Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/3137392e34392e3139352e302f32342d3234203d3e20323731323738.roa
File:                     3137392e34392e3139352e302f32342d3234203d3e20323731323738.roa (raw, json)
Hash identifier:          eR+7QtWFVHL4ySbIarQgiWj36s/H12as6sDhKg1LiDc=
Subject key identifier:   4E:51:A8:67:B8:1C:AF:24:E2:E1:5A:07:51:34:5E:E5:DB:DC:88:D7
Certificate issuer:       /CN=EB1213403012BFA425D97330C003CB4FE5F5418D
Certificate serial:       37F695A92FC084A8C367C81753248E7CE97A5DFC
Authority key identifier: EB:12:13:40:30:12:BF:A4:25:D9:73:30:C0:03:CB:4F:E5:F5:41:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB1213403012BFA425D97330C003CB4FE5F5418D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/3137392e34392e3139352e302f32342d3234203d3e20323731323738.roa
Signing time:             Mon 29 Jul 2024 15:43:18 +0000
ROA not before:           Mon 29 Jul 2024 15:38:18 +0000
ROA not after:            Mon 28 Jul 2025 15:43:18 +0000
asID:                     271278
IP address blocks:        179.49.195.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f6:95:a9:2f:c0:84:a8:c3:67:c8:17:53:24:8e:7c:e9:7a:5d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB1213403012BFA425D97330C003CB4FE5F5418D
        Validity
            Not Before: Jul 29 15:38:18 2024 GMT
            Not After : Jul 28 15:43:18 2025 GMT
        Subject: CN=4E51A867B81CAF24E2E15A0751345EE5DBDC88D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4a:43:d1:43:9a:86:e6:2b:12:af:5e:72:16:
                    84:6c:e4:18:0b:03:5a:c3:6e:46:29:cf:ff:3c:f2:
                    4b:12:a5:eb:d4:41:24:f7:dc:14:9a:c8:91:e2:64:
                    08:9b:e2:cf:3e:ad:79:4f:8f:32:f0:71:37:e9:0e:
                    45:b7:47:be:fb:7d:0a:42:2e:a3:fb:55:99:1f:d1:
                    29:eb:c5:78:6b:5b:6a:99:43:1e:2e:73:06:87:e6:
                    db:05:f8:58:89:ea:a4:54:e3:90:07:f9:80:62:4c:
                    a5:4b:df:d6:ce:a8:10:33:dc:89:95:eb:94:de:37:
                    73:86:5d:c9:31:1a:19:9f:ea:3c:15:6c:33:34:11:
                    c9:78:8c:48:bb:d6:f6:d5:48:21:1f:16:71:e8:ca:
                    bc:f8:4f:3f:90:8d:05:5e:65:de:1f:55:63:99:17:
                    68:e8:cd:f5:87:84:4a:31:83:9c:b8:c5:5b:8a:fa:
                    12:14:28:bd:b9:5f:4a:df:2f:9c:48:30:3c:05:e7:
                    ab:c8:0d:5a:3c:46:d5:23:4b:00:ba:70:f6:4a:75:
                    10:e2:d8:05:4d:79:fb:ef:28:d5:9a:f8:57:6f:cc:
                    be:2e:83:26:67:21:cb:47:87:eb:da:20:ca:5b:8f:
                    fe:af:52:e5:6f:b9:f4:03:91:fa:44:78:af:4d:01:
                    26:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:51:A8:67:B8:1C:AF:24:E2:E1:5A:07:51:34:5E:E5:DB:DC:88:D7
            X509v3 Authority Key Identifier:
                keyid:EB:12:13:40:30:12:BF:A4:25:D9:73:30:C0:03:CB:4F:E5:F5:41:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/EB1213403012BFA425D97330C003CB4FE5F5418D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB1213403012BFA425D97330C003CB4FE5F5418D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/3137392e34392e3139352e302f32342d3234203d3e20323731323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:93:c5:44:9c:78:4b:8c:ba:1d:3d:ce:2a:3d:bb:b7:63:8d:
         29:ca:b7:36:f9:aa:b5:07:18:86:bc:8a:6d:2c:c0:df:45:d2:
         d1:8d:ac:c2:cc:83:e9:fd:99:09:9b:10:16:90:44:f0:38:34:
         32:29:4a:62:21:73:f7:d3:9f:23:f7:29:78:97:41:06:0c:37:
         93:1f:20:96:a7:68:77:c1:c2:04:33:72:5b:ff:ad:45:54:60:
         76:77:b3:fc:e3:a7:83:b1:c1:d7:8b:d9:12:bc:3d:cb:11:7e:
         c1:0c:69:95:24:be:ad:86:db:df:d1:21:58:01:b2:45:6d:49:
         59:2c:4d:de:68:8a:54:c5:b2:77:7a:44:96:f7:3b:30:46:77:
         31:3d:40:2e:01:77:e2:17:ee:77:59:12:72:41:8a:23:b6:2b:
         5f:a1:9d:0a:be:e8:9a:f8:af:41:76:20:98:c9:a4:47:3a:13:
         3a:1a:4c:14:db:11:94:b5:3e:1c:ee:d7:5a:c2:34:4e:d9:38:
         99:e3:9b:20:2d:02:30:d7:c4:05:31:06:9c:88:d1:ab:93:ea:
         55:ab:5c:c1:f1:44:b8:bb:0b:01:52:9d:1b:36:70:03:dc:e8:
         d8:ac:9c:92:cd:e1:40:4b:fd:fd:8f:7a:11:37:37:f5:a8:68:
         8e:bd:cb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:41 2025 by rpki-client