Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/3137392e3130372e36342e302f32302d3332203d3e203532353433.roa
File:                     3137392e3130372e36342e302f32302d3332203d3e203532353433.roa (raw, json)
Hash identifier:          pc6i3mzr9xMg7oubg4ox9Y+XQUtOrdQv0TL7HllxT8Q=
Subject key identifier:   F4:CD:C1:96:40:E5:77:6A:C2:3E:A2:4D:04:AC:D2:17:E0:72:3F:A3
Certificate issuer:       /CN=81137099185BA96C8C5770E8AC94BDEB65280CDE
Certificate serial:       373BE7FC805B17B6059ACFFEC26AE6A3C94D7C46
Authority key identifier: 81:13:70:99:18:5B:A9:6C:8C:57:70:E8:AC:94:BD:EB:65:28:0C:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81137099185BA96C8C5770E8AC94BDEB65280CDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/3137392e3130372e36342e302f32302d3332203d3e203532353433.roa
Signing time:             Mon 10 Feb 2025 17:11:08 +0000
ROA not before:           Mon 10 Feb 2025 17:06:08 +0000
ROA not after:            Mon 09 Feb 2026 17:11:08 +0000
asID:                     52543
IP address blocks:        179.107.64.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3b:e7:fc:80:5b:17:b6:05:9a:cf:fe:c2:6a:e6:a3:c9:4d:7c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81137099185BA96C8C5770E8AC94BDEB65280CDE
        Validity
            Not Before: Feb 10 17:06:08 2025 GMT
            Not After : Feb  9 17:11:08 2026 GMT
        Subject: CN=F4CDC19640E5776AC23EA24D04ACD217E0723FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:91:c6:23:c0:29:76:5d:0d:36:7d:70:b6:
                    56:ad:3b:33:46:15:5a:dc:3f:55:32:a6:6f:ae:fa:
                    5e:fa:66:f7:d0:ea:c6:05:79:ba:36:c7:e5:40:b8:
                    95:a5:6b:5e:1e:df:19:a0:39:d7:91:56:b5:38:80:
                    dd:34:5a:ab:2c:cf:a0:a8:b9:82:43:ed:f9:51:ee:
                    38:99:22:a5:93:c6:a8:9b:8f:4e:2a:c3:71:09:2d:
                    ca:5a:13:82:66:dc:a6:01:a3:6c:0a:b0:23:a3:25:
                    d9:9e:e4:23:e0:b0:83:27:b2:b3:98:65:69:46:76:
                    ef:04:9f:45:83:e1:47:7b:22:30:01:e3:cf:a6:a0:
                    3d:6e:87:9d:c1:98:7a:8b:98:3e:d3:c5:30:a6:70:
                    4c:cd:de:d0:a4:48:e3:f8:fd:e3:9a:49:ff:a5:c4:
                    96:d0:9a:2b:06:c9:72:70:99:8c:91:a0:76:2d:9f:
                    fe:e4:f7:42:e9:3b:42:3a:4d:3a:72:e5:75:d1:90:
                    2c:c3:d4:26:99:28:71:be:38:b0:d4:cd:09:60:5e:
                    0d:a7:84:59:b3:47:21:cb:02:96:bf:17:c7:3b:80:
                    3c:f9:bc:6e:45:5a:e1:da:b7:58:8c:1b:1c:a4:e6:
                    06:c2:e1:d3:db:28:f5:5c:7f:16:f6:bd:26:f8:3f:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CD:C1:96:40:E5:77:6A:C2:3E:A2:4D:04:AC:D2:17:E0:72:3F:A3
            X509v3 Authority Key Identifier:
                keyid:81:13:70:99:18:5B:A9:6C:8C:57:70:E8:AC:94:BD:EB:65:28:0C:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/81137099185BA96C8C5770E8AC94BDEB65280CDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81137099185BA96C8C5770E8AC94BDEB65280CDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/3137392e3130372e36342e302f32302d3332203d3e203532353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:16:5f:24:88:8b:13:84:29:89:d1:5b:a4:fa:a4:3e:ff:61:
         1d:a2:d9:be:91:67:a8:01:a0:46:45:cd:ff:ee:b0:0e:11:52:
         e3:a1:0b:07:56:39:b5:b3:11:82:98:41:99:72:4e:77:ee:c8:
         82:87:09:13:18:18:f7:33:a5:df:42:20:01:ee:5e:f4:57:11:
         bd:1f:7e:c9:da:e7:5e:68:89:b0:f9:1a:3b:a6:a7:36:a2:6f:
         dc:d9:b3:fe:93:8d:7d:a3:45:92:15:cf:17:c3:f5:c8:c9:74:
         8f:11:bb:cb:1a:87:c1:55:2b:3b:f5:98:c3:b9:39:3d:1d:3b:
         ba:f9:98:36:03:3b:03:e7:d1:28:e0:9f:70:2f:f8:5b:6b:e7:
         c6:6c:31:53:bf:98:86:2d:57:87:1d:c5:52:fc:b1:f7:38:13:
         f0:35:b5:d8:e8:7a:d6:35:c1:26:83:28:69:89:d9:e3:14:32:
         bb:e1:de:b6:01:fa:5d:a5:63:08:59:fc:0c:ce:27:ff:21:e6:
         d9:3f:84:92:78:cc:67:77:54:14:2b:35:5b:51:1f:e8:b6:d3:
         34:d0:c6:9a:fa:41:9f:c3:c6:0e:6c:1d:14:18:28:91:4a:43:
         98:8f:0c:2d:b4:1c:2d:f2:6a:12:56:53:50:16:f2:f9:6a:dd:
         88:ef:6b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:08:21 2025 by rpki-client