Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3137302e38312e3131312e302f32342d3234203d3e20323636343136.roa
File:                     3137302e38312e3131312e302f32342d3234203d3e20323636343136.roa (raw, json)
Hash identifier:          gTxnrmJo5+mE1xoA0VOzunWWyAmyy2JVHVPdKdhl/s4=
Subject key identifier:   B7:C4:A4:C5:F6:50:C7:33:6F:5D:1D:31:9A:39:AC:00:24:89:AA:35
Certificate issuer:       /CN=3F9C724B8A4D384BB0BC626E0279F0491D983BB2
Certificate serial:       3DAC42A872F8BB0A1AD9CDD24F27F0B7306C5574
Authority key identifier: 3F:9C:72:4B:8A:4D:38:4B:B0:BC:62:6E:02:79:F0:49:1D:98:3B:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3137302e38312e3131312e302f32342d3234203d3e20323636343136.roa
Signing time:             Sat 25 May 2024 15:15:38 +0000
ROA not before:           Sat 25 May 2024 15:10:38 +0000
ROA not after:            Sat 24 May 2025 15:15:38 +0000
asID:                     266416
IP address blocks:        170.81.111.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ac:42:a8:72:f8:bb:0a:1a:d9:cd:d2:4f:27:f0:b7:30:6c:55:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F9C724B8A4D384BB0BC626E0279F0491D983BB2
        Validity
            Not Before: May 25 15:10:38 2024 GMT
            Not After : May 24 15:15:38 2025 GMT
        Subject: CN=B7C4A4C5F650C7336F5D1D319A39AC002489AA35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:47:89:55:d1:24:e0:dd:13:a1:b7:67:20:
                    1b:82:78:e3:9a:52:6c:5e:cc:fb:f9:1d:d2:fd:03:
                    f2:44:60:89:f8:7e:6d:6b:a4:a1:67:8a:14:7d:ef:
                    ca:a8:6b:30:78:ee:ed:59:07:87:b5:95:de:22:47:
                    a9:cb:bb:42:02:4a:90:3c:28:07:7a:a5:2c:98:4c:
                    6a:d2:7d:3e:57:fa:bd:9c:36:aa:6a:c9:10:68:75:
                    b9:ce:b2:88:47:b6:1c:67:50:10:69:f6:a4:cc:71:
                    23:b1:81:51:36:b6:f4:86:1f:ab:be:5e:c1:1c:41:
                    cf:08:ed:8f:fa:6a:ea:84:44:ca:19:da:f4:f5:16:
                    3b:24:1c:8d:2b:b7:d6:f6:68:88:e5:dc:fe:9c:ca:
                    69:15:33:79:5a:11:19:c0:e3:5c:be:f4:0f:15:cd:
                    b5:1e:61:d9:e0:5a:4e:28:1a:8e:b4:1d:83:ef:9c:
                    6d:98:dc:71:d0:f0:2d:ff:05:fa:ad:22:70:96:24:
                    e4:cf:56:76:f2:29:2c:34:9f:35:42:b4:de:cd:77:
                    b4:d0:58:1b:59:08:67:84:eb:df:72:f4:e4:cb:c3:
                    f0:9f:4a:e2:82:60:62:da:8a:86:bd:61:14:b9:aa:
                    66:59:96:13:6e:2a:35:4a:5e:8d:cc:25:99:bc:6b:
                    c0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C4:A4:C5:F6:50:C7:33:6F:5D:1D:31:9A:39:AC:00:24:89:AA:35
            X509v3 Authority Key Identifier:
                keyid:3F:9C:72:4B:8A:4D:38:4B:B0:BC:62:6E:02:79:F0:49:1D:98:3B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3137302e38312e3131312e302f32342d3234203d3e20323636343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:1d:fe:ca:a0:57:70:d4:24:b2:15:9b:e0:6a:83:68:ca:fd:
         98:78:8c:65:29:91:6f:55:f0:f2:7d:c2:ab:b7:37:d8:6e:2e:
         eb:79:ca:ee:54:35:2f:52:cd:13:98:b9:9d:65:c3:33:93:0b:
         db:f4:e2:f1:16:29:5b:0d:eb:39:5b:81:b1:79:a8:da:b1:19:
         0b:b1:d7:9f:d5:3e:50:e5:07:80:da:8d:a3:d5:0d:5d:8d:89:
         91:cf:72:db:24:3e:48:26:bd:d5:56:bc:27:5f:27:84:5e:f6:
         47:12:b7:9d:72:89:8a:8f:0c:8b:22:60:6f:c5:e7:2a:22:33:
         1c:2f:53:6a:83:50:39:a7:5e:c7:29:3c:d2:df:6d:a3:61:61:
         99:ff:b9:b6:46:df:83:3f:d2:0e:12:ce:df:e5:9f:9e:b8:41:
         f3:73:63:ce:4b:d1:c0:f8:f9:1d:10:dc:d5:f0:ea:63:71:5f:
         98:64:77:d9:2f:e2:94:02:ee:5b:3a:11:a6:2d:1b:e8:3c:9d:
         1d:3d:99:69:ae:8d:76:c0:aa:13:bd:77:b4:67:a4:db:a6:14:
         f0:46:6b:0f:08:9f:3a:f0:8e:2c:c0:39:45:20:dc:ee:ab:c0:
         f5:75:c4:7d:b7:d8:07:8b:f5:0c:a7:42:da:96:ee:c2:21:3f:
         c4:b9:f1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:30:40 2025 by rpki-client