Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/3137392e34392e3135322e302f32322d3332203d3e20323634343533.roa
File:                     3137392e34392e3135322e302f32322d3332203d3e20323634343533.roa (raw, json)
Hash identifier:          6zWBxGgnR8yeZa3HrQNd3oimHrg81pFPY8BbXU6axQQ=
Subject key identifier:   00:16:B5:6F:CC:AF:AD:62:39:80:B8:E6:4D:D8:02:4C:C0:20:1C:1D
Certificate issuer:       /CN=0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184
Certificate serial:       2E1F78F909FE367DCC3A711735920C346751233C
Authority key identifier: 0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/3137392e34392e3135322e302f32322d3332203d3e20323634343533.roa
Signing time:             Tue 24 Dec 2024 17:08:43 +0000
ROA not before:           Tue 24 Dec 2024 17:03:43 +0000
ROA not after:            Tue 23 Dec 2025 17:08:43 +0000
asID:                     264453
IP address blocks:        179.49.152.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1f:78:f9:09:fe:36:7d:cc:3a:71:17:35:92:0c:34:67:51:23:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184
        Validity
            Not Before: Dec 24 17:03:43 2024 GMT
            Not After : Dec 23 17:08:43 2025 GMT
        Subject: CN=0016B56FCCAFAD623980B8E64DD8024CC0201C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a8:75:29:1b:23:be:1c:43:fb:7f:1b:a6:55:
                    8a:59:bf:06:6a:5f:ff:8b:01:44:a1:39:27:ac:6c:
                    24:37:28:f2:19:55:f3:05:99:e9:2b:de:24:80:cf:
                    9f:3d:f8:76:12:6e:bf:13:dd:e2:23:7a:a2:65:7c:
                    96:3d:e9:a9:9f:18:cd:ab:9b:d3:a5:d7:c5:dd:69:
                    ff:16:71:0e:6b:ad:01:1f:7f:36:3e:3a:86:d2:8d:
                    af:ae:06:1b:a8:88:3f:18:8a:86:0d:ad:ea:e9:8d:
                    50:71:06:5b:b2:4a:c5:a7:bd:36:54:4e:96:8a:2d:
                    ba:36:a1:8c:95:c3:69:53:94:9e:6a:0b:bc:00:46:
                    00:f2:88:19:69:f2:e6:b7:06:da:d8:7e:b6:0a:c7:
                    94:b8:13:3b:27:7b:9b:e8:02:a1:2b:19:de:7e:aa:
                    71:3f:ef:9d:0a:31:ad:da:67:16:e2:a0:07:85:5c:
                    a7:62:3a:d7:39:7b:0d:29:a1:84:31:ef:a7:41:be:
                    2d:b2:87:de:5c:e4:b2:c8:b4:ed:bd:83:ce:77:5c:
                    19:f8:52:0e:b1:8e:8e:27:a5:6f:a8:d0:06:b1:c5:
                    c7:94:d6:59:de:2c:7c:3d:69:9e:8b:84:55:7b:ea:
                    ca:1d:69:5d:3a:1c:14:54:85:b1:38:eb:d7:df:8b:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:16:B5:6F:CC:AF:AD:62:39:80:B8:E6:4D:D8:02:4C:C0:20:1C:1D
            X509v3 Authority Key Identifier:
                keyid:0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/3137392e34392e3135322e302f32322d3332203d3e20323634343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:17:d0:5c:9d:e9:17:82:60:46:66:6f:cc:4f:35:68:85:5e:
         28:71:85:a0:fc:2c:22:49:58:37:32:0b:92:bd:ff:9d:82:28:
         87:91:d9:f5:7b:95:38:8a:37:0d:b3:43:90:d7:07:33:9f:43:
         b0:03:96:85:f4:d4:79:1c:67:49:35:5a:d3:c5:84:03:36:32:
         f7:f0:4d:ce:6e:1a:e3:84:6c:8e:88:22:b5:4d:f2:61:bf:3a:
         4d:b2:20:1c:66:77:d5:7d:7b:91:15:9c:39:01:c4:94:99:38:
         50:01:26:c5:5f:55:5a:2a:a9:2c:6d:fc:71:33:d0:32:81:e0:
         a8:7c:6a:a2:10:64:73:47:50:02:14:d9:e3:79:ec:52:e6:01:
         ef:26:c3:23:d5:59:93:f5:26:c5:2b:4e:e2:ae:3a:60:45:27:
         72:10:08:d3:fa:fd:19:51:8a:70:36:c3:fe:75:f3:61:bc:de:
         53:dc:ca:39:28:27:82:f0:3f:64:0e:c2:ed:3a:2e:39:0f:ce:
         9c:4c:23:a5:b6:77:83:b0:46:d4:6c:68:7d:d0:06:19:26:2a:
         10:b1:e4:7f:2e:c0:b4:71:0e:21:75:61:ef:08:98:d9:d9:c7:
         44:73:e6:c6:e8:7a:00:a7:f4:27:68:5a:7d:23:e3:54:53:4e:
         e5:2e:f5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:44 2025 by rpki-client