Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233382e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233382e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          CsW9gKBfjnh6CN2eD3/IMq7G0UsL9s0hhEdEA0jwfEQ=
Subject key identifier:   79:E5:CF:E6:55:34:3F:94:51:3C:4F:87:E4:59:5C:B7:E6:5D:FF:6D
Certificate issuer:       /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial:       2524657D250CE20EA02D430B2155EF27FDC6FFFA
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233382e302f32342d3234203d3e203238333630.roa
Signing time:             Mon 12 Aug 2024 20:11:46 +0000
ROA not before:           Mon 12 Aug 2024 20:06:46 +0000
ROA not after:            Mon 11 Aug 2025 20:11:46 +0000
asID:                     28360
IP address blocks:        179.124.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:24:65:7d:25:0c:e2:0e:a0:2d:43:0b:21:55:ef:27:fd:c6:ff:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Validity
            Not Before: Aug 12 20:06:46 2024 GMT
            Not After : Aug 11 20:11:46 2025 GMT
        Subject: CN=79E5CFE655343F94513C4F87E4595CB7E65DFF6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:be:a4:cd:eb:74:70:99:d7:5f:62:45:f3:
                    af:55:82:6a:eb:70:19:d1:45:31:e7:59:6c:e3:60:
                    67:7a:f9:44:b6:0d:33:9b:d3:b9:8c:50:c4:fc:81:
                    29:da:21:0f:85:c2:be:02:fd:f5:d7:b2:1b:30:87:
                    03:a0:fb:20:69:14:10:0f:b8:01:c6:d6:99:0c:fc:
                    0e:1d:a1:80:f3:45:1f:c0:66:76:e8:f2:20:82:a6:
                    66:51:d4:e8:31:34:28:84:db:51:f8:84:6e:93:58:
                    d9:8e:32:05:61:99:77:f9:9e:b5:70:9b:dc:23:6c:
                    ef:22:67:8d:00:82:cf:e8:21:bd:c4:79:ce:68:21:
                    c5:34:d2:f4:57:29:35:82:3c:af:e0:27:0b:63:2b:
                    6a:7a:cb:52:53:91:6a:95:09:a7:1c:bf:0a:f7:bf:
                    8d:2f:0a:17:db:f8:41:52:90:63:61:ed:39:dc:6d:
                    ec:f6:87:08:e2:8d:34:9a:9d:a5:20:28:b2:31:46:
                    e9:ae:98:4c:38:3b:a2:46:60:85:94:cc:ef:bf:07:
                    74:23:27:49:d4:9e:50:83:af:cf:58:34:d5:b4:1a:
                    c2:43:1a:8a:9f:26:40:50:3d:7a:ea:dd:3b:50:fe:
                    db:3c:c7:e5:27:a4:48:97:55:8f:cf:1f:1b:db:a5:
                    f3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E5:CF:E6:55:34:3F:94:51:3C:4F:87:E4:59:5C:B7:E6:5D:FF:6D
            X509v3 Authority Key Identifier:
                keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233382e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:64:5b:07:77:a5:12:f3:a0:f9:92:31:5c:17:cd:45:89:fd:
         ec:c0:cb:36:8d:af:30:34:2e:f8:23:77:34:2e:eb:13:33:15:
         9f:18:76:9f:5e:b9:6f:36:59:63:51:fb:94:d9:ff:78:99:05:
         99:8e:43:6e:de:ea:a6:15:f5:dd:2a:c0:1a:cb:4c:49:70:67:
         49:21:99:68:80:44:a4:22:3f:d3:b5:f2:46:fa:13:a2:81:12:
         91:0a:0d:96:8f:b0:76:bf:12:78:6c:c9:7b:ba:6f:1a:71:c0:
         13:6d:c5:95:53:d9:1a:4f:c0:98:81:be:6d:97:72:79:ab:ab:
         cf:42:34:cf:15:75:84:4c:43:06:cb:43:e3:4d:7a:9a:94:cb:
         08:00:14:b1:f9:f0:8b:8e:a8:61:f9:5b:99:89:3f:c9:40:4a:
         6d:00:60:d0:5c:91:a6:87:77:45:55:7d:98:07:47:ea:d3:ad:
         92:7b:cc:a2:c9:ce:cb:40:79:38:ff:27:7b:31:b3:d7:95:18:
         37:47:60:6d:b3:57:c2:b5:3f:52:2d:7c:76:8b:6b:87:fc:78:
         ed:a3:12:e4:41:b0:6d:84:ef:8a:d3:62:11:a8:6e:20:84:f9:
         ec:15:7b:a0:f4:4f:5a:1f:c8:3b:4c:08:d1:e3:ba:d6:ee:d2:
         e1:79:c3:20
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJSRlfSUM4g6gLUMLIVXvJ/3G//owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZBNjcwM0JGNzcwNzY4QjJFRjQ0MUY0NjM0NUU0NkQx
Q0YxMDdBNjAeFw0yNDA4MTIyMDA2NDZaFw0yNTA4MTEyMDExNDZaMDMxMTAvBgNV
BAMTKDc5RTVDRkU2NTUzNDNGOTQ1MTNDNEY4N0U0NTk1Q0I3RTY1REZGNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQqr6kzet0cJnXX2JF869Vgmrr
cBnRRTHnWWzjYGd6+US2DTOb07mMUMT8gSnaIQ+Fwr4C/fXXshswhwOg+yBpFBAP
uAHG1pkM/A4doYDzRR/AZnbo8iCCpmZR1OgxNCiE21H4hG6TWNmOMgVhmXf5nrVw
m9wjbO8iZ40Ags/oIb3Eec5oIcU00vRXKTWCPK/gJwtjK2p6y1JTkWqVCaccvwr3
v40vChfb+EFSkGNh7Tncbez2hwjijTSanaUgKLIxRumumEw4O6JGYIWUzO+/B3Qj
J0nUnlCDr89YNNW0GsJDGoqfJkBQPXrq3TtQ/ts8x+UnpEiXVY/PHxvbpfMzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUeeXP5lU0P5RRPE+H5Flct+Zd/20wHwYDVR0j
BBgwFoAUBqZwO/dwdosu9EH0Y0XkbRzxB6YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC8wNkE2NzAzQkY3NzA3NjhCMkVGNDQxRjQ2MzQ1RTQ2RDFDRjEwN0E2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2QTY3MDNCRjc3MDc2OEIy
RUY0NDFGNDYzNDVFNDZEMUNGMTA3QTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM5MmUzMTMyMzQyZTMyMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzfO4wDQYJKoZIhvcNAQELBQADggEBAJRkWwd3
pRLzoPmSMVwXzUWJ/ezAyzaNrzA0LvgjdzQu6xMzFZ8Ydp9euW82WWNR+5TZ/3iZ
BZmOQ27e6qYV9d0qwBrLTElwZ0khmWiARKQiP9O18kb6E6KBEpEKDZaPsHa/Enhs
yXu6bxpxwBNtxZVT2RpPwJiBvm2Xcnmrq89CNM8VdYRMQwbLQ+NNepqUywgAFLH5
8IuOqGH5W5mJP8lASm0AYNBckaaHd0VVfZgHR+rTrZJ7zKLJzstAeTj/J3sxs9eV
GDdHYG2zV8K1P1ItfHaLa4f8eO2jEuRBsG2E74rTYhGobiCE+ewVe6D0T1ofyDtM
CNHjutbu0uF5wyA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:16 2025 by rpki-client