Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233322e302f32322d3232203d3e203238333630.roa
File:                     3137392e3132342e3233322e302f32322d3232203d3e203238333630.roa (raw, json)
Hash identifier:          mgcB8jkyOAq71lOtRy5NVyA2q9mEsT2+n3ncD4ixzxI=
Subject key identifier:   18:A4:FD:FB:B0:F8:D4:C3:91:BC:FF:B2:5B:8E:1D:B3:F9:D4:81:F6
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       011CD6EBFFEED0B63791904CF474E89131FCF39A
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233322e302f32322d3232203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:41 +0000
ROA not before:           Sat 06 Apr 2024 02:40:41 +0000
ROA not after:            Sat 05 Apr 2025 02:45:41 +0000
asID:                     28360
IP address blocks:        179.124.232.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1c:d6:eb:ff:ee:d0:b6:37:91:90:4c:f4:74:e8:91:31:fc:f3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:41 2024 GMT
            Not After : Apr  5 02:45:41 2025 GMT
        Subject: CN=18A4FDFBB0F8D4C391BCFFB25B8E1DB3F9D481F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:e6:e7:cd:9f:98:ac:d9:c2:e8:74:67:9a:
                    c1:10:3b:e8:b0:e6:17:a9:32:1f:45:bc:25:1b:bf:
                    41:98:1d:4b:2a:0e:98:44:92:96:8b:64:44:c4:94:
                    21:be:91:32:91:4b:9f:b7:5a:6d:64:4b:a5:b3:3b:
                    cf:42:f4:b6:94:a9:8e:cd:6d:de:7e:eb:23:54:39:
                    e1:b8:5e:6c:8f:7c:a9:64:3c:03:96:f7:2a:93:a1:
                    15:0a:00:3f:34:0e:bd:68:b1:b8:42:70:47:6d:06:
                    27:08:a8:85:ba:f0:dd:8a:1d:d0:00:20:6a:57:6a:
                    00:52:d8:51:2b:2e:b1:6d:6e:72:46:64:a9:3e:7c:
                    b5:a8:28:08:a2:8e:4b:0e:19:5f:83:04:cb:cb:51:
                    4c:3c:e1:fe:65:57:b3:ff:e9:65:b2:dc:c5:d1:c3:
                    72:40:37:71:f0:86:b1:10:48:f6:26:00:87:df:b0:
                    d8:b1:58:d8:df:3e:be:c1:a4:2c:50:c4:8e:1c:44:
                    6d:87:aa:71:a2:87:11:e0:e1:b4:51:53:95:83:fc:
                    27:b6:fb:27:1d:4c:66:9b:f0:08:d0:03:f2:49:df:
                    2e:d6:cd:a9:2e:ed:35:58:36:e0:29:60:69:ec:82:
                    df:ea:11:3d:f6:df:82:51:27:b4:5b:b1:7f:0c:fa:
                    a9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A4:FD:FB:B0:F8:D4:C3:91:BC:FF:B2:5B:8E:1D:B3:F9:D4:81:F6
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233322e302f32322d3232203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:53:8f:2d:60:b1:56:55:6e:f5:2b:b4:29:27:2b:71:a4:a5:
         98:14:01:09:27:8d:0f:76:e2:61:81:98:5d:41:27:0e:46:8b:
         f8:1c:d4:eb:69:df:bf:18:75:52:99:d2:58:ad:de:7b:9a:bb:
         c6:e2:ce:b4:78:fe:22:fb:c6:e1:32:5f:09:11:93:7a:fd:29:
         be:1b:73:29:b1:70:6f:33:2f:63:7f:48:ff:11:ff:bb:3a:31:
         25:38:1d:9a:a2:21:73:b0:04:d1:46:6e:f5:14:5c:a2:81:e4:
         fb:d8:51:3b:5b:b7:b3:8b:55:32:fb:f0:3f:ae:da:eb:3e:67:
         3f:b2:91:80:ce:d9:a1:c3:f4:f2:f6:22:a3:4b:f3:82:1b:13:
         5b:00:4f:ae:75:0c:24:b4:f1:98:22:1c:35:0e:57:85:1d:ea:
         9e:d5:e6:f1:49:e5:cc:03:5c:2d:3a:3c:db:d1:02:4b:3d:14:
         21:af:37:4c:f4:6e:3c:0b:26:54:4e:28:f1:87:35:86:a8:dd:
         66:3d:1a:4e:1a:f6:d1:37:23:45:ea:ed:7e:84:6d:fd:ec:10:
         49:3b:29:c4:bf:fd:cd:49:35:5f:7b:29:98:85:39:17:a0:62:
         0e:b3:20:19:4c:11:c6:d4:18:3e:57:14:a0:55:df:f6:d9:29:
         7e:b4:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:54 2025 by rpki-client