Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/3137392e36332e39362e302f32322d3232203d3e20323731353534.roa
File:                     3137392e36332e39362e302f32322d3232203d3e20323731353534.roa (raw, json)
Hash identifier:          /B0HmTGM1EQp1Rwnt47pW/nEAbCcEu6Z2cnoPbeX6a0=
Subject key identifier:   DB:25:3E:E5:9E:C0:5C:9A:FA:2A:55:BD:2C:9D:38:01:22:3D:56:3C
Certificate issuer:       /CN=2BB3C6E1B3894D0F1B92F0735B619C07440E0614
Certificate serial:       3DCA12D7CBEA87D582AEF05EC5EF1BACFA7EA548
Authority key identifier: 2B:B3:C6:E1:B3:89:4D:0F:1B:92:F0:73:5B:61:9C:07:44:0E:06:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BB3C6E1B3894D0F1B92F0735B619C07440E0614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/3137392e36332e39362e302f32322d3232203d3e20323731353534.roa
Signing time:             Tue 02 May 2023 19:08:15 +0000
ROA not before:           Tue 02 May 2023 19:03:15 +0000
ROA not after:            Tue 30 Apr 2024 19:08:15 +0000
asID:                     271554
IP address blocks:        179.63.96.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ca:12:d7:cb:ea:87:d5:82:ae:f0:5e:c5:ef:1b:ac:fa:7e:a5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB3C6E1B3894D0F1B92F0735B619C07440E0614
        Validity
            Not Before: May  2 19:03:15 2023 GMT
            Not After : Apr 30 19:08:15 2024 GMT
        Subject: CN=DB253EE59EC05C9AFA2A55BD2C9D3801223D563C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d7:84:42:0b:a7:1a:57:dd:8f:63:7c:d0:a5:
                    5a:01:a6:71:15:a4:46:cc:cf:75:7a:82:50:c0:4f:
                    8e:36:05:a7:f3:c2:ef:05:f1:9f:1b:f3:c4:7f:98:
                    41:d8:aa:be:ae:73:4e:2b:4b:a3:12:c7:1d:1c:b7:
                    46:90:1c:30:4d:24:c8:18:a3:cf:1e:18:b4:bb:a5:
                    fd:0e:aa:d1:67:5d:b1:7b:5e:1d:e8:5b:0f:ef:dd:
                    ce:ee:37:f5:4b:67:dd:ae:89:13:78:dd:2b:a3:e9:
                    62:74:35:80:89:f1:77:a9:b8:0a:9d:f2:08:f5:95:
                    47:45:c3:93:8e:21:ff:a6:97:bd:28:6b:9f:17:77:
                    e0:d3:95:5e:04:ab:dc:0f:95:1e:2e:ec:fd:d0:51:
                    c5:68:18:83:03:67:f6:17:90:95:ef:01:3d:df:42:
                    c3:d3:40:90:c7:ac:88:b9:ed:81:6c:02:04:22:73:
                    ff:85:96:60:ff:12:e9:24:8e:31:ee:91:77:d7:24:
                    6d:15:aa:58:62:87:3f:e0:82:9c:88:c7:fa:c6:90:
                    1c:07:ca:ea:20:02:7b:b3:ed:12:e7:75:10:27:6e:
                    4e:73:0e:a5:90:be:bd:82:ba:44:0b:b7:66:5e:6a:
                    11:9c:a4:3b:17:2f:ae:6f:e9:6d:d9:7f:0c:1c:22:
                    93:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:25:3E:E5:9E:C0:5C:9A:FA:2A:55:BD:2C:9D:38:01:22:3D:56:3C
            X509v3 Authority Key Identifier:
                keyid:2B:B3:C6:E1:B3:89:4D:0F:1B:92:F0:73:5B:61:9C:07:44:0E:06:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/2BB3C6E1B3894D0F1B92F0735B619C07440E0614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BB3C6E1B3894D0F1B92F0735B619C07440E0614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/3137392e36332e39362e302f32322d3232203d3e20323731353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:4a:1d:f6:99:2d:61:71:73:c8:46:1d:9b:14:99:a5:10:7d:
         25:e5:b3:71:d3:69:45:d9:d8:8c:ee:da:b3:fd:b4:1d:08:b6:
         9f:9e:41:09:0d:f3:9f:14:7c:4c:9c:9c:c7:1b:2f:bd:b2:77:
         d2:18:d2:65:77:5e:c0:a2:fb:f4:ec:d1:d4:43:0d:a7:ef:84:
         5e:06:78:4c:2a:0a:d4:7f:5f:4a:58:37:b6:2e:88:d6:aa:1d:
         90:f5:fc:5d:71:0f:bc:46:18:ea:a0:40:b6:86:95:50:72:e2:
         54:4e:c9:dc:e5:c5:21:9e:c3:83:d9:ac:97:56:a4:66:9f:b3:
         fe:1c:14:6b:47:42:1f:65:ff:f9:7f:29:1a:02:04:d2:83:7c:
         60:4e:c2:92:c3:0f:4a:a5:8c:b8:1c:01:72:31:e7:bf:f4:bd:
         0c:1b:28:13:f9:36:00:22:3e:c8:e9:3a:7d:a4:fd:eb:11:76:
         01:26:d0:15:56:bc:ca:98:d9:ff:a9:f6:4f:bf:e7:9b:ba:13:
         31:8c:ec:f2:f3:e2:e7:67:a9:ac:c4:77:0b:3e:b9:85:45:81:
         05:a7:9e:5b:bb:1e:a3:07:51:d3:f9:65:40:99:aa:f5:98:ae:
         bb:b8:d3:01:ae:68:44:47:08:db:0a:a8:40:24:a3:80:5b:e2:
         fe:35:f5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:35:03 2025 by rpki-client