Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234302e302f32312d3231203d3e20323633343231.roa
File:                     3137392e3139312e3234302e302f32312d3231203d3e20323633343231.roa (raw, json)
Hash identifier:          hoQHld/qazI8b1fikZJPjcC0zQMIqd2zBn4G/ARF9aA=
Subject key identifier:   25:35:40:B6:76:D0:09:F3:72:A6:18:F4:66:C8:7B:0F:4B:41:A6:C5
Certificate issuer:       /CN=A0FF9A83436226FF19D020B34271420BD55D7D05
Certificate serial:       6C8010288B2AD90DF0F7C646DF0F48D471739693
Authority key identifier: A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234302e302f32312d3231203d3e20323633343231.roa
Signing time:             Thu 25 Jul 2024 01:01:27 +0000
ROA not before:           Thu 25 Jul 2024 00:56:27 +0000
ROA not after:            Thu 24 Jul 2025 01:01:27 +0000
asID:                     263421
IP address blocks:        179.191.240.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:80:10:28:8b:2a:d9:0d:f0:f7:c6:46:df:0f:48:d4:71:73:96:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0FF9A83436226FF19D020B34271420BD55D7D05
        Validity
            Not Before: Jul 25 00:56:27 2024 GMT
            Not After : Jul 24 01:01:27 2025 GMT
        Subject: CN=253540B676D009F372A618F466C87B0F4B41A6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:b1:00:d6:46:66:30:63:97:ea:ca:81:d2:
                    e2:5b:a0:e6:cd:96:92:39:4f:ac:36:0b:d6:b5:07:
                    5f:91:cf:70:44:86:2f:f1:67:f3:7b:92:0a:28:0c:
                    43:68:5b:bc:5d:06:00:eb:9b:dc:c2:61:9f:b4:a8:
                    fa:69:eb:d7:e4:90:5d:35:18:89:1a:86:67:c2:05:
                    8c:8c:00:eb:5e:b6:38:fa:76:9f:66:e8:33:45:aa:
                    04:f8:59:11:a5:3a:a5:f1:7a:80:9f:f7:2d:ea:4d:
                    62:1e:3c:93:5e:e6:59:99:a0:08:b7:9a:81:61:ca:
                    cd:a7:ab:32:1b:45:88:5e:bc:d6:58:1c:46:c8:ec:
                    0c:b8:19:15:11:c5:6b:1c:29:8e:df:57:05:d2:0d:
                    b4:1a:29:5d:08:59:0a:20:a2:83:78:3c:a1:d6:d2:
                    34:2c:1c:21:93:2b:89:47:1b:23:0c:97:8e:b1:be:
                    f7:42:e4:fd:d3:f1:54:6b:4e:de:e5:39:4c:b1:cb:
                    6e:ea:d4:82:e4:29:ce:92:cb:26:82:04:57:d4:0f:
                    a3:42:70:a7:48:87:9a:98:30:26:4e:5c:52:f6:a1:
                    c6:65:b2:8f:b2:9d:4b:3f:72:0c:2b:1a:87:ab:31:
                    f0:2a:e3:25:37:1e:20:f6:dc:35:e1:54:82:76:4e:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:35:40:B6:76:D0:09:F3:72:A6:18:F4:66:C8:7B:0F:4B:41:A6:C5
            X509v3 Authority Key Identifier:
                keyid:A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/A0FF9A83436226FF19D020B34271420BD55D7D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3234302e302f32312d3231203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         20:79:5e:24:34:a1:d1:d2:c6:e7:10:5a:3e:3d:45:52:76:76:
         d6:68:a5:03:89:bf:68:e8:4a:9e:24:fe:d2:5c:b9:25:83:e3:
         33:39:ae:a6:45:4e:b7:d7:ef:42:83:46:58:12:62:90:f5:73:
         fc:66:af:9a:2a:c7:d8:33:18:60:ea:13:ad:84:cd:c2:f5:78:
         b2:80:f4:92:22:27:82:59:9e:47:ac:6a:d6:af:6e:d2:6c:71:
         83:43:cd:7d:d1:cf:9d:14:12:20:4e:d6:70:19:9f:aa:2f:6b:
         5e:d7:91:dc:7b:68:5d:5c:c5:ed:dd:f6:dc:f0:0e:15:65:0b:
         8c:15:b7:17:6a:25:0e:cb:f0:86:e5:ff:0b:f9:f3:de:af:39:
         58:d4:c2:8f:52:09:81:7f:74:08:a8:f5:18:25:21:e5:fb:23:
         fd:c5:cb:a8:92:69:5d:67:44:87:8d:6c:36:8d:b4:b7:b2:15:
         c2:23:a6:a6:6c:df:ce:b6:02:4a:2f:94:19:7e:be:3d:71:57:
         83:00:58:67:69:c7:21:3e:8a:cd:34:5a:17:a0:3f:28:49:78:
         5d:f8:28:93:e4:b0:ae:98:1e:60:48:69:0a:6e:28:cb:33:5c:
         37:91:a0:58:9e:bd:0b:0e:eb:ef:34:13:b2:c6:07:ee:65:77:
         93:d0:d1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:44 2025 by rpki-client