Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3137392e302e33322e302f32322d3234203d3e20323632333030.roa
File:                     3137392e302e33322e302f32322d3234203d3e20323632333030.roa (raw, json)
Hash identifier:          qTFYq4Gua6BhhmBgbQKxtDnTNJvkBhMJoMtlrmt8+yQ=
Subject key identifier:   DB:D9:D2:1E:93:D9:82:8E:8C:70:BE:96:D6:3A:92:CE:9C:3F:45:E9
Certificate issuer:       /CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
Certificate serial:       33978ACED93A3101B8160D89D1070B9B6AD5939E
Authority key identifier: 93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3137392e302e33322e302f32322d3234203d3e20323632333030.roa
Signing time:             Wed 05 Mar 2025 21:43:48 +0000
ROA not before:           Wed 05 Mar 2025 21:38:48 +0000
ROA not after:            Wed 04 Mar 2026 21:43:48 +0000
asID:                     262300
IP address blocks:        179.0.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:97:8a:ce:d9:3a:31:01:b8:16:0d:89:d1:07:0b:9b:6a:d5:93:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
        Validity
            Not Before: Mar  5 21:38:48 2025 GMT
            Not After : Mar  4 21:43:48 2026 GMT
        Subject: CN=DBD9D21E93D9828E8C70BE96D63A92CE9C3F45E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:49:7f:20:1f:ca:06:af:b1:df:54:45:b7:
                    6f:d8:f7:7b:f2:eb:0e:35:38:05:d8:62:41:b4:bf:
                    90:bf:58:19:d0:3f:b6:be:98:a5:28:7b:97:4d:5c:
                    bb:cd:e2:98:b2:c8:90:48:df:bb:0f:c4:18:a7:00:
                    0a:bd:ec:7e:c8:98:74:18:b3:f6:30:e0:ad:e9:f1:
                    63:ac:38:c4:8b:13:9d:ce:6e:c6:d0:86:4f:50:c0:
                    8f:84:0e:17:ee:e7:87:94:7c:fc:9d:88:11:35:a7:
                    f6:2f:2a:ac:8e:87:3e:a7:48:9b:89:6c:f4:69:c6:
                    7b:87:c6:1a:07:bc:43:19:40:6c:c0:c1:2d:ea:d9:
                    0b:e5:ad:e1:8d:2c:3a:d2:a4:d2:ce:35:46:68:f6:
                    2e:0c:ea:e3:03:f5:dc:03:67:2f:21:43:30:fe:eb:
                    d6:95:9d:1b:9d:98:93:9d:87:7c:bf:cc:9e:f7:ae:
                    44:0d:57:6a:3b:6f:22:19:08:f9:a7:0f:5a:05:27:
                    47:9e:3d:ff:64:28:3d:3d:9a:c9:17:f8:bc:26:79:
                    70:30:78:85:6e:25:48:a0:99:e2:74:f9:9d:ab:27:
                    db:49:0a:8c:cb:fe:b7:32:b9:89:29:4a:4e:e2:2c:
                    61:0b:ec:fd:8c:84:99:3c:31:cd:fe:b5:af:e7:3b:
                    fa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D9:D2:1E:93:D9:82:8E:8C:70:BE:96:D6:3A:92:CE:9C:3F:45:E9
            X509v3 Authority Key Identifier:
                keyid:93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3137392e302e33322e302f32322d3234203d3e20323632333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:c4:cc:e9:74:a9:e4:79:45:8a:4d:65:82:78:d6:3e:7b:88:
         05:f3:3c:60:35:0c:88:95:6a:c3:5d:e3:ff:c7:ce:35:3a:44:
         96:d9:ef:59:7c:ae:0b:13:40:ff:ff:56:e1:5c:4c:73:ca:7e:
         14:74:53:76:05:21:3e:c7:bb:8d:ff:45:6a:60:ac:98:71:7d:
         a9:30:1d:52:b5:87:8c:a8:77:9a:93:6a:82:78:9f:8b:81:5c:
         ca:4f:13:70:40:1f:b4:56:12:cb:92:74:4c:f1:92:b9:a9:bc:
         db:d7:bd:31:fd:b8:d1:d0:ba:fb:12:44:94:84:ae:61:b3:66:
         d5:1a:70:54:bb:24:df:6a:39:4e:71:7d:4a:d3:53:38:4b:b7:
         67:57:e8:b3:5e:23:71:9f:25:e2:ad:d0:8a:51:2f:d1:53:b7:
         b0:cd:b9:dc:d6:a8:41:2b:30:02:b8:43:ad:ca:6f:bb:74:ca:
         3c:70:0d:85:3f:ab:d4:cc:82:c6:d0:c5:a8:a5:ff:22:1f:7c:
         a8:13:9c:36:a9:ac:aa:91:5e:b1:2e:f3:63:e7:28:21:9d:5d:
         41:28:cc:3a:c2:3d:80:4c:67:a6:13:95:cd:21:7f:6d:53:bb:
         81:f2:3a:79:ea:cc:fd:c9:b6:e4:c7:5a:28:fd:7e:d6:d8:59:
         66:2a:55:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:40:00 2025 by rpki-client