Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3137392e39362e3137362e302f32312d3332203d3e20323032.roa
File:                     3137392e39362e3137362e302f32312d3332203d3e20323032.roa (raw, json)
Hash identifier:          m9eM9Yf0HRf8EViWC/TRLx7TVJ3/GAsJJQN/Ogyg3Xc=
Subject key identifier:   E6:72:DA:E8:8B:D2:7E:DA:A9:95:87:87:6A:ED:2B:F6:CA:2A:8D:7A
Certificate issuer:       /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial:       5A600D62032D56405C2EF004BCA4B6ABD0B87595
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3137392e39362e3137362e302f32312d3332203d3e20323032.roa
Signing time:             Thu 06 Mar 2025 00:58:54 +0000
ROA not before:           Thu 06 Mar 2025 00:53:54 +0000
ROA not after:            Thu 05 Mar 2026 00:58:54 +0000
asID:                     202
IP address blocks:        179.96.176.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:60:0d:62:03:2d:56:40:5c:2e:f0:04:bc:a4:b6:ab:d0:b8:75:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
        Validity
            Not Before: Mar  6 00:53:54 2025 GMT
            Not After : Mar  5 00:58:54 2026 GMT
        Subject: CN=E672DAE88BD27EDAA99587876AED2BF6CA2A8D7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2a:9c:e7:c4:30:f5:8c:32:88:75:17:73:e7:
                    d6:4e:54:3f:43:ee:b7:97:66:47:b0:5d:81:c1:05:
                    48:68:c8:c3:f4:dd:0b:b9:8b:9a:0a:38:82:e1:c1:
                    d6:78:74:91:62:8d:28:d9:eb:68:72:05:3c:81:b1:
                    68:d4:21:93:ad:c0:4c:df:13:85:68:5d:b9:da:83:
                    99:1c:45:f8:ca:86:80:25:40:12:f2:bb:bb:9c:e2:
                    2d:94:50:2c:f2:4a:09:15:3c:85:a8:f4:d7:6a:18:
                    27:f4:a4:6b:04:d7:6f:16:6d:52:97:c8:46:5c:2d:
                    fa:ce:49:5c:51:b0:5b:43:fc:12:86:b2:bb:24:40:
                    aa:7c:4b:9c:a2:0f:19:1a:5b:55:2b:02:13:54:4d:
                    c6:7f:c0:cf:d0:97:21:0f:a3:b1:4a:fb:3a:20:90:
                    73:a0:7c:87:ac:c7:4d:9e:55:05:90:9f:45:74:1b:
                    8a:10:9c:be:47:b4:75:39:e8:90:05:c0:fc:8a:8f:
                    80:5c:ef:d3:43:61:e1:33:5e:7c:b8:c1:43:25:f5:
                    a0:5a:7a:9a:c6:de:bb:56:ae:0b:78:4d:33:c4:c8:
                    71:ce:cd:70:54:ce:cb:32:eb:72:9a:63:ce:1c:05:
                    c1:4c:b4:75:36:27:09:89:89:92:6b:f1:49:a6:5a:
                    70:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:72:DA:E8:8B:D2:7E:DA:A9:95:87:87:6A:ED:2B:F6:CA:2A:8D:7A
            X509v3 Authority Key Identifier:
                keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3137392e39362e3137362e302f32312d3332203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:7c:99:cb:db:2b:e1:ec:37:2a:90:66:1e:38:f2:42:64:eb:
         a9:dc:1e:db:af:84:0e:59:ad:0c:15:87:7c:be:f9:37:76:be:
         af:4b:5d:23:f1:98:a4:28:d1:32:54:aa:08:f0:62:10:9c:76:
         2f:2d:9b:c9:75:a7:28:71:7c:f9:4c:80:ec:15:d9:5b:48:de:
         63:ca:d0:a3:a6:34:4b:dc:4f:88:a3:25:fa:b6:7f:31:a2:fa:
         22:6b:df:ab:10:fd:c4:6f:c3:30:0c:5f:ee:dc:f3:ef:c0:3c:
         dc:b7:c0:c0:ef:49:e4:b6:ef:72:d2:a8:b8:5d:e6:85:08:94:
         5f:93:df:4e:35:f2:6b:73:2f:fc:b6:b7:92:2a:14:64:03:54:
         a5:14:ef:a1:bf:24:2f:0b:8c:62:31:b3:67:c9:47:13:0d:a9:
         8f:b2:52:ba:1d:ac:5b:cb:a6:17:f0:f2:48:65:20:75:d2:8e:
         0c:f4:50:ef:89:7d:c8:bd:0f:63:61:56:65:1c:c8:4a:74:8c:
         3a:89:8b:9d:7f:e2:f8:07:0d:6d:5d:d2:12:a1:a4:df:aa:1f:
         0d:88:64:6a:d0:42:e9:9e:99:44:11:8c:50:8f:85:a6:da:fd:
         bd:91:90:1f:e0:a0:16:11:27:f2:ec:67:b4:c8:1f:e3:af:22:
         58:a5:d6:25
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUWmANYgMtVkBcLvAEvKS2q9C4dZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMzMzEwOThCODREQzkyOTZCQkRBRUU5RDJDMDVCRTJB
QzNDQzVBMjAeFw0yNTAzMDYwMDUzNTRaFw0yNjAzMDUwMDU4NTRaMDMxMTAvBgNV
BAMTKEU2NzJEQUU4OEJEMjdFREFBOTk1ODc4NzZBRUQyQkY2Q0EyQThEN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkKpznxDD1jDKIdRdz59ZOVD9D
7reXZkewXYHBBUhoyMP03Qu5i5oKOILhwdZ4dJFijSjZ62hyBTyBsWjUIZOtwEzf
E4VoXbnag5kcRfjKhoAlQBLyu7uc4i2UUCzySgkVPIWo9NdqGCf0pGsE128WbVKX
yEZcLfrOSVxRsFtD/BKGsrskQKp8S5yiDxkaW1UrAhNUTcZ/wM/QlyEPo7FK+zog
kHOgfIesx02eVQWQn0V0G4oQnL5HtHU56JAFwPyKj4Bc79NDYeEzXny4wUMl9aBa
eprG3rtWrgt4TTPEyHHOzXBUzssy63KaY84cBcFMtHU2JwmJiZJr8UmmWnCXAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU5nLa6IvSftqplYeHau0r9soqjXowHwYDVR0j
BBgwFoAUTDMQmLhNySlrva7p0sBb4qw8xaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3JBemlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1h
Y1UvMi80QzMzMTA5OEI4NERDOTI5NkJCREFFRTlEMkMwNUJFMkFDM0NDNUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDMzMxMDk4Qjg0REM5Mjk2
QkJEQUVFOUQyQzA1QkUyQUMzQ0M1QTIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdyQXppb3dlZk5tRnJ3Ylc1MVN5UEthRDNIMXdOVWoxSndVUHdndWptYWNVLzIv
MzEzNzM5MmUzOTM2MmUzMTM3MzYyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzMjMw
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAOzYLAwDQYJKoZIhvcNAQELBQADggEBAG18mcvbK+HsNyqQ
Zh448kJk66ncHtuvhA5ZrQwVh3y++Td2vq9LXSPxmKQo0TJUqgjwYhCcdi8tm8l1
pyhxfPlMgOwV2VtI3mPK0KOmNEvcT4ijJfq2fzGi+iJr36sQ/cRvwzAMX+7c8+/A
PNy3wMDvSeS273LSqLhd5oUIlF+T30418mtzL/y2t5IqFGQDVKUU76G/JC8LjGIx
s2fJRxMNqY+yUrodrFvLphfw8khlIHXSjgz0UO+Jfci9D2NhVmUcyEp0jDqJi51/
4vgHDW1d0hKhpN+qHw2IZGrQQumemUQRjFCPhaba/b2RkB/goBYRJ/LsZ7TIH+Ov
Ilil1iU=
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:07:17 2025 by rpki-client