Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/3137392e3130372e36342e302f32302d3234203d3e203532353433.roa
File:                     3137392e3130372e36342e302f32302d3234203d3e203532353433.roa (raw, json)
Hash identifier:          1h+OqwWHWXN9P6jn35Yvqn1yO8YzkFct9f7prlcnSo8=
Subject key identifier:   1D:CC:82:94:5C:ED:18:0A:0F:68:51:7A:7F:F4:2A:4C:ED:29:D9:FE
Certificate issuer:       /CN=2FF599B83A0FDC1744A3B48099E107CF659AB46E
Certificate serial:       55A27F7A71A7D535690D837450E2C0D9512E4430
Authority key identifier: 2F:F5:99:B8:3A:0F:DC:17:44:A3:B4:80:99:E1:07:CF:65:9A:B4:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF599B83A0FDC1744A3B48099E107CF659AB46E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/3137392e3130372e36342e302f32302d3234203d3e203532353433.roa
Signing time:             Tue 06 Feb 2024 13:00:01 +0000
ROA not before:           Tue 06 Feb 2024 12:55:01 +0000
ROA not after:            Tue 04 Feb 2025 13:00:01 +0000
asID:                     52543
IP address blocks:        179.107.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a2:7f:7a:71:a7:d5:35:69:0d:83:74:50:e2:c0:d9:51:2e:44:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF599B83A0FDC1744A3B48099E107CF659AB46E
        Validity
            Not Before: Feb  6 12:55:01 2024 GMT
            Not After : Feb  4 13:00:01 2025 GMT
        Subject: CN=1DCC82945CED180A0F68517A7FF42A4CED29D9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:2c:30:5b:23:57:e3:19:75:c6:e7:49:91:
                    0a:b2:15:dd:d2:c6:7b:88:b7:94:f5:ce:6b:6e:6f:
                    07:1c:56:86:66:15:5d:55:1c:21:ff:84:94:1e:8b:
                    e4:17:6f:5d:fd:b6:78:57:9b:32:1c:ca:06:0e:77:
                    ae:b5:49:1e:4c:7c:4b:60:d4:35:5b:f5:c2:49:82:
                    67:f3:2c:b4:9e:50:38:b3:f1:82:9e:8a:1f:d6:1b:
                    fe:38:a7:6e:38:18:ef:4b:2f:b8:d6:b0:c0:77:a4:
                    d8:5c:be:96:18:e0:e7:a9:6d:1e:f7:e6:43:c1:e8:
                    4c:4a:9b:fb:43:c0:d5:40:24:71:e4:e3:d3:9a:ae:
                    27:5a:2c:2f:3d:1b:92:4d:5c:0d:7f:fa:f9:91:e8:
                    f5:2e:a3:75:f1:03:71:98:98:6f:a3:e0:9d:ee:91:
                    b7:f9:41:e3:ca:ed:8a:8d:2b:f4:81:aa:95:ee:33:
                    76:19:fd:8b:43:33:34:13:23:d3:39:5d:91:60:7c:
                    ce:19:e5:f6:d9:e1:d7:f7:31:cb:ce:6d:49:82:16:
                    70:fd:9b:44:f3:04:6d:40:18:4b:07:28:b7:24:fe:
                    e7:f1:af:41:00:92:30:41:bf:76:5e:71:a9:88:fe:
                    f4:eb:c9:39:41:87:c2:7c:cb:95:68:76:33:bc:fc:
                    8c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CC:82:94:5C:ED:18:0A:0F:68:51:7A:7F:F4:2A:4C:ED:29:D9:FE
            X509v3 Authority Key Identifier:
                keyid:2F:F5:99:B8:3A:0F:DC:17:44:A3:B4:80:99:E1:07:CF:65:9A:B4:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/2FF599B83A0FDC1744A3B48099E107CF659AB46E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF599B83A0FDC1744A3B48099E107CF659AB46E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/3137392e3130372e36342e302f32302d3234203d3e203532353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:41:90:11:3e:d9:8a:ae:5f:6b:ec:21:3e:67:bb:25:3a:5c:
         2d:ce:33:d9:a9:eb:3e:1d:b6:b6:f4:39:3c:aa:c8:35:51:43:
         bb:cf:69:48:51:25:96:5d:85:aa:ca:db:f1:23:73:6f:e4:38:
         60:a2:80:43:df:91:c8:e7:d2:93:54:23:07:c1:f3:41:14:bd:
         90:08:34:2e:1a:a1:5d:ec:32:a5:34:db:4e:d5:75:45:9f:0c:
         1a:c3:20:53:64:59:c4:27:32:1c:93:09:e9:c9:d2:4b:e0:b8:
         d8:fb:8a:14:5d:41:9c:8b:3f:85:30:d7:e1:90:a0:7e:75:c4:
         56:eb:6e:19:ee:0e:19:e1:58:90:99:af:32:66:89:cb:34:9a:
         cf:f0:1e:4e:76:d0:8f:47:f8:02:86:84:36:87:3c:0c:fc:5f:
         a1:a8:3c:d8:a0:11:1b:42:67:f9:dd:2c:cb:8a:e9:ae:86:ea:
         b9:35:31:12:60:1e:1e:7f:eb:82:78:9b:40:17:00:2e:b3:c4:
         0d:eb:01:24:b6:b7:d2:0c:9f:53:de:ae:88:d8:02:ef:95:be:
         16:2e:51:b1:c1:c9:b2:8c:da:cd:55:5c:53:f8:7f:bf:c8:6d:
         9f:94:dd:5b:c5:6c:ee:2c:1c:3b:58:99:5b:93:6d:cb:8d:93:
         4c:b9:df:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:53:46 2025 by rpki-client