Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/3137392e34382e38392e302f32342d3234203d3e20323731313137.roa
File:                     3137392e34382e38392e302f32342d3234203d3e20323731313137.roa (raw, json)
Hash identifier:          J7h6MWFCV0IuRJmcy9YuL20qXNXu4cvvgQBPUjRX7FE=
Subject key identifier:   25:EF:F9:95:44:50:9B:94:DD:E0:A6:52:CE:A1:45:66:3C:2F:15:B7
Certificate issuer:       /CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
Certificate serial:       29CE5853DE91FE35785A9B07652FC89232152068
Authority key identifier: F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/3137392e34382e38392e302f32342d3234203d3e20323731313137.roa
Signing time:             Mon 21 Aug 2023 22:51:08 +0000
ROA not before:           Mon 21 Aug 2023 22:46:08 +0000
ROA not after:            Mon 19 Aug 2024 22:51:08 +0000
asID:                     271117
IP address blocks:        179.48.89.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ce:58:53:de:91:fe:35:78:5a:9b:07:65:2f:c8:92:32:15:20:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
        Validity
            Not Before: Aug 21 22:46:08 2023 GMT
            Not After : Aug 19 22:51:08 2024 GMT
        Subject: CN=25EFF99544509B94DDE0A652CEA145663C2F15B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7f:bc:ba:0d:04:56:49:f9:eb:95:73:ae:85:
                    bc:8d:ed:a7:09:ef:2e:37:32:78:00:1b:bf:69:72:
                    52:9d:06:15:12:aa:9c:3d:76:17:c5:0c:cf:46:cd:
                    6a:ca:8e:a5:4d:00:be:fd:c0:d3:2d:6e:bd:5f:44:
                    02:a5:fd:52:6e:fa:3b:2a:b6:2d:9a:07:73:b4:00:
                    37:0a:9c:6e:f7:79:b2:b0:e6:12:2e:6f:f4:bc:e2:
                    e6:3d:2f:19:1c:fa:ce:71:47:e6:a3:78:ea:42:23:
                    17:0a:b2:f2:f1:74:66:6d:db:0d:a9:6d:50:dc:97:
                    6a:4d:e9:a3:18:cb:c7:26:d9:8b:f1:a3:6d:c4:67:
                    e7:0b:ae:02:ca:46:b7:3d:7c:3f:02:2e:5b:c5:2b:
                    5e:c0:e3:f0:5c:3c:9b:c9:5a:3d:a0:4d:b8:ec:04:
                    13:30:bc:97:3d:92:74:16:e9:90:34:fb:e7:89:0e:
                    b0:81:b6:21:86:c2:82:6c:ca:20:1d:99:e8:35:d1:
                    20:ee:4e:84:59:76:93:4b:18:d0:b3:99:e0:74:f8:
                    ff:1a:05:ce:c5:ed:f4:83:63:80:8a:d5:2e:58:9e:
                    7d:10:14:59:38:75:48:64:c2:02:59:f5:06:23:48:
                    a5:a9:da:01:0f:fb:cf:fb:be:3a:0c:44:97:85:a8:
                    02:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EF:F9:95:44:50:9B:94:DD:E0:A6:52:CE:A1:45:66:3C:2F:15:B7
            X509v3 Authority Key Identifier:
                keyid:F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/3137392e34382e38392e302f32342d3234203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:2c:9f:c6:48:2b:79:91:bf:7f:a1:22:ba:8d:36:df:c7:02:
         c4:22:62:9e:15:85:4d:44:f5:ed:4b:b9:94:54:5e:8a:68:a7:
         cd:0f:0a:be:e8:35:c8:b2:b6:94:cd:1a:9d:f8:c3:32:08:d3:
         b3:ca:84:c0:8a:08:47:b6:9d:88:27:f9:84:84:f0:fb:81:2f:
         8c:01:f1:c3:5d:3e:df:a2:31:8b:4c:80:cc:0b:ee:85:ee:3f:
         a8:a4:f3:32:35:c4:42:56:4e:7a:89:04:c2:86:84:3f:25:08:
         91:b5:56:46:e6:22:06:36:39:75:f2:e9:b2:13:2a:65:98:f3:
         18:bc:db:54:02:a1:ae:0e:4a:b2:81:0c:3d:ac:96:16:60:83:
         1e:88:3a:26:7e:e6:f3:e1:dc:9f:93:53:5d:90:8d:b9:90:39:
         96:5d:cc:63:09:07:bf:d5:04:80:c4:4d:68:1f:da:18:4b:6b:
         6e:c3:c2:a4:3a:f7:d9:93:b3:4e:0a:86:c3:e5:f7:6b:0d:29:
         52:6b:92:64:a8:1a:71:e8:de:d4:ae:9c:bd:ee:6c:4c:00:c2:
         4a:3a:c4:d4:52:35:48:69:3d:e3:f3:fa:68:4b:d9:91:ca:1d:
         d0:7d:0b:d2:0f:78:d8:b0:43:09:11:13:01:0d:f6:15:a8:89:
         68:f9:3e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:53:02 2025 by rpki-client