Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137392e3132372e36342e302f32312d3234203d3e203238323837.roa
File:                     3137392e3132372e36342e302f32312d3234203d3e203238323837.roa (raw, json)
Hash identifier:          eqWnJWRQnL+F8R32V4P73d7ykr2BX82W6DEVedN17pE=
Subject key identifier:   AB:BC:C9:14:DA:2C:F6:C4:0C:E8:88:EC:16:52:6F:F9:F4:80:FC:AA
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       268EBC4FA95C41B0199C37FD0111522CB1E88397
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137392e3132372e36342e302f32312d3234203d3e203238323837.roa
Signing time:             Thu 31 Oct 2024 17:24:28 +0000
ROA not before:           Thu 31 Oct 2024 17:19:28 +0000
ROA not after:            Thu 30 Oct 2025 17:24:28 +0000
asID:                     28287
IP address blocks:        179.127.64.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8e:bc:4f:a9:5c:41:b0:19:9c:37:fd:01:11:52:2c:b1:e8:83:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:19:28 2024 GMT
            Not After : Oct 30 17:24:28 2025 GMT
        Subject: CN=ABBCC914DA2CF6C40CE888EC16526FF9F480FCAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b8:17:ee:46:0f:33:ae:c2:a7:88:9b:c6:77:
                    a5:f7:19:e4:fa:c5:51:4c:fe:ce:44:f1:a2:19:14:
                    ba:fc:2b:5b:2e:b2:a1:e5:ec:e4:17:97:4c:0a:f3:
                    cb:0c:59:7e:59:a8:17:13:be:4b:3c:56:1f:d3:c3:
                    b6:ea:08:2c:51:86:63:c6:d0:f5:f2:e0:a9:0f:79:
                    2d:a9:a5:df:91:f8:c7:2f:b1:4d:e8:89:32:4c:d7:
                    c9:ab:77:f2:97:7d:ef:98:82:82:92:16:43:f2:67:
                    95:9f:13:d5:24:93:c1:1f:c4:11:8c:7e:c4:15:1d:
                    67:69:69:38:e7:d7:b9:dc:fd:1b:90:ae:dd:7a:37:
                    53:ac:3b:9b:c3:69:01:bd:e9:13:27:34:82:a0:32:
                    a3:a8:66:4e:69:98:06:ca:11:ad:ac:5b:6f:8d:00:
                    07:9c:67:d2:71:be:d6:c5:a5:43:2a:8c:9b:19:e6:
                    6c:ca:f6:c1:96:fa:f3:bb:5e:f3:a4:7a:3a:0e:be:
                    76:3b:0a:63:81:05:04:6a:5e:a2:34:0d:35:38:cd:
                    fc:d8:6e:4b:6c:ec:28:20:d3:02:a1:ec:db:82:f4:
                    f5:37:a6:23:6b:da:08:bd:f6:3d:31:ae:7a:58:b9:
                    ae:ef:e5:4c:ed:c9:a1:a5:d2:3f:66:dd:cf:c0:2b:
                    6f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BC:C9:14:DA:2C:F6:C4:0C:E8:88:EC:16:52:6F:F9:F4:80:FC:AA
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137392e3132372e36342e302f32312d3234203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:9c:6e:9a:5a:47:2e:98:d2:1e:28:1a:9c:cc:57:bd:23:2a:
         09:8a:75:13:8b:89:16:91:1e:e5:c1:19:c7:a4:32:55:7c:ea:
         4b:c6:82:51:51:3f:8c:e4:98:fe:09:8d:c3:f9:14:08:33:c7:
         8d:f0:de:0c:c8:3f:03:ea:ed:3e:57:73:40:7d:ff:1c:e7:fb:
         60:94:56:3d:19:e8:42:d7:6e:46:cd:50:fa:1c:93:d9:a7:c1:
         78:95:8c:a7:0b:e8:cf:2c:61:1a:3f:61:4c:d7:e0:6c:94:22:
         a8:03:36:b2:0b:7b:9e:28:90:85:87:2b:4b:cf:2b:1b:fa:1a:
         3f:db:9f:46:a5:a2:1e:8f:20:dd:2f:46:09:d7:79:3d:26:12:
         7f:33:ba:98:fe:1f:69:05:b5:ae:dd:a5:20:86:4f:4b:29:77:
         f0:dc:f0:49:b4:af:58:5e:93:07:bf:a2:f0:c5:80:e8:ae:94:
         8e:a5:91:55:50:35:bb:90:9e:4d:39:4f:19:25:c8:b9:0d:12:
         d9:c4:39:fe:83:79:eb:fc:54:41:2c:b2:23:70:c4:40:7e:3c:
         be:be:6e:05:92:77:ae:a9:23:75:5c:49:eb:f0:9b:e2:5e:5d:
         56:db:2a:e7:63:d7:ab:8c:c8:53:a7:91:49:f8:28:64:f6:a5:
         20:92:d5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:08:31 2025 by rpki-client