Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa
File:                     3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          V2kIgDq0zf5vCGCrcLE975/zetk8d9OnxT+Gqzk9Gx8=
Subject key identifier:   5D:CE:B2:F2:6D:7D:E6:05:0A:67:FD:3D:73:93:31:4A:B2:1F:2D:3E
Certificate issuer:       /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial:       5907626E2A4E04B8B029B932D7760FD08D858BA9
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 Nov 2023 13:03:00 +0000
ROA not before:           Fri 03 Nov 2023 12:58:00 +0000
ROA not after:            Fri 01 Nov 2024 13:03:00 +0000
asID:                     28669
IP address blocks:        179.189.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:07:62:6e:2a:4e:04:b8:b0:29:b9:32:d7:76:0f:d0:8d:85:8b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
        Validity
            Not Before: Nov  3 12:58:00 2023 GMT
            Not After : Nov  1 13:03:00 2024 GMT
        Subject: CN=5DCEB2F26D7DE6050A67FD3D7393314AB21F2D3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:b7:17:e5:7a:45:d1:c4:4c:01:9c:93:b1:
                    2e:5e:a6:8d:3f:1d:ba:87:a8:bb:4c:4f:5b:5f:3f:
                    db:f9:5c:16:06:a5:e7:6b:a9:25:d1:bf:9f:92:89:
                    c7:92:03:1e:ff:3e:41:d5:34:6e:06:8e:e2:8a:84:
                    88:a9:ed:c6:c5:dc:e1:2f:77:49:6f:a8:90:36:53:
                    66:95:bd:b8:92:f2:0a:f1:97:63:db:d6:a3:f1:96:
                    59:30:8d:da:a3:a4:5d:13:17:cb:8b:4d:c3:8d:4c:
                    ea:17:52:f2:9f:17:4e:8f:f5:f3:de:b5:36:59:05:
                    48:4f:b8:06:6e:7f:36:67:04:84:25:93:00:0c:ec:
                    1b:f8:b4:7f:86:1a:9d:85:62:ae:fc:24:79:88:81:
                    e0:a5:79:0a:61:27:74:38:03:69:5a:b1:90:02:7b:
                    31:c8:2b:4c:39:0a:c5:53:b3:7a:3a:c4:05:a1:35:
                    02:63:73:95:0b:a3:03:c7:81:1f:55:a8:70:e9:32:
                    25:e4:a7:ad:67:9c:ba:7d:86:4f:c4:5f:6f:47:5d:
                    b2:d3:03:ad:2a:cb:93:02:2a:4b:f5:73:b8:35:97:
                    ed:63:8a:3c:97:d3:2f:48:5b:71:0b:cf:e6:92:ca:
                    40:89:76:88:d6:8a:1c:9b:aa:c4:c5:15:5a:a0:a4:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CE:B2:F2:6D:7D:E6:05:0A:67:FD:3D:73:93:31:4A:B2:1F:2D:3E
            X509v3 Authority Key Identifier:
                keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:57:d5:b3:57:86:af:a5:64:4e:78:06:c9:db:49:66:8f:ba:
         52:5a:09:63:4e:50:c5:1e:e3:40:2e:0d:3a:c7:7b:e1:0f:dd:
         d5:f8:08:53:f0:69:75:59:f1:66:c5:fb:80:49:0b:d6:93:77:
         74:74:84:61:45:03:52:c1:10:d6:c8:e6:05:de:f4:8e:df:bc:
         7b:ee:9e:ad:8a:92:7b:a9:e3:f3:65:d7:06:ab:59:86:6b:57:
         3b:c1:75:c3:d7:ad:9e:52:c9:13:09:2b:75:e3:61:a2:b5:6e:
         0f:08:b3:0c:64:1e:c7:51:e8:02:75:67:1b:56:ae:a6:78:ee:
         63:17:f8:c0:f5:91:5a:89:fb:ea:a7:63:40:7d:85:98:50:e0:
         c1:82:32:2c:65:e1:32:e0:9d:34:a0:01:7c:13:c6:21:7e:53:
         bc:4b:91:48:48:0a:7d:a3:42:56:2f:cd:09:e6:6b:6e:4c:37:
         70:26:4c:72:c2:b8:0c:ca:5a:3a:c0:d2:a7:19:3e:f0:aa:34:
         a9:c7:32:e3:e3:ce:89:d5:88:f3:7b:1e:70:13:4c:42:22:f6:
         2d:5e:b6:a0:c6:39:3a:96:3e:37:dd:09:a9:92:08:55:4b:f0:
         84:a5:10:98:08:a6:97:2e:77:8e:77:06:29:5a:2f:5d:51:ee:
         9c:af:7b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:11:56 2025 by rpki-client