Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137392e3130382e39362e302f31392d3234203d3e203136373335.roa
File:                     3137392e3130382e39362e302f31392d3234203d3e203136373335.roa (raw, json)
Hash identifier:          5Ti0yl9AWQ9UAzS6NywR4wlF40Xw31MhbRuqT10M0NY=
Subject key identifier:   63:75:4B:15:90:46:85:C2:26:54:E5:0A:E2:C0:EA:6E:2F:35:2A:62
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       2E2FAB97A9859DEBF17F403BD2B25143213B43CA
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137392e3130382e39362e302f31392d3234203d3e203136373335.roa
Signing time:             Sat 11 Dec 2021 18:21:26 +0000
ROA not before:           Sat 11 Dec 2021 18:16:26 +0000
ROA not after:            Sat 10 Dec 2022 18:21:26 +0000
asID:                     16735
IP address blocks:        179.108.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2f:ab:97:a9:85:9d:eb:f1:7f:40:3b:d2:b2:51:43:21:3b:43:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:16:26 2021 GMT
            Not After : Dec 10 18:21:26 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:ff:46:c8:6d:27:1e:2c:26:f2:1a:6f:ac:
                    27:94:d4:36:a1:20:47:b4:cc:89:c4:e1:2c:cc:a9:
                    df:98:de:ca:97:9e:ff:41:e3:97:1a:a7:b0:fc:4b:
                    16:05:75:9e:11:14:2f:24:8f:89:85:ae:74:6e:9d:
                    94:47:49:fb:f8:3a:d0:8f:b6:1f:00:98:a8:de:bc:
                    86:53:91:f0:d0:c2:25:b8:9c:59:7d:66:bb:ca:38:
                    3b:db:ca:01:53:0f:33:23:37:b0:a8:5d:d7:90:1c:
                    6d:01:0a:b2:14:b1:59:bf:b5:6f:3c:14:ad:65:7d:
                    bd:06:63:dd:8c:81:19:55:9a:cb:c6:d6:5c:29:5e:
                    99:35:6a:23:2d:8d:c1:15:aa:f3:f1:47:7b:92:d6:
                    a4:0a:53:4a:5e:c2:76:d8:6b:61:75:20:91:c5:aa:
                    d8:04:f4:b4:7f:59:9d:3b:a9:28:b7:f3:9d:21:1b:
                    fd:9c:d1:06:aa:15:ad:0e:64:1d:ce:4d:61:8e:60:
                    62:1a:6b:78:b9:a9:20:73:bb:97:0f:dc:1e:0a:6b:
                    f7:c6:2b:af:e7:76:97:c4:e0:ad:38:92:da:ab:59:
                    ad:1f:8f:1c:ab:fb:b7:19:96:43:31:3b:47:86:a6:
                    44:74:18:07:4d:a6:e4:47:8c:62:a4:fe:bb:a5:02:
                    98:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:75:4B:15:90:46:85:C2:26:54:E5:0A:E2:C0:EA:6E:2F:35:2A:62
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/3137392e3130382e39362e302f31392d3234203d3e203136373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:b1:28:6e:c6:b7:8a:35:3d:8f:cf:c5:10:15:a4:2b:ec:35:
         9c:38:b6:22:94:36:c0:5b:d4:f3:d6:75:3b:2b:a3:6c:b2:b1:
         57:a8:13:be:14:81:5c:88:91:64:bf:45:33:5f:03:8d:21:9f:
         48:15:1f:77:87:4a:84:19:da:09:1d:46:1e:3a:cd:b7:85:86:
         ef:14:8f:75:a5:d4:7f:38:d8:b8:f6:27:57:cc:e4:1b:91:93:
         c2:49:d8:5b:6b:81:1d:0d:99:8e:a5:6c:81:16:b3:9c:92:15:
         32:e5:b6:2c:7d:6a:34:bc:7e:88:48:aa:ca:14:17:72:42:e0:
         d6:35:25:7c:b4:9a:a6:7f:60:b2:0e:89:9b:32:89:79:b7:a7:
         78:bc:d8:2b:bc:9a:8e:5a:96:88:e3:42:ca:ae:3e:3a:03:77:
         e6:08:c8:14:71:a8:7a:f2:28:f9:69:0a:ff:b9:b3:cd:15:80:
         44:a7:b4:bf:de:df:2c:a6:7b:39:f4:41:e8:68:92:53:fc:af:
         e9:2f:c2:ce:79:58:10:bf:9b:2d:ca:ba:5f:be:b0:ce:dc:51:
         e7:b7:0c:47:92:bf:33:47:51:34:5d:e2:28:62:84:b1:26:fb:
         22:47:53:dd:6f:33:4d:87:a6:f0:97:f8:95:67:40:91:f7:22:
         42:84:f3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:30:37 2025 by rpki-client