Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133372e302f32342d3234203d3e20323731323037.roa
File:                     3137392e34322e3133372e302f32342d3234203d3e20323731323037.roa (raw, json)
Hash identifier:          0rmCYJl/9+ZNhg+j2WdKPPwv4Mx4CUAMyDzFOmf34QY=
Subject key identifier:   8E:B7:6E:83:7B:46:18:D1:03:16:77:3C:2A:4F:57:8D:32:24:4A:E2
Certificate issuer:       /CN=63D0CD7989A27283F0FE9C2C9601426AC969B1D3
Certificate serial:       254D3D504D697C48A77400FE5A7D5F71E3FB3DFB
Authority key identifier: 63:D0:CD:79:89:A2:72:83:F0:FE:9C:2C:96:01:42:6A:C9:69:B1:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D0CD7989A27283F0FE9C2C9601426AC969B1D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133372e302f32342d3234203d3e20323731323037.roa
Signing time:             Mon 10 Feb 2025 12:56:22 +0000
ROA not before:           Mon 10 Feb 2025 12:51:22 +0000
ROA not after:            Mon 09 Feb 2026 12:56:22 +0000
asID:                     271207
IP address blocks:        179.42.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4d:3d:50:4d:69:7c:48:a7:74:00:fe:5a:7d:5f:71:e3:fb:3d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63D0CD7989A27283F0FE9C2C9601426AC969B1D3
        Validity
            Not Before: Feb 10 12:51:22 2025 GMT
            Not After : Feb  9 12:56:22 2026 GMT
        Subject: CN=8EB76E837B4618D10316773C2A4F578D32244AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:08:60:94:25:75:ab:50:4c:77:2f:b8:9b:
                    57:6c:88:53:ba:a8:66:99:6b:2c:b5:58:20:d6:c5:
                    65:ca:9d:12:29:83:44:f6:40:73:81:b1:b6:78:56:
                    6c:11:6d:bd:08:9c:32:25:a7:dd:6c:59:9f:9f:30:
                    9d:6d:2d:33:dc:09:f8:52:e9:67:64:d3:df:7b:9c:
                    61:6a:0b:63:73:7f:dc:bd:24:47:f0:b4:4f:33:e5:
                    52:f5:ff:41:fb:fd:c0:e0:b0:7b:93:f8:af:52:be:
                    50:27:a5:a1:e9:c1:c4:f8:9c:2a:80:3e:5d:ea:62:
                    28:4c:b8:53:0a:6f:b3:8a:4d:7d:d3:db:f5:c8:5f:
                    3a:17:aa:66:84:9c:c7:c0:40:ed:92:70:27:9c:1c:
                    b8:56:b1:e9:88:63:1f:3d:87:4e:79:14:7c:c4:80:
                    93:81:ec:6e:de:89:05:e7:ab:47:87:c4:e9:81:16:
                    55:1e:68:82:10:1f:23:ec:10:97:fd:f2:50:f3:98:
                    b4:96:bd:73:d6:69:a9:ac:33:66:e5:67:49:bf:81:
                    a0:05:cb:08:1e:0e:6c:5e:d9:1b:ed:10:c4:ac:ce:
                    e0:9c:a6:69:0b:9a:6a:7d:c2:3e:26:38:4e:3a:cb:
                    6e:92:9c:bb:d1:e0:79:0f:3f:30:fa:c5:e7:b2:17:
                    28:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B7:6E:83:7B:46:18:D1:03:16:77:3C:2A:4F:57:8D:32:24:4A:E2
            X509v3 Authority Key Identifier:
                keyid:63:D0:CD:79:89:A2:72:83:F0:FE:9C:2C:96:01:42:6A:C9:69:B1:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/63D0CD7989A27283F0FE9C2C9601426AC969B1D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D0CD7989A27283F0FE9C2C9601426AC969B1D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133372e302f32342d3234203d3e20323731323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:87:77:51:0e:76:1f:99:0a:de:5d:6e:e6:c7:8f:6a:8f:8c:
         a9:6a:bf:9d:96:cd:2c:b7:a7:f3:ff:34:65:04:c1:eb:95:5c:
         0e:eb:c7:a7:3e:56:fa:2a:d7:cc:d9:01:d2:d2:68:46:2b:0f:
         61:64:33:2a:d4:ce:ab:61:15:53:f9:5f:57:1c:01:05:e8:fd:
         ca:c9:eb:9f:a8:23:67:cc:cc:da:66:44:2a:9f:64:49:9e:d0:
         0c:65:d4:a0:4b:5b:da:af:59:35:a9:97:02:f0:18:3d:05:f1:
         e6:ec:52:26:d3:29:09:73:2e:83:b3:ca:b2:17:81:08:2d:2e:
         82:de:05:83:aa:31:5b:c0:f8:e9:cc:4b:fd:db:59:d7:42:df:
         40:ff:49:d1:69:7d:0b:eb:01:57:c8:da:be:28:64:0e:8e:1b:
         0f:d7:95:f9:39:ad:89:dc:97:42:66:44:73:43:30:34:36:67:
         3b:02:cf:8c:90:39:0b:94:3d:09:00:14:06:25:98:2e:6b:d3:
         43:98:a7:d0:b5:b3:0d:f1:2e:57:dc:40:c3:e5:48:26:a6:f3:
         6a:15:13:1d:98:90:58:31:e6:39:8a:92:5d:d6:e2:a0:0c:ff:
         34:eb:93:89:21:05:74:13:8e:0f:cd:e8:ac:ce:83:21:e7:8f:
         d0:5c:b2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:00:03 2025 by rpki-client