Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/3137302e37392e39332e302f32342d3234203d3e20323636323936.roa
File:                     3137302e37392e39332e302f32342d3234203d3e20323636323936.roa (raw, json)
Hash identifier:          hI2Nd6yhC1ZqQ7TnVkxYnjA8pAM69ASBX3EGougZ3z0=
Subject key identifier:   62:CB:AE:18:A2:B5:B5:BA:E6:ED:00:53:24:F2:1D:15:28:91:E0:7C
Certificate issuer:       /CN=578D34CF76BA5E5EEFCC4F2B657185989703AE74
Certificate serial:       759241065BAF9CE2F4E161D3DEACFC5651ED535E
Authority key identifier: 57:8D:34:CF:76:BA:5E:5E:EF:CC:4F:2B:65:71:85:98:97:03:AE:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/3137302e37392e39332e302f32342d3234203d3e20323636323936.roa
Signing time:             Thu 12 Dec 2024 14:48:31 +0000
ROA not before:           Thu 12 Dec 2024 14:43:31 +0000
ROA not after:            Thu 11 Dec 2025 14:48:31 +0000
asID:                     266296
IP address blocks:        170.79.93.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:92:41:06:5b:af:9c:e2:f4:e1:61:d3:de:ac:fc:56:51:ed:53:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578D34CF76BA5E5EEFCC4F2B657185989703AE74
        Validity
            Not Before: Dec 12 14:43:31 2024 GMT
            Not After : Dec 11 14:48:31 2025 GMT
        Subject: CN=62CBAE18A2B5B5BAE6ED005324F21D152891E07C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a1:4a:a8:a1:00:c7:ff:87:57:2d:44:f3:50:
                    cf:62:6f:fb:56:22:b8:f5:6d:c7:fc:b2:aa:58:77:
                    62:db:ef:9d:22:27:e1:54:8a:ad:0d:cf:ad:6a:e2:
                    46:10:0f:6d:7c:85:28:97:5d:ee:74:b5:68:8f:ad:
                    d6:04:5e:ed:3c:a5:89:2c:4e:e7:95:fd:69:2d:93:
                    6b:36:c9:fc:ab:ea:bb:85:60:99:9a:96:e7:76:a8:
                    64:00:8f:17:47:54:69:95:79:c8:5c:87:f6:7d:2a:
                    df:75:0f:4a:d9:d6:1c:65:87:ee:ff:be:0e:17:c8:
                    6c:e9:1c:d1:95:02:07:57:21:31:c6:e5:4c:2d:3e:
                    57:cd:3a:95:63:39:6c:cd:a3:af:70:9e:01:f6:a8:
                    47:ca:ac:f4:4d:f3:5b:74:a9:2b:67:aa:ba:a0:75:
                    11:fe:81:c5:38:d9:a0:e6:fe:f9:9e:71:6d:74:0d:
                    b9:93:50:bb:5c:dc:f9:b4:c3:d8:56:e0:16:8d:ed:
                    37:07:e3:e8:b8:f1:88:8d:29:3e:50:7c:4e:7b:78:
                    f4:7c:70:3d:fa:d4:99:4d:40:86:b4:71:62:95:1f:
                    b3:11:c4:1d:27:8c:de:eb:fb:3c:31:5b:cd:bb:52:
                    4f:8a:ef:e6:5f:8a:d5:06:f7:f7:c2:74:4f:5a:8d:
                    2b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CB:AE:18:A2:B5:B5:BA:E6:ED:00:53:24:F2:1D:15:28:91:E0:7C
            X509v3 Authority Key Identifier:
                keyid:57:8D:34:CF:76:BA:5E:5E:EF:CC:4F:2B:65:71:85:98:97:03:AE:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/3137302e37392e39332e302f32342d3234203d3e20323636323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:c3:ad:37:11:99:28:7d:e3:f9:fd:da:04:8d:b2:5a:40:9d:
         44:bd:65:9b:0c:9f:2a:92:20:1b:c8:d7:5e:67:41:4d:f3:c7:
         ab:3f:5b:61:84:bc:c2:4b:05:13:a4:65:91:87:98:61:7f:3b:
         91:9c:48:12:2b:1a:a9:99:30:c0:0b:32:14:03:47:3f:a4:8f:
         96:42:e9:7b:99:ae:ce:eb:0d:9c:ba:d4:8e:d1:94:b4:a4:2c:
         a0:63:30:89:bc:1b:da:2f:54:a1:f4:41:1a:24:df:04:4b:d2:
         1b:4b:21:06:03:76:6a:c3:49:aa:04:c7:db:07:a3:2f:b0:aa:
         90:a6:03:a0:4d:f3:9b:79:e2:ad:f4:19:6d:47:6c:65:3d:b5:
         d2:db:e7:dc:8f:f4:cd:96:8c:ba:79:24:0a:ed:7f:87:e4:3d:
         31:f2:92:37:87:77:d3:4a:1e:b3:49:0e:c4:84:42:8f:c5:7d:
         f5:4a:d2:d8:a1:3f:bb:12:cd:93:03:65:8f:54:09:70:57:16:
         18:ca:cb:52:7c:63:a0:0c:83:8b:48:dd:89:f0:7f:7e:72:26:
         0f:d6:06:18:06:7d:21:fc:74:27:de:9b:c9:33:1a:76:8b:4a:
         23:38:b8:f7:f9:17:04:02:05:37:dd:a7:c7:82:06:e1:b9:01:
         61:ae:d1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:51 2025 by rpki-client