Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/1/3137392e302e3139302e302f32342d3234203d3e20323730383538.roa
File:                     3137392e302e3139302e302f32342d3234203d3e20323730383538.roa (raw, json)
Hash identifier:          I+fnROOaCsDDTEksWUgm4TYdNgb0fqNwPSZ9of+cfjA=
Subject key identifier:   64:74:BC:90:A8:A3:0D:B2:6B:61:41:0C:21:45:55:A6:95:0B:9A:8B
Certificate issuer:       /CN=D93EABAFE6C4BBB0E20474DA146E626A7B718C49
Certificate serial:       68DAFAF8A39AEE33789D80BA7B566CFCFCF771E5
Authority key identifier: D9:3E:AB:AF:E6:C4:BB:B0:E2:04:74:DA:14:6E:62:6A:7B:71:8C:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93EABAFE6C4BBB0E20474DA146E626A7B718C49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/1/3137392e302e3139302e302f32342d3234203d3e20323730383538.roa
Signing time:             Fri 06 Dec 2024 12:30:32 +0000
ROA not before:           Fri 06 Dec 2024 12:25:32 +0000
ROA not after:            Fri 05 Dec 2025 12:30:32 +0000
asID:                     270858
IP address blocks:        179.0.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:da:fa:f8:a3:9a:ee:33:78:9d:80:ba:7b:56:6c:fc:fc:f7:71:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93EABAFE6C4BBB0E20474DA146E626A7B718C49
        Validity
            Not Before: Dec  6 12:25:32 2024 GMT
            Not After : Dec  5 12:30:32 2025 GMT
        Subject: CN=6474BC90A8A30DB26B61410C214555A6950B9A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8f:0b:aa:6c:8a:89:d2:03:69:0b:c5:14:a0:
                    39:1b:93:3a:48:68:48:69:f7:a1:f2:44:ca:d8:71:
                    52:95:fb:6d:84:ff:da:9d:51:a2:80:bc:7f:65:16:
                    f6:58:4d:a4:fe:88:a2:96:bb:c4:a9:0f:34:fe:13:
                    d0:23:6f:0c:31:6d:df:b6:cb:a7:57:38:0a:1c:ee:
                    f2:01:6d:ee:37:03:9c:47:81:31:3d:67:16:13:7b:
                    10:4c:9f:86:ba:15:43:39:f6:47:9b:56:17:3c:53:
                    01:18:bb:b5:d9:28:fa:e7:46:b3:79:bb:82:6c:ca:
                    14:45:19:7c:6a:74:c3:72:d9:7a:5e:98:7f:75:b9:
                    d3:52:60:6e:66:b2:0e:53:d0:3c:09:83:69:38:76:
                    bb:af:11:79:c4:09:27:31:6d:a5:66:fa:f6:5b:24:
                    58:a8:59:7f:f8:98:ac:88:4a:0d:a2:66:2a:53:f4:
                    a4:0f:91:0b:c1:1b:89:b3:f3:a6:25:a7:41:c7:95:
                    21:91:8a:e3:7d:46:38:ce:f8:bf:78:43:d1:cb:46:
                    c1:5a:34:e7:49:f4:8b:d0:ad:f1:b4:f4:41:6e:46:
                    d8:9e:98:2b:ef:e3:8b:5e:f9:40:f3:13:90:8c:b8:
                    06:40:77:a2:7c:37:47:4a:4f:84:f1:1e:1e:27:06:
                    67:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:74:BC:90:A8:A3:0D:B2:6B:61:41:0C:21:45:55:A6:95:0B:9A:8B
            X509v3 Authority Key Identifier:
                keyid:D9:3E:AB:AF:E6:C4:BB:B0:E2:04:74:DA:14:6E:62:6A:7B:71:8C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/1/D93EABAFE6C4BBB0E20474DA146E626A7B718C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93EABAFE6C4BBB0E20474DA146E626A7B718C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/1/3137392e302e3139302e302f32342d3234203d3e20323730383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:9e:d7:1f:26:a2:b6:3c:0d:5e:d6:62:2c:eb:17:2f:56:3d:
         61:91:c6:9e:ce:de:96:d1:93:0c:a8:73:12:69:e9:04:df:ed:
         74:21:ad:e4:db:b5:b2:f8:36:e1:3c:1c:ba:63:5d:3f:c5:aa:
         07:7a:3c:98:71:a9:64:6f:19:c5:90:e9:93:fd:31:d2:a3:46:
         eb:75:ca:13:99:c7:71:0e:9a:9b:d2:d7:2a:8e:19:6f:a0:36:
         0f:5c:d5:40:45:3f:34:8f:14:bc:79:14:25:92:66:a6:f2:e7:
         1f:b4:02:83:c3:82:4f:e4:d8:12:1e:07:c3:97:dd:b6:40:1b:
         33:56:3f:60:46:ec:22:e9:0a:ba:c1:74:ef:c5:a2:94:8d:82:
         33:7b:c5:8f:2a:aa:f1:96:a3:01:e7:f0:c2:e4:23:c1:99:7e:
         57:3c:e1:18:9c:1f:bf:8d:f3:a2:cc:db:88:23:95:ab:9e:1d:
         b7:c9:c3:9f:f5:9a:7b:af:73:b2:2f:35:7e:f4:fe:80:1f:46:
         b6:3e:b0:16:87:6f:8f:52:9b:40:6a:02:82:a9:8d:6d:23:cc:
         64:f8:fe:41:2d:e0:f2:a1:3e:f2:fc:85:ea:9e:fe:57:e8:e8:
         23:69:ec:7d:03:27:60:f5:1c:9e:0b:ac:2a:c1:0b:df:2c:ed:
         b4:d7:e6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:51:11 2025 by rpki-client