Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233372e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233372e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          fXZZENBsrj9rHz/wSgCmfFBLdhZVNNyF8ibF0q+iLRo=
Subject key identifier:   25:FC:1B:BC:9C:8F:8F:88:48:C5:11:EC:D5:F1:F6:9B:0F:AD:2C:B5
Certificate issuer:       /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial:       5C34F36A116EA6AAA757A838675D53A64945EFE6
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233372e302f32342d3234203d3e203238333630.roa
Signing time:             Mon 12 Aug 2024 20:11:42 +0000
ROA not before:           Mon 12 Aug 2024 20:06:42 +0000
ROA not after:            Mon 11 Aug 2025 20:11:42 +0000
asID:                     28360
IP address blocks:        179.124.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:34:f3:6a:11:6e:a6:aa:a7:57:a8:38:67:5d:53:a6:49:45:ef:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Validity
            Not Before: Aug 12 20:06:42 2024 GMT
            Not After : Aug 11 20:11:42 2025 GMT
        Subject: CN=25FC1BBC9C8F8F8848C511ECD5F1F69B0FAD2CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3b:4e:1b:24:dd:2b:bd:c0:3a:fb:bb:a2:96:
                    df:3a:bf:fc:60:52:8b:41:a4:83:42:3d:64:c9:d3:
                    38:8d:10:c9:15:19:00:7d:8b:ba:a5:41:db:61:1d:
                    63:f1:4d:ec:92:52:6e:1a:f3:12:ce:8d:e4:e0:53:
                    0d:b4:84:8d:f3:79:3b:9f:a8:98:c4:7c:93:b4:96:
                    5e:9d:ed:39:90:21:c2:24:ee:f1:d3:22:ce:32:2d:
                    24:8a:9d:f3:16:34:0b:45:e0:1d:82:5a:62:72:e9:
                    90:29:7f:ad:ff:9a:d4:16:dd:4e:57:20:d6:7f:98:
                    39:c4:62:f5:ac:de:eb:16:1b:6b:00:ff:53:9e:6b:
                    ba:88:98:e6:a3:e1:e5:12:55:1c:ce:04:e3:ad:0c:
                    21:9f:88:f6:75:9c:c2:ef:c1:0b:88:48:f1:28:71:
                    49:88:b0:5d:e7:58:bc:91:2e:a6:1c:8b:41:ce:23:
                    c2:e2:4e:b5:28:fe:f7:d0:71:b2:bf:5a:a0:b4:e5:
                    43:50:50:c2:44:9b:44:0a:c3:d0:50:dd:89:f4:63:
                    77:67:ad:d2:5a:46:9b:1a:e2:e4:47:71:f4:4c:84:
                    6b:42:87:36:2a:3f:35:26:2f:03:a3:eb:ae:64:bd:
                    08:aa:57:29:4d:bb:f7:d3:41:ed:2d:1c:bf:34:05:
                    0c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FC:1B:BC:9C:8F:8F:88:48:C5:11:EC:D5:F1:F6:9B:0F:AD:2C:B5
            X509v3 Authority Key Identifier:
                keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233372e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:20:f3:f8:09:e7:ee:1b:ed:2a:67:26:fb:80:2d:b9:7f:87:
         58:e3:2a:4a:77:15:72:42:8e:9f:72:09:fe:60:7d:5e:1c:3d:
         41:8a:62:a4:cf:9a:15:de:ef:46:07:cd:89:5c:f5:d0:50:1b:
         4e:92:73:04:13:2b:a7:01:60:25:71:1a:89:97:0d:57:68:ae:
         74:42:62:b5:83:38:f6:dc:c1:4d:0a:c7:06:a9:7a:cf:3b:b8:
         ef:14:76:45:2b:23:7b:4c:b8:9a:58:34:2a:e7:4a:b5:d1:64:
         5e:e2:fa:68:3d:09:25:41:65:1f:62:2c:90:8c:20:16:18:a4:
         11:2c:73:e3:3b:37:0d:1a:7e:f7:43:69:f5:57:6f:63:8c:dc:
         4d:80:24:cb:13:b9:58:84:47:eb:db:40:31:68:98:0d:29:53:
         ef:89:c6:2e:c8:43:35:71:7c:76:6f:af:c2:f5:0c:06:b3:8c:
         3f:2a:29:11:8f:52:ba:05:e7:d0:0f:a5:6c:22:f3:44:4e:20:
         4e:b1:bc:7d:3a:57:9d:b7:59:fb:32:a1:70:83:98:36:09:75:
         37:32:1f:d1:84:5b:9b:8f:f0:98:de:88:07:c8:d8:da:13:79:
         a6:2b:ca:7d:f5:08:89:30:f7:ac:05:f3:e3:79:1a:b8:c1:46:
         6c:7a:eb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:12 2025 by rpki-client