Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/1/3137392e3130382e3139312e302f32342d3234203d3e20323633323731.roa
File:                     3137392e3130382e3139312e302f32342d3234203d3e20323633323731.roa (raw, json)
Hash identifier:          7yOsQnK3IyYQ3iM/yWwh8e38S+7Cdnu5M4zKWTC8ggE=
Subject key identifier:   DA:65:00:74:83:1C:0F:A1:95:EF:F0:CA:2F:B3:62:C5:B2:57:AD:02
Certificate issuer:       /CN=E9281FA54614FD8BB470EDB763D8A5F9F741E5F7
Certificate serial:       205D7F27B2887B530122849B513FAC0289357571
Authority key identifier: E9:28:1F:A5:46:14:FD:8B:B4:70:ED:B7:63:D8:A5:F9:F7:41:E5:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9281FA54614FD8BB470EDB763D8A5F9F741E5F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/1/3137392e3130382e3139312e302f32342d3234203d3e20323633323731.roa
Signing time:             Sat 22 Apr 2023 11:26:57 +0000
ROA not before:           Sat 22 Apr 2023 11:21:57 +0000
ROA not after:            Sat 20 Apr 2024 11:26:57 +0000
asID:                     263271
IP address blocks:        179.108.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5d:7f:27:b2:88:7b:53:01:22:84:9b:51:3f:ac:02:89:35:75:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9281FA54614FD8BB470EDB763D8A5F9F741E5F7
        Validity
            Not Before: Apr 22 11:21:57 2023 GMT
            Not After : Apr 20 11:26:57 2024 GMT
        Subject: CN=DA650074831C0FA195EFF0CA2FB362C5B257AD02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:54:d9:92:b8:ca:67:81:bb:34:f0:98:65:
                    9e:7b:8c:48:64:b6:75:fa:e9:5c:86:cf:a2:72:3e:
                    09:3a:1f:8c:ff:05:04:d8:b0:42:c1:b1:30:c7:98:
                    f4:11:36:8e:37:ec:d5:f4:d2:16:e9:4f:a6:5f:61:
                    c1:1f:90:81:13:dd:b8:f7:f7:a5:51:4f:38:0e:19:
                    f3:78:93:b3:c9:28:0b:b8:64:60:c7:06:db:ad:f9:
                    f1:37:bf:23:9f:96:4c:03:b2:e0:34:58:a3:c4:9c:
                    c6:2c:d3:52:4a:b9:fd:54:53:1d:43:53:69:dc:d4:
                    d0:b2:81:3b:e8:59:f0:ec:70:5a:e7:93:07:af:9b:
                    05:2b:b1:94:98:c2:14:45:8c:ed:eb:39:c7:ba:ff:
                    f7:70:e8:3a:72:e6:28:88:7d:ba:44:b3:9c:9d:4e:
                    80:e7:39:37:8d:03:87:49:ab:9c:99:07:44:68:ad:
                    48:2b:58:1c:01:5b:5a:a1:5a:18:94:ba:53:50:49:
                    79:c9:18:64:12:ff:66:16:bf:69:81:be:19:f1:20:
                    d9:88:c2:fe:72:23:3d:75:05:9c:6b:ce:2f:ae:43:
                    d5:5b:55:66:bf:b4:22:d2:fd:5e:c8:ad:21:e3:1a:
                    76:25:d9:8e:79:da:d0:4b:ef:60:e2:d0:fe:b8:69:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:65:00:74:83:1C:0F:A1:95:EF:F0:CA:2F:B3:62:C5:B2:57:AD:02
            X509v3 Authority Key Identifier:
                keyid:E9:28:1F:A5:46:14:FD:8B:B4:70:ED:B7:63:D8:A5:F9:F7:41:E5:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/1/E9281FA54614FD8BB470EDB763D8A5F9F741E5F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9281FA54614FD8BB470EDB763D8A5F9F741E5F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/1/3137392e3130382e3139312e302f32342d3234203d3e20323633323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:eb:87:0e:6f:de:5d:b1:26:d7:48:d5:11:0a:70:89:98:6c:
         34:d1:8c:65:d1:b1:e3:e7:2f:ed:48:73:08:d7:2b:40:5c:a7:
         ed:4f:e9:e4:fa:3c:fc:7b:e1:f1:06:91:42:ff:1a:55:29:f3:
         eb:fc:86:80:e9:39:15:44:4c:70:7b:1e:10:6b:4e:4a:24:42:
         20:f6:15:f6:30:42:ff:53:5a:30:ee:ee:c8:29:12:46:10:94:
         4c:1b:19:39:fb:b3:7a:45:02:43:cd:18:d2:25:45:70:24:3e:
         eb:0f:6f:4b:0e:08:53:83:62:54:a1:bc:bf:60:f8:71:08:1f:
         f8:a8:58:4b:ba:b5:b2:ed:91:ab:17:47:00:19:91:de:09:a2:
         98:65:2c:5e:24:d0:41:96:05:ea:d6:83:af:b1:fd:0d:86:52:
         c8:95:4c:e6:59:aa:00:94:85:13:60:a0:44:95:cd:93:b7:ca:
         54:78:00:66:f8:6e:ad:38:67:63:ae:23:95:1c:9c:ff:f6:af:
         cc:88:56:db:3e:62:f7:09:b7:60:60:18:5d:fc:d0:44:db:7b:
         17:bb:fa:4f:11:a5:28:ff:af:ef:41:be:b6:30:92:c8:e5:92:
         f8:8b:d8:2d:3a:ef:6f:00:82:31:c0:09:1a:cb:a3:88:c7:b9:
         9a:09:52:a0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIF1/J7KIe1MBIoSbUT+sAok1dXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTkyODFGQTU0NjE0RkQ4QkI0NzBFREI3NjNEOEE1RjlG
NzQxRTVGNzAeFw0yMzA0MjIxMTIxNTdaFw0yNDA0MjAxMTI2NTdaMDMxMTAvBgNV
BAMTKERBNjUwMDc0ODMxQzBGQTE5NUVGRjBDQTJGQjM2MkM1QjI1N0FEMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVVTZkrjKZ4G7NPCYZZ57jEhk
tnX66VyGz6JyPgk6H4z/BQTYsELBsTDHmPQRNo437NX00hbpT6ZfYcEfkIET3bj3
96VRTzgOGfN4k7PJKAu4ZGDHBtut+fE3vyOflkwDsuA0WKPEnMYs01JKuf1UUx1D
U2nc1NCygTvoWfDscFrnkwevmwUrsZSYwhRFjO3rOce6//dw6Dpy5iiIfbpEs5yd
ToDnOTeNA4dJq5yZB0RorUgrWBwBW1qhWhiUulNQSXnJGGQS/2YWv2mBvhnxINmI
wv5yIz11BZxrzi+uQ9VbVWa/tCLS/V7IrSHjGnYl2Y552tBL72Di0P64aeapAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU2mUAdIMcD6GV7/DKL7NixbJXrQIwHwYDVR0j
BBgwFoAU6SgfpUYU/Yu0cO23Y9il+fdB5fcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1U5d0FpVm91aU1WdVdvYURwNWZFdmRMUFRyS3RWYk53QWcycktwd2FR
QUEvMS9FOTI4MUZBNTQ2MTRGRDhCQjQ3MEVEQjc2M0Q4QTVGOUY3NDFFNUY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U5MjgxRkE1NDYxNEZEOEJC
NDcwRURCNzYzRDhBNUY5Rjc0MUU1RjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NVOXdBaVZvdWlNVnVXb2FEcDVmRXZkTFBUckt0VmJOd0FnMnJLcHdhUUFBLzEv
MzEzNzM5MmUzMTMwMzgyZTMxMzkzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMyMzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALNsvzANBgkqhkiG9w0BAQsFAAOCAQEAROuH
Dm/eXbEm10jVEQpwiZhsNNGMZdGx4+cv7UhzCNcrQFyn7U/p5Po8/Hvh8QaRQv8a
VSnz6/yGgOk5FURMcHseEGtOSiRCIPYV9jBC/1NaMO7uyCkSRhCUTBsZOfuzekUC
Q80Y0iVFcCQ+6w9vSw4IU4NiVKG8v2D4cQgf+KhYS7q1su2RqxdHABmR3gmimGUs
XiTQQZYF6taDr7H9DYZSyJVM5lmqAJSFE2CgRJXNk7fKVHgAZvhurThnY64jlRyc
//avzIhW2z5i9wm3YGAYXfzQRNt7F7v6TxGlKP+v70G+tjCSyOWS+IvYLTrvbwCC
McAJGsujiMe5mglSoA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:40 2025 by rpki-client