Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3137392e3130362e3231362e302f32312d3231203d3e20323633303833.roa
File:                     3137392e3130362e3231362e302f32312d3231203d3e20323633303833.roa (raw, json)
Hash identifier:          QF5j9d16cp1Byf4C16nI0yGzmJJs5jFbUtgQsccrkKw=
Subject key identifier:   64:9A:65:B0:E6:A0:4F:06:E5:AE:FF:73:1D:81:8D:BE:01:39:34:15
Certificate issuer:       /CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
Certificate serial:       2B35969EE36B26925E6DE25C3672799AF4675A02
Authority key identifier: 14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3137392e3130362e3231362e302f32312d3231203d3e20323633303833.roa
Signing time:             Wed 25 Jan 2023 19:44:19 +0000
ROA not before:           Wed 25 Jan 2023 19:39:19 +0000
ROA not after:            Wed 24 Jan 2024 19:44:19 +0000
asID:                     263083
IP address blocks:        179.106.216.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:35:96:9e:e3:6b:26:92:5e:6d:e2:5c:36:72:79:9a:f4:67:5a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
        Validity
            Not Before: Jan 25 19:39:19 2023 GMT
            Not After : Jan 24 19:44:19 2024 GMT
        Subject: CN=649A65B0E6A04F06E5AEFF731D818DBE01393415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:6f:a5:eb:6c:af:d5:5f:85:09:ce:5e:e9:
                    ee:dc:15:ce:6d:1e:2f:14:45:9d:13:9b:ec:a4:cb:
                    ec:ae:cb:15:e4:82:32:66:1a:d1:f9:0e:95:e5:f5:
                    1b:49:d6:75:e2:a1:a4:ca:00:bf:32:8d:d4:50:f7:
                    a3:74:a6:d2:49:43:e0:f8:89:f7:bf:2c:32:b8:38:
                    bd:1a:51:78:5d:e8:8d:43:48:5b:a1:3b:b6:1b:1f:
                    44:e0:5e:bd:3e:6c:96:fb:3c:5e:bb:9d:8c:34:ac:
                    14:c0:b4:5b:89:7b:f2:32:fb:e8:42:72:39:6f:55:
                    b4:53:13:3b:d3:ba:12:16:54:03:9b:b1:96:dd:77:
                    00:d6:0d:d4:11:8f:a0:44:41:64:25:5b:86:2a:49:
                    63:1d:f6:1b:87:f7:c1:1d:0a:e2:74:35:60:47:cd:
                    24:33:69:d7:5b:4e:87:a7:b7:b7:72:6c:be:83:7c:
                    7a:e4:3a:d2:89:d8:fc:bb:33:61:10:ea:63:db:e9:
                    3f:63:96:d3:ac:fb:98:e5:22:c3:3c:59:36:58:c5:
                    8c:1a:74:3b:4c:a3:8d:d2:81:7a:26:2c:21:9c:3f:
                    bb:24:26:07:f5:39:8f:d0:19:25:97:f5:2b:32:49:
                    3f:26:71:e5:c8:b1:d9:32:68:5b:df:a0:c2:c9:37:
                    43:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9A:65:B0:E6:A0:4F:06:E5:AE:FF:73:1D:81:8D:BE:01:39:34:15
            X509v3 Authority Key Identifier:
                keyid:14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3137392e3130362e3231362e302f32312d3231203d3e20323633303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         11:b2:9a:5b:2e:ee:cb:89:25:af:60:1f:db:d5:ab:03:89:85:
         a1:cc:bf:b9:4d:fd:86:14:c5:53:9c:73:d6:1b:f2:36:a0:56:
         ef:ad:cc:6b:9e:82:e0:06:3d:98:4f:17:6d:f7:ce:78:06:44:
         01:48:8a:0d:0d:66:f1:3c:59:ce:88:8a:59:9e:22:cb:19:d0:
         6a:85:65:7b:3a:05:44:39:5f:b9:37:56:df:18:c2:8a:db:e2:
         a4:fc:62:c4:99:7e:d8:3f:2f:e8:5f:60:05:25:74:03:85:58:
         2b:28:46:2d:c9:54:ff:a4:f0:21:10:36:c7:db:d0:03:4a:92:
         dc:e3:77:78:5d:d2:cf:54:7d:db:d6:1f:5c:be:c2:15:5b:d5:
         99:ee:65:f2:b1:66:c4:0c:15:c4:30:c0:72:69:98:1f:c2:e3:
         4e:a5:a3:d6:25:fc:8f:04:2d:2c:42:52:f1:bf:3e:c5:35:72:
         c6:eb:29:be:3d:c5:d2:07:06:fb:c4:a7:06:ef:af:66:65:03:
         32:95:48:65:9c:bf:21:e3:bc:75:0d:79:89:62:42:9f:44:4f:
         f9:b6:c7:0b:0a:5e:b7:37:4d:2d:6c:eb:ed:9a:c2:ec:7b:ff:
         46:4c:61:c0:d5:0c:47:d9:c4:0d:40:1b:1b:ba:fa:21:b4:b5:
         5c:18:5b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:25 2025 by rpki-client