Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32312d3231203d3e20323733333039.roa
File:                     3139312e33372e3231362e302f32312d3231203d3e20323733333039.roa (raw, json)
Hash identifier:          zzyK1eFd4ELBIC2I0Inaf2C+lOnYyC56al5rGjBWKAw=
Subject key identifier:   D1:CA:06:68:5D:9F:75:64:91:95:5D:32:99:7A:0C:3C:F7:4C:F3:80
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       73DD0E949F87F5EBE54615CBB57E63DFA247096C
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32312d3231203d3e20323733333039.roa
Signing time:             Thu 05 Dec 2024 19:12:39 +0000
ROA not before:           Thu 05 Dec 2024 19:07:39 +0000
ROA not after:            Thu 04 Dec 2025 19:12:39 +0000
asID:                     273309
IP address blocks:        191.37.216.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:dd:0e:94:9f:87:f5:eb:e5:46:15:cb:b5:7e:63:df:a2:47:09:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Dec  5 19:07:39 2024 GMT
            Not After : Dec  4 19:12:39 2025 GMT
        Subject: CN=D1CA06685D9F756491955D32997A0C3CF74CF380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a6:c6:a2:f0:11:65:99:39:05:05:be:f2:9a:
                    c3:69:57:83:7d:5d:52:9f:7b:f3:b7:ec:73:51:66:
                    74:c4:c7:7e:9c:98:2a:0f:fe:8d:3a:e4:de:f3:0f:
                    a4:be:c1:39:7d:02:30:3f:3a:ab:37:50:af:f2:ab:
                    7c:9e:f1:0c:0d:c5:a1:a8:87:88:17:95:7f:b0:78:
                    85:8d:28:74:88:88:7a:70:c9:e7:4b:6a:79:25:ef:
                    bb:b1:7e:c1:01:cc:c0:ce:f5:42:2b:d4:87:bb:f8:
                    d6:af:d2:81:d5:c1:6d:63:f8:9b:8b:9c:dd:53:b2:
                    6e:55:0a:94:a0:2b:08:8f:9c:8b:b0:2c:20:49:ee:
                    00:98:6e:c8:57:d6:d5:4f:0e:7b:40:40:49:d0:8f:
                    c2:ce:7e:40:57:56:7d:b6:76:ca:f4:38:00:f1:19:
                    2b:27:4e:f5:8f:8a:9d:25:bf:07:de:ec:8c:ee:ac:
                    07:26:75:44:60:11:1d:72:ed:cf:ae:ba:85:eb:63:
                    e7:a2:76:da:fc:59:58:8f:94:07:c0:de:80:0c:a0:
                    e5:0a:4e:49:cc:18:23:d7:95:58:d4:c3:d2:74:33:
                    a4:59:81:06:81:a6:7a:99:23:b3:a0:f0:64:f9:e7:
                    2d:b3:1e:05:f2:a6:5b:04:9e:8c:5c:5f:4f:09:8b:
                    25:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CA:06:68:5D:9F:75:64:91:95:5D:32:99:7A:0C:3C:F7:4C:F3:80
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3139312e33372e3231362e302f32312d3231203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:a5:c1:0a:c0:79:62:59:13:0b:af:78:83:fc:87:82:79:b2:
         e8:86:a6:89:9d:79:6d:21:2d:63:bb:7a:fb:45:0c:0a:3f:87:
         a7:ed:a5:cd:10:5e:ae:be:16:e8:a3:25:02:c0:a8:be:ee:0a:
         48:29:00:1a:db:a8:e7:3e:37:ca:0f:ca:46:aa:ec:22:03:a4:
         78:0d:0d:f1:2c:45:b8:38:ec:42:01:1a:33:8d:38:9e:40:a7:
         fe:72:1a:83:93:74:3b:04:de:87:6b:1d:96:ef:af:76:40:59:
         f0:2d:00:dd:ba:63:ec:f2:30:b3:34:c0:14:78:58:71:89:a0:
         a8:d9:20:a2:32:63:bd:f0:f1:6d:d9:03:b5:ac:6d:bb:d0:d1:
         ae:a5:7d:80:da:9f:38:e6:f9:14:e6:2d:09:07:40:2b:13:81:
         13:99:7e:5b:be:0f:ed:4c:4b:a1:aa:98:00:f7:1e:82:81:34:
         d5:96:f2:11:07:3c:8c:2f:3a:5c:07:7d:72:39:87:71:6c:16:
         a1:e2:ed:f6:a3:76:d2:43:f0:19:8c:0c:56:5b:fb:e7:3f:e4:
         6e:ce:ea:d0:d2:8d:7d:b4:9d:7f:eb:f4:bc:18:94:a2:e3:36:
         65:a3:6f:72:47:c9:fd:b1:4a:f9:02:5f:5b:6d:8d:93:20:b5:
         75:b6:6e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:35:12 2025 by rpki-client