Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa
File:                     3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa (raw, json)
Hash identifier:          Xk4SrT+GGGaVOhZ2xRbts1hOkz1NsKHieSFrxk2a40U=
Subject key identifier:   03:DB:3B:5B:DE:58:F4:3C:8A:27:DF:D2:23:EE:0A:2C:3F:D3:A3:35
Certificate issuer:       /CN=DB4CB9D69698BEBD07A155C70C762C9A217B4706
Certificate serial:       15EAB80E91810A2A205DEBE5E8B051183DC185E0
Authority key identifier: DB:4C:B9:D6:96:98:BE:BD:07:A1:55:C7:0C:76:2C:9A:21:7B:47:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa
Signing time:             Thu 06 Mar 2025 09:10:22 +0000
ROA not before:           Thu 06 Mar 2025 09:05:22 +0000
ROA not after:            Thu 05 Mar 2026 09:10:22 +0000
asID:                     262374
IP address blocks:        179.127.120.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ea:b8:0e:91:81:0a:2a:20:5d:eb:e5:e8:b0:51:18:3d:c1:85:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB4CB9D69698BEBD07A155C70C762C9A217B4706
        Validity
            Not Before: Mar  6 09:05:22 2025 GMT
            Not After : Mar  5 09:10:22 2026 GMT
        Subject: CN=03DB3B5BDE58F43C8A27DFD223EE0A2C3FD3A335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:d0:97:32:88:e5:d8:73:84:af:55:66:e5:
                    17:1e:c8:d4:2d:b5:22:38:2f:ae:28:72:c2:5a:28:
                    5e:34:63:dd:15:52:36:f1:0a:4d:d6:2d:22:d5:24:
                    38:4f:0e:42:0b:b1:04:1d:d0:bd:48:12:da:b6:77:
                    88:13:dd:4f:a5:eb:48:37:ca:1b:8d:87:b7:e8:08:
                    6d:70:8f:5b:40:51:7e:84:0f:68:c3:57:23:1b:47:
                    17:92:6f:02:e3:82:6a:89:70:5b:e3:a6:05:17:1b:
                    53:bf:fb:25:3e:5f:a0:bd:a1:c6:88:20:7b:f6:62:
                    33:7b:a7:ae:00:de:8c:22:1e:99:0c:f4:d4:0a:db:
                    97:2d:04:d7:3c:92:02:97:7b:14:3c:bd:fe:e9:37:
                    23:ee:50:7b:15:51:d3:67:58:84:f9:92:7d:d4:ae:
                    95:ca:a7:da:1c:9c:fe:4f:e7:fc:10:55:0c:1f:4c:
                    70:b2:09:d2:25:2b:02:04:14:b6:c1:a1:83:81:dc:
                    f4:0d:18:ca:b9:8c:d4:07:14:04:53:73:b8:f2:67:
                    b8:5d:16:47:59:a0:77:45:74:12:3c:41:38:a7:b4:
                    e8:60:e2:46:09:ff:d7:58:98:9a:95:12:eb:b0:6c:
                    e8:11:55:68:1f:3d:5d:26:4c:8a:6d:cc:69:3b:85:
                    cf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DB:3B:5B:DE:58:F4:3C:8A:27:DF:D2:23:EE:0A:2C:3F:D3:A3:35
            X509v3 Authority Key Identifier:
                keyid:DB:4C:B9:D6:96:98:BE:BD:07:A1:55:C7:0C:76:2C:9A:21:7B:47:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:d8:56:5f:2e:fd:15:bc:42:ac:f5:45:5e:3e:64:56:e0:2a:
         ef:9f:90:a7:29:b8:df:e5:80:df:d4:e2:28:5f:53:e5:9e:4b:
         5c:72:55:4d:8b:d1:70:2c:67:d9:60:71:64:59:6b:93:cc:f5:
         f5:30:9e:2e:df:d1:28:02:5f:50:a2:84:f3:4c:91:a5:13:b6:
         c0:c2:28:6e:e7:00:ee:bd:60:ae:1a:7a:98:ae:bb:eb:02:6b:
         65:1c:fa:25:55:fb:cb:3a:03:ad:7a:58:c2:84:84:47:cf:10:
         8c:04:8b:c6:09:a3:d9:c1:5a:a0:90:75:5c:76:25:db:1e:80:
         5e:dc:0b:d1:f9:35:39:36:36:98:93:f5:c9:81:ef:20:6f:9c:
         ce:6f:f7:ac:b4:be:ad:56:fe:fb:97:ae:e6:2f:3f:6a:b5:37:
         bc:43:a5:1e:10:32:63:53:b2:fc:fd:f9:49:d3:3c:69:50:a7:
         fb:54:a6:22:cf:55:f0:76:a8:13:bc:3f:87:5b:5a:48:2a:81:
         1f:30:bd:b3:bd:58:38:c5:cc:2b:c2:e4:e4:d3:b5:4d:d2:6a:
         31:38:75:be:0e:7d:17:5a:10:83:66:5d:04:e6:2d:ae:35:d1:
         fe:c0:88:7a:21:fb:dc:b6:ef:95:1d:4b:33:25:0e:b6:84:54:
         dc:b3:e8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:41:57 2025 by rpki-client