:13:1c:10:5d:a2:c5:ef:e7:1d:aa:2c:1d:a9:62:d0:fe:
         38:06:eb:c4:a2:86:27:5c:90:f6:03:4a:1b:1d:bf:74:2c:3b:
         7e:db:85:30:94:97:49:51:f9:ff:12:53:e0:1f:14:65:ca:a8:
         f9:cd:ff:07:cd:3f:b6:33:4d:c9:d5:26:02:ae:0c:d5:f4:22:
         06:f3:6d:41:87:6c:97:76:58:f4:eb:9a:b5:48:69:6c:34:fe:
         4d:ed:4f:fc:ab:47:88:66:64:56:b8:18:cc:b9:78:2f:8e:cc:
         b5:75:ff:4f:6e:dc:d9:73:ef:9c:42:ef:9c:e1:5d:9a:85:6e:
         e8:47:ec:c8:11:fb:bd:b5:16:d5:30:23:51:4b:b5:1d:6b:f1:
         0d:3c:8b:b9:4d:82:6d:cb:f5:88:02:f5:be:03:2f:96:1c:10:
         4b:94:09:22:1a:9a:d6:93:bf:76:ef:62:b0:7d:63:80:e5:92:
         7e:4f:3e:be:29:9e:da:37:61:0d:f3:69:bb:22:df:a1:0c:d9:
         55:1b:65:67:cd:69:47:4e:76:62:ea:41:a1:ba:bb:48:ff:23:
         73:0b:50:a2:8e:a8:8f:f8:3c:b7:97:af:fa:a8:b0:ff:19:1e:
         03:c0:01:1f:31:ae:37:e7:fa:17:c1:c6:01:27:e9:39:94:6f:
         ba:b8:27:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:51:12 2025 by rpki-client