Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137392e39362e3231362e302f32322d3232203d3e20323638303138.roa
File:                     3137392e39362e3231362e302f32322d3232203d3e20323638303138.roa (raw, json)
Hash identifier:          4zhBLxttqyCh0TOSmx+k8vcU6obf0N+lPmgAckAWiOw=
Subject key identifier:   E8:A8:C8:9A:28:8C:07:59:83:1D:D7:AB:22:A2:1F:A9:6B:B6:00:FD
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       75F91CF6E1FA07C5369D758CE1D4F4AC5D9E1E6B
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137392e39362e3231362e302f32322d3232203d3e20323638303138.roa
Signing time:             Wed 20 Sep 2023 13:43:39 +0000
ROA not before:           Wed 20 Sep 2023 13:38:39 +0000
ROA not after:            Wed 18 Sep 2024 13:43:39 +0000
asID:                     268018
IP address blocks:        179.96.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f9:1c:f6:e1:fa:07:c5:36:9d:75:8c:e1:d4:f4:ac:5d:9e:1e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Sep 20 13:38:39 2023 GMT
            Not After : Sep 18 13:43:39 2024 GMT
        Subject: CN=E8A8C89A288C0759831DD7AB22A21FA96BB600FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:17:97:f0:62:4d:d5:f4:6b:44:81:ff:a3:37:
                    94:f2:7a:9f:9a:9b:72:0c:b3:15:87:f6:76:0d:3a:
                    d4:57:13:fa:2e:01:c8:f6:bd:32:bf:b9:cc:91:2e:
                    ae:ce:74:77:a7:4e:6a:5d:84:cb:cc:c9:68:59:62:
                    54:9a:ee:ee:62:e9:81:22:28:0a:c7:60:66:53:25:
                    c0:0a:ab:03:2d:c1:30:51:80:e9:aa:e5:e0:74:b8:
                    36:fe:23:3d:75:be:7d:3e:74:d7:b6:a9:1c:c2:bc:
                    85:8a:eb:da:99:c6:36:e9:79:32:7c:2f:cc:6f:6c:
                    99:86:8c:3e:62:ac:0d:8e:8b:22:a3:3d:ca:bf:26:
                    ab:1c:2f:75:39:01:01:38:15:5d:79:a9:17:69:3e:
                    87:2f:20:83:82:25:db:22:da:4c:78:25:35:ad:17:
                    ab:7c:b8:61:f9:18:bb:56:4d:35:31:83:5c:41:16:
                    8c:92:33:b5:15:01:08:fb:a3:e2:ed:91:ec:b2:cf:
                    d7:8c:f4:4d:06:4b:a3:b3:4c:20:02:60:9b:d9:bd:
                    eb:66:ff:7c:af:79:17:85:bc:b2:e0:aa:01:f2:36:
                    dd:34:63:ad:af:e1:45:a3:4b:2b:fa:29:08:11:50:
                    d8:ef:81:21:d3:98:1a:7c:4a:4f:cf:18:07:2a:e2:
                    16:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A8:C8:9A:28:8C:07:59:83:1D:D7:AB:22:A2:1F:A9:6B:B6:00:FD
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137392e39362e3231362e302f32322d3232203d3e20323638303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:8d:ae:62:29:bd:63:63:78:8a:fb:cb:38:b0:62:1a:ef:ab:
         de:47:71:91:dc:3a:d0:67:72:5c:fe:09:aa:9a:2d:95:d5:82:
         d2:c1:b5:a7:dc:94:b5:82:ca:bb:5e:c7:a4:9b:1b:fe:63:01:
         8e:72:d1:85:65:b3:d8:50:b8:13:ed:8c:cd:44:1c:38:94:76:
         9c:4e:bb:f5:e9:95:25:f8:a7:b0:a7:85:a8:f5:80:55:fe:02:
         30:14:9e:f9:56:3f:93:31:2f:f7:08:00:d5:c7:eb:51:f3:ac:
         26:23:43:ca:25:95:8b:7b:5b:da:31:8b:c6:a5:fa:b9:f5:e8:
         87:38:2e:c0:4f:bd:00:fc:21:d4:35:95:63:34:63:07:05:e4:
         28:b9:df:1b:af:56:cf:2f:81:10:a2:d1:4a:77:35:df:0c:c0:
         28:1a:19:a2:bb:ad:c9:f3:60:83:29:68:14:10:47:ad:18:34:
         ac:ba:7d:0b:ad:66:6c:86:7d:72:78:3a:d4:b3:ac:bc:27:69:
         be:1d:09:b0:07:75:5f:ac:b5:9e:21:2d:8d:34:45:67:22:82:
         89:76:cf:ba:36:31:16:12:0f:1d:7d:e0:92:60:54:7a:84:68:
         b3:a5:b5:1a:81:0c:6d:ab:3b:9b:b5:74:7d:d0:11:11:9f:88:
         8b:fc:07:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:29 2025 by rpki-client