Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/1/3137392e3130382e3138362e302f32342d3234203d3e20323633323731.roa
File:                     3137392e3130382e3138362e302f32342d3234203d3e20323633323731.roa (raw, json)
Hash identifier:          UMeuSPjXwdBqYRhgP8C5bOhr7rQuxlz2QkZcBFxqqO8=
Subject key identifier:   E9:0C:02:49:DB:F5:2B:92:68:98:90:5B:CD:E2:BC:A0:A6:5C:64:24
Certificate issuer:       /CN=E9281FA54614FD8BB470EDB763D8A5F9F741E5F7
Certificate serial:       241AFE90A19C99E6B6D2CDD3EDABAADF571EBE69
Authority key identifier: E9:28:1F:A5:46:14:FD:8B:B4:70:ED:B7:63:D8:A5:F9:F7:41:E5:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9281FA54614FD8BB470EDB763D8A5F9F741E5F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/1/3137392e3130382e3138362e302f32342d3234203d3e20323633323731.roa
Signing time:             Sat 22 Apr 2023 11:26:32 +0000
ROA not before:           Sat 22 Apr 2023 11:21:32 +0000
ROA not after:            Sat 20 Apr 2024 11:26:32 +0000
asID:                     263271
IP address blocks:        179.108.186.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1a:fe:90:a1:9c:99:e6:b6:d2:cd:d3:ed:ab:aa:df:57:1e:be:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9281FA54614FD8BB470EDB763D8A5F9F741E5F7
        Validity
            Not Before: Apr 22 11:21:32 2023 GMT
            Not After : Apr 20 11:26:32 2024 GMT
        Subject: CN=E90C0249DBF52B926898905BCDE2BCA0A65C6424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2b:04:f8:1f:f0:c1:93:cd:51:fb:9e:d5:5d:
                    40:91:96:d4:98:61:99:98:a0:d2:4d:53:d3:0c:61:
                    79:4a:fa:ba:0d:29:b9:fc:d6:3d:ab:71:ed:9a:f8:
                    28:16:da:7c:d0:44:27:85:34:e1:14:73:5e:d0:e9:
                    e2:2c:a2:93:d7:87:12:e9:fa:ca:8d:ff:53:d4:03:
                    c5:38:68:30:ef:7a:3d:ef:ce:ff:68:a0:c9:e7:f4:
                    d4:93:9f:15:79:cb:99:af:8b:eb:72:d7:cc:e3:f0:
                    a2:54:1e:4f:dc:48:c7:7b:e8:d9:65:de:1f:47:d2:
                    14:30:71:76:dd:0b:dc:86:e1:0f:f1:0d:a3:b0:68:
                    99:ea:a2:02:9e:37:52:54:0e:e2:05:04:7d:fa:73:
                    41:ca:0c:48:40:8f:22:ad:5c:fc:15:31:92:47:14:
                    fb:da:3c:e8:bc:72:56:56:6e:32:ae:9b:4f:18:02:
                    e2:0c:a6:4b:30:e3:46:8f:ec:1f:ae:8a:4c:5e:a9:
                    7d:37:d4:25:d0:9e:ee:0b:c0:da:7d:cd:4f:b4:7a:
                    76:54:09:fb:05:0f:ab:d3:1c:ac:a7:0a:ee:94:01:
                    d7:e3:18:19:7e:89:5d:c1:6c:27:a2:c7:ce:d4:92:
                    41:64:7c:48:f7:73:e2:e7:53:0a:b4:36:14:a4:12:
                    f9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0C:02:49:DB:F5:2B:92:68:98:90:5B:CD:E2:BC:A0:A6:5C:64:24
            X509v3 Authority Key Identifier:
                keyid:E9:28:1F:A5:46:14:FD:8B:B4:70:ED:B7:63:D8:A5:F9:F7:41:E5:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/1/E9281FA54614FD8BB470EDB763D8A5F9F741E5F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9281FA54614FD8BB470EDB763D8A5F9F741E5F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/1/3137392e3130382e3138362e302f32342d3234203d3e20323633323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:17:d4:86:8d:da:36:ab:cf:f9:c6:80:2e:c1:54:f0:31:9f:
         e1:68:e7:0b:36:e3:68:39:b4:a9:bd:02:95:19:64:08:0b:30:
         eb:04:18:30:d2:a5:fb:87:23:5a:0f:a8:ba:e0:6e:5f:b6:62:
         18:4c:e4:82:02:b1:2b:df:1b:7b:ac:d2:93:41:5b:9b:a2:2b:
         f5:24:a9:95:81:79:d9:bc:ca:35:bf:7e:80:b8:7a:71:d6:e1:
         6e:5b:af:0d:c0:48:9f:e1:8d:02:00:14:da:71:cd:86:f9:ee:
         05:c3:cc:09:29:84:d2:90:ce:9c:e8:6f:cf:e6:5b:1e:42:3b:
         26:e9:67:60:63:e2:98:f9:88:66:3c:d1:0a:89:cf:c3:b6:50:
         8a:ed:2f:fe:79:4d:03:a8:73:3e:7b:d7:48:bb:cf:fb:55:9b:
         5f:37:d0:f4:b7:e5:cd:98:c8:49:14:85:7c:e6:c2:99:4b:7d:
         f0:f0:fc:d9:9d:1b:f5:2a:6b:d2:5a:bb:2d:7b:18:4a:58:c1:
         b4:f0:51:9b:c7:fb:b9:1d:be:c7:49:c2:80:11:7d:ec:e4:86:
         00:62:f2:ae:94:e4:b0:31:e3:67:76:1f:33:94:84:dc:e1:ac:
         6a:ea:ed:6d:31:e7:08:54:b9:80:dc:86:0b:4c:e0:7f:d7:90:
         f7:a6:dc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:04:58 2025 by rpki-client