Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137392e39362e302e302f31372d3332203d3e203238333239.roa
File:                     3137392e39362e302e302f31372d3332203d3e203238333239.roa (raw, json)
Hash identifier:          nIJ4rY8GhHv8L1NYBJTgVttzrfbrGeJmFLIZyKfodeU=
Subject key identifier:   83:67:26:A6:FA:65:E1:FF:C0:D6:56:5B:46:F4:27:B4:7A:46:1E:E9
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       7391837158B4DC29816E1FC0154FD09531DD8762
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137392e39362e302e302f31372d3332203d3e203238333239.roa
Signing time:             Fri 07 Mar 2025 19:03:48 +0000
ROA not before:           Fri 07 Mar 2025 18:58:48 +0000
ROA not after:            Fri 06 Mar 2026 19:03:48 +0000
asID:                     28329
IP address blocks:        179.96.0.0/17 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:91:83:71:58:b4:dc:29:81:6e:1f:c0:15:4f:d0:95:31:dd:87:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 18:58:48 2025 GMT
            Not After : Mar  6 19:03:48 2026 GMT
        Subject: CN=836726A6FA65E1FFC0D6565B46F427B47A461EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:43:9b:77:6c:08:11:88:af:7b:f8:70:16:
                    2f:e2:3b:f2:8b:ed:13:12:8b:dc:d4:f6:49:4b:92:
                    90:a4:36:c5:09:28:2f:54:06:c0:76:f8:06:f8:fd:
                    5d:37:a0:f2:1b:47:5a:b1:97:56:d4:ce:76:61:48:
                    4b:1e:4b:53:b5:00:c8:14:0c:12:92:dc:9c:11:ed:
                    94:32:db:4a:55:12:8c:b2:08:da:50:f9:87:e4:06:
                    6b:4f:f6:28:ef:b3:2a:e7:70:2f:74:a8:04:ad:e3:
                    e0:b3:79:ee:9a:96:10:f5:be:a2:27:18:eb:05:13:
                    18:5b:e8:b3:bb:02:4b:6c:37:69:5d:9c:92:dd:7f:
                    44:79:d0:c8:19:57:03:bc:65:c8:a0:38:47:15:f2:
                    51:0a:93:74:a0:13:f9:b3:3f:33:25:76:d4:3b:9c:
                    18:7a:1f:49:a5:54:38:9c:be:a4:7e:6e:31:c3:6f:
                    61:63:35:67:55:61:b9:76:94:ab:09:23:5b:43:65:
                    a8:80:dd:a9:5b:a8:8a:fb:58:60:71:00:16:d0:89:
                    01:a0:88:7d:07:e8:52:80:94:48:5d:34:48:15:31:
                    fc:5b:12:cd:2a:7b:10:52:b1:76:aa:b8:2f:bc:3d:
                    f9:cb:2f:cc:49:1f:9e:ca:bb:65:c4:e4:42:eb:c1:
                    b9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:67:26:A6:FA:65:E1:FF:C0:D6:56:5B:46:F4:27:B4:7A:46:1E:E9
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137392e39362e302e302f31372d3332203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4b:81:89:76:07:a3:74:ab:3e:5e:ac:b9:93:3e:07:e1:8b:e5:
         89:83:47:7b:7c:c3:80:c0:39:29:b3:45:22:89:ec:f7:6e:76:
         75:88:8e:f5:c6:51:8c:db:37:7a:54:98:20:8a:33:82:b7:de:
         c9:74:56:09:2d:fc:1e:bb:bb:12:2c:1c:70:fb:95:9d:d7:24:
         4d:ef:d7:81:33:29:39:8d:a9:f8:46:f8:4d:3f:86:54:8d:e7:
         b7:76:81:17:78:5b:f2:08:d2:89:ba:c3:0f:cc:fa:65:ac:9e:
         79:e2:60:32:97:d8:95:cb:20:c9:5b:67:c3:00:9b:32:4b:f3:
         b3:40:9c:74:e1:95:d2:24:3f:0c:26:4e:3c:25:c2:71:76:ae:
         d7:12:2b:ef:10:97:bc:67:85:69:ea:fd:b3:4e:a1:e0:ca:b9:
         2e:d7:d4:ff:d7:74:b9:97:bc:4b:4c:c9:05:30:c1:23:a9:9b:
         39:76:93:9a:4d:d4:d1:40:cd:a2:45:00:8d:19:3a:ce:4b:ab:
         27:83:fd:ab:86:5f:61:9d:81:7b:ce:35:04:89:11:ca:18:44:
         30:a3:c7:8a:58:da:bb:8e:7c:ed:fc:b7:10:58:99:2f:50:9e:
         b5:91:df:d8:d1:cd:a2:0d:33:62:53:f9:24:8e:ce:c3:07:52:
         39:7c:74:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:38:04 2025 by rpki-client