Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3137392e3130362e3233322e302f32312d3231203d3e20323633303833.roa
File:                     3137392e3130362e3233322e302f32312d3231203d3e20323633303833.roa (raw, json)
Hash identifier:          QSpfN7PtbQshvLV8WaJwIUN0pkJ1tWBvH5Hc4z0LPuE=
Subject key identifier:   98:29:D4:0D:39:D4:76:CE:CD:F8:E3:69:B2:01:46:7D:7F:2F:4F:44
Certificate issuer:       /CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
Certificate serial:       50C4BCEF9C42061390B37779CCC38162D6EE4556
Authority key identifier: 14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3137392e3130362e3233322e302f32312d3231203d3e20323633303833.roa
Signing time:             Wed 25 Jan 2023 19:44:19 +0000
ROA not before:           Wed 25 Jan 2023 19:39:19 +0000
ROA not after:            Wed 24 Jan 2024 19:44:19 +0000
asID:                     263083
IP address blocks:        179.106.232.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c4:bc:ef:9c:42:06:13:90:b3:77:79:cc:c3:81:62:d6:ee:45:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
        Validity
            Not Before: Jan 25 19:39:19 2023 GMT
            Not After : Jan 24 19:44:19 2024 GMT
        Subject: CN=9829D40D39D476CECDF8E369B201467D7F2F4F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:89:31:34:cb:28:d8:be:21:f5:ac:a8:d0:c0:
                    36:0f:99:1e:7c:3e:57:41:d1:43:b1:4f:c9:a0:42:
                    51:97:84:b3:11:36:07:4f:d2:1c:0c:f1:42:b3:9f:
                    d8:65:d2:07:39:c5:5e:f5:f3:e0:10:3c:b9:7d:f4:
                    5d:86:d5:be:51:79:3c:92:67:e3:c3:18:65:df:13:
                    c5:ba:58:57:ef:61:0b:7e:f9:0b:8f:f1:73:35:5e:
                    b4:83:46:cb:57:c7:1d:34:2a:f6:2e:23:3c:2a:83:
                    0b:8d:01:d2:1b:28:1f:82:96:6e:7a:29:d4:64:61:
                    33:db:f7:34:d2:33:b7:b8:22:1c:bc:77:f9:b2:28:
                    ee:5d:f2:5f:e8:e5:77:d5:fb:49:db:80:d6:30:45:
                    e3:a1:cc:60:f4:cd:51:88:02:f5:c0:6c:56:0a:8c:
                    f2:d0:4a:fd:1c:4b:d2:07:90:e7:99:2f:13:e0:a7:
                    35:3c:2a:40:e3:09:4d:e5:fa:0c:7b:45:a8:c5:21:
                    79:eb:d6:50:28:aa:2e:f7:e7:5c:45:5b:a4:fc:3e:
                    51:42:9e:52:14:8d:77:e6:24:9b:d1:2b:91:88:2a:
                    53:84:2c:e6:60:13:9f:cf:90:dd:26:13:73:70:74:
                    a3:38:9d:aa:fd:f3:72:2e:54:a8:11:40:f1:ab:41:
                    64:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:29:D4:0D:39:D4:76:CE:CD:F8:E3:69:B2:01:46:7D:7F:2F:4F:44
            X509v3 Authority Key Identifier:
                keyid:14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3137392e3130362e3233322e302f32312d3231203d3e20323633303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         af:c1:55:2e:54:7d:5c:12:76:91:4a:e1:77:c4:45:a9:20:c0:
         24:4a:64:1c:50:32:7d:65:8b:64:da:37:8c:7d:1d:56:3e:8f:
         5b:18:d9:e1:ce:99:3d:f6:15:2b:ac:d7:67:90:a4:c9:3f:2d:
         ad:38:e9:6a:a2:f5:c3:17:61:93:8d:af:b2:18:dd:8c:6c:9b:
         5a:51:e1:43:70:96:62:bf:ed:d7:ad:44:42:f9:0c:86:d5:3b:
         1f:05:f3:a9:92:46:16:52:06:d3:a4:1d:37:00:14:1b:ac:6e:
         aa:f0:8b:3b:6b:9a:7a:a8:b1:97:de:ad:05:b9:ff:6c:fd:60:
         27:e1:d6:a7:14:f6:78:91:61:92:62:88:b3:f2:ce:f2:97:5a:
         88:c3:0c:75:e4:a2:9d:3d:a2:a2:6a:82:99:6d:75:d5:07:21:
         4b:65:d3:6c:07:aa:de:b7:63:b8:f5:7f:ba:70:00:c2:b1:bc:
         37:df:36:95:91:76:05:ae:d3:0b:f4:e6:4c:d7:de:cb:41:ca:
         b0:70:ab:91:4b:b7:50:81:6a:b2:26:14:a0:11:15:c1:74:0e:
         21:f4:e1:86:b6:a7:73:a7:eb:c0:8e:6d:4d:70:f7:70:f5:86:
         f2:f5:ed:15:e8:08:fb:a1:62:0f:55:93:ba:22:ca:8c:4c:94:
         45:63:64:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:51:35 2025 by rpki-client