Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31362e302f32322d3234203d3e20323633363235.roa
File:                     3137392e3132352e31362e302f32322d3234203d3e20323633363235.roa (raw, json)
Hash identifier:          wjiTSFAc9CBzMaiimtvemw+lMDcBSG0Qgtp90qrYWQ8=
Subject key identifier:   A6:62:A4:53:A3:FD:33:E7:2C:7C:83:46:7B:0B:4E:8A:DD:15:68:A4
Certificate issuer:       /CN=79B23D2F8F4EDF23756584238BDBCE392427B638
Certificate serial:       39E3F2D85619419967F94BAA9B53DCD1BECF2288
Authority key identifier: 79:B2:3D:2F:8F:4E:DF:23:75:65:84:23:8B:DB:CE:39:24:27:B6:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79B23D2F8F4EDF23756584238BDBCE392427B638.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31362e302f32322d3234203d3e20323633363235.roa
Signing time:             Tue 03 Oct 2023 04:06:49 +0000
ROA not before:           Tue 03 Oct 2023 04:01:49 +0000
ROA not after:            Tue 01 Oct 2024 04:06:49 +0000
asID:                     263625
IP address blocks:        179.125.16.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e3:f2:d8:56:19:41:99:67:f9:4b:aa:9b:53:dc:d1:be:cf:22:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79B23D2F8F4EDF23756584238BDBCE392427B638
        Validity
            Not Before: Oct  3 04:01:49 2023 GMT
            Not After : Oct  1 04:06:49 2024 GMT
        Subject: CN=A662A453A3FD33E72C7C83467B0B4E8ADD1568A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:79:3d:70:50:a2:57:7e:d2:c0:02:f6:4a:
                    ea:f9:bc:b4:20:52:54:00:c5:25:27:30:82:48:d4:
                    ff:cb:0e:02:27:5a:91:5b:a6:04:5b:22:0a:b3:32:
                    72:ce:50:f6:c5:a3:2c:18:58:1f:14:4c:8b:32:8c:
                    3d:b2:e9:8a:8a:a5:1d:b0:51:c6:02:09:98:d9:63:
                    aa:f9:9d:f8:87:43:65:bc:33:d8:63:8b:e6:cd:06:
                    b6:0c:ba:a3:52:95:ea:f2:20:46:0a:13:99:1f:4e:
                    47:14:a1:36:05:7e:d3:22:6b:65:55:e0:5f:07:40:
                    3f:ea:f9:05:b3:d7:a8:eb:7c:55:3b:59:7a:7d:ce:
                    1e:6a:e2:cf:96:5f:a8:0c:b9:cf:62:44:36:85:78:
                    ec:07:83:b9:b6:fb:19:f9:26:04:c6:19:12:ea:bb:
                    d1:22:6a:0a:01:22:29:39:60:bb:6d:4e:52:ad:73:
                    3a:a1:c0:0d:e2:8f:b6:e4:7d:4d:31:ea:d4:f9:c0:
                    01:a2:1e:d7:15:3f:fe:0f:0e:98:a2:de:6e:54:c6:
                    ff:34:2f:a3:b2:43:52:1c:de:43:c6:8b:ac:b3:31:
                    b0:d2:61:77:83:ff:8e:14:f5:45:19:14:f4:f9:1e:
                    83:0d:83:74:9d:86:47:91:a5:6d:a1:a6:af:f7:e6:
                    b6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:62:A4:53:A3:FD:33:E7:2C:7C:83:46:7B:0B:4E:8A:DD:15:68:A4
            X509v3 Authority Key Identifier:
                keyid:79:B2:3D:2F:8F:4E:DF:23:75:65:84:23:8B:DB:CE:39:24:27:B6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/79B23D2F8F4EDF23756584238BDBCE392427B638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79B23D2F8F4EDF23756584238BDBCE392427B638.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31362e302f32322d3234203d3e20323633363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:20:dc:3a:41:07:ad:16:ac:66:0c:7d:b2:99:a6:9e:0f:73:
         82:d7:d9:e1:c5:cf:a3:5e:b5:45:18:d8:02:fa:03:dc:20:aa:
         ab:e2:6e:f7:c2:6e:fe:0b:74:f4:fd:d0:8b:56:c7:65:2a:ee:
         cc:c6:d5:b5:59:a1:c9:a1:c5:cb:49:a4:b7:0c:52:16:32:f1:
         92:c1:f9:6d:d4:db:0d:41:39:3e:a3:72:ce:47:db:01:c8:66:
         e3:5e:8b:bf:57:b0:79:ea:0d:38:ba:89:e5:8b:9b:d2:06:f5:
         c2:c2:2a:01:0f:08:1b:22:66:06:a8:e2:26:1b:be:1c:fb:9b:
         81:a8:3d:2a:4d:e5:70:68:f3:f8:19:1d:39:a1:03:b2:a1:5a:
         d2:fb:29:bc:3c:24:91:be:bf:90:5b:b8:f8:c3:a8:7e:04:3f:
         63:06:27:df:fa:7d:a9:f5:ca:f5:aa:1b:f6:74:71:46:14:b9:
         50:ba:f5:83:3a:95:3a:f5:7e:89:73:d7:65:bb:0c:72:cf:1e:
         6c:20:e2:84:f1:49:04:3c:72:24:82:f6:87:3c:7e:32:3e:e7:
         5d:81:cc:da:82:d2:de:71:08:fd:05:b4:f5:ff:4f:bd:38:39:
         29:26:f1:09:76:8a:43:c2:07:2e:2a:14:93:19:58:8e:fc:96:
         f4:dc:46:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:38:32 2025 by rpki-client