Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e34372e302f32342d3234203d3e20323632373630.roa
File:                     3137392e3130362e34372e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          0ifoKWo8qz5zY5K6PcrQ0qnILPwDlIffB8Sxt/LUH/s=
Subject key identifier:   F6:4C:27:A6:C9:20:CE:89:6D:6B:DF:1D:E9:2B:14:41:5A:9C:91:26
Certificate issuer:       /CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
Certificate serial:       44DC52015F820A7DA43C55CDCFE10A6617B765B3
Authority key identifier: C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e34372e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 22 Mar 2023 22:00:01 +0000
ROA not before:           Wed 22 Mar 2023 21:55:01 +0000
ROA not after:            Wed 20 Mar 2024 22:00:01 +0000
asID:                     262760
IP address blocks:        179.106.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:dc:52:01:5f:82:0a:7d:a4:3c:55:cd:cf:e1:0a:66:17:b7:65:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
        Validity
            Not Before: Mar 22 21:55:01 2023 GMT
            Not After : Mar 20 22:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:cf:85:29:df:7b:60:4d:65:96:bd:14:76:
                    3c:3a:6b:60:28:c5:26:60:67:10:99:a8:d1:d7:e0:
                    3c:b7:e7:2d:93:c5:d1:ec:68:6d:eb:f9:ca:61:18:
                    5d:b5:08:9f:7a:94:fd:43:3e:a5:e2:d4:20:15:89:
                    e5:23:8a:4f:ab:e5:70:18:b0:ce:f0:d0:2a:7e:c2:
                    44:6f:49:f6:93:d8:2f:00:d8:6c:db:d0:ce:30:26:
                    de:49:63:ae:a7:4d:33:5c:77:0c:60:ef:c1:4f:37:
                    f9:9d:93:b2:da:e4:fe:5c:38:b4:a3:a1:73:76:d3:
                    a7:d3:f0:c3:92:e8:3a:08:19:1a:06:02:03:42:be:
                    d2:ab:cd:c8:54:1b:ef:e3:e1:9b:15:dd:52:54:1e:
                    70:37:20:d8:f3:14:31:db:0c:03:c9:5e:e9:f8:0d:
                    c6:ad:99:6f:78:18:e5:cf:33:ac:19:fc:95:30:3e:
                    9a:2c:e3:e6:db:3f:e0:02:f7:d7:1b:47:a7:d2:28:
                    8d:2c:23:1e:fe:5b:10:2d:38:dc:dc:b5:c1:cd:9f:
                    63:40:78:38:59:f3:b7:a9:78:b5:ca:59:91:6f:e8:
                    d6:8d:d2:f2:dc:40:d3:a1:02:ad:c3:7f:ce:ea:ff:
                    86:ef:5d:eb:6d:cc:8a:6c:ad:c5:2c:c7:c3:e9:81:
                    ee:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4C:27:A6:C9:20:CE:89:6D:6B:DF:1D:E9:2B:14:41:5A:9C:91:26
            X509v3 Authority Key Identifier:
                keyid:C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e34372e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:98:fa:55:e2:48:48:6f:fa:26:90:db:1d:7f:ae:fa:fe:2a:
         6e:f3:41:94:11:11:16:76:0c:8a:16:a7:fe:bb:76:99:40:23:
         37:90:91:f5:b8:ea:ad:e3:1c:ad:87:39:5a:5f:c1:e2:26:73:
         ff:04:68:30:8c:b3:8b:eb:1e:8a:32:9a:51:63:d4:0a:68:fa:
         df:eb:99:6b:a5:5a:04:21:48:37:8e:1e:cc:fa:5c:4f:9d:44:
         ba:e9:8a:b4:60:1b:87:24:ae:e5:26:72:87:74:a3:18:2d:50:
         b7:00:76:92:cd:53:3d:95:c7:ea:d4:f5:0f:af:b5:f5:d8:e2:
         b6:ca:b8:77:7f:f2:1e:36:4d:41:8e:fe:6f:ac:cd:c8:bb:e6:
         cd:f6:ab:1f:8c:cf:19:90:e7:35:30:5a:fa:2e:d1:cb:31:b2:
         ad:43:2d:9d:09:cb:8a:fa:d2:3b:b8:c8:c9:71:a1:83:0f:af:
         d1:29:1f:ca:ca:4c:97:e6:a8:d8:8c:a5:6c:48:4b:f8:98:60:
         bf:db:99:8c:54:f3:ec:ad:31:8e:b1:c4:1e:04:90:61:2f:4a:
         52:c5:aa:df:bc:e2:32:e3:f6:5e:ca:96:a5:3a:a2:f1:0c:05:
         31:6c:09:fa:ca:82:5d:f6:16:06:e0:15:23:56:22:7f:d4:0b:
         a6:02:5d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:10 2025 by rpki-client