Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/3137392e3132372e37322e302f32312d3231203d3e20323633323833.roa
File:                     3137392e3132372e37322e302f32312d3231203d3e20323633323833.roa (raw, json)
Hash identifier:          O522G1+Iws0eDwsz8FjC6JSd69wtmCz82dD5zO97M94=
Subject key identifier:   A7:3E:17:3F:67:ED:04:1F:68:DB:C6:16:C2:B6:3B:1E:6A:41:C5:5F
Certificate issuer:       /CN=1609A1F6F144F5436BD99A38E640B310CB679304
Certificate serial:       2F20B497BB1EFF964DC7B654CE0E2D797E7FD114
Authority key identifier: 16:09:A1:F6:F1:44:F5:43:6B:D9:9A:38:E6:40:B3:10:CB:67:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1609A1F6F144F5436BD99A38E640B310CB679304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/3137392e3132372e37322e302f32312d3231203d3e20323633323833.roa
Signing time:             Sat 19 Oct 2024 00:11:06 +0000
ROA not before:           Sat 19 Oct 2024 00:06:06 +0000
ROA not after:            Sat 18 Oct 2025 00:11:06 +0000
asID:                     263283
IP address blocks:        179.127.72.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:20:b4:97:bb:1e:ff:96:4d:c7:b6:54:ce:0e:2d:79:7e:7f:d1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1609A1F6F144F5436BD99A38E640B310CB679304
        Validity
            Not Before: Oct 19 00:06:06 2024 GMT
            Not After : Oct 18 00:11:06 2025 GMT
        Subject: CN=A73E173F67ED041F68DBC616C2B63B1E6A41C55F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:04:b5:a7:96:f6:9a:f5:9b:f2:c5:a2:e6:
                    d0:26:9e:8c:77:97:35:be:1e:d1:1d:d9:56:c2:44:
                    e0:04:c4:7d:36:ec:96:1a:d6:4a:02:81:97:70:ac:
                    9f:3f:4e:50:09:e3:9d:4b:f2:f4:60:ab:a2:b4:8a:
                    b7:f6:d4:b2:4d:45:d5:5d:96:0c:81:ea:34:e2:4d:
                    13:ff:92:75:6f:70:2e:fb:f9:94:c0:13:d7:ac:40:
                    82:8d:94:11:e9:08:fc:7b:d4:db:66:cf:ce:55:76:
                    87:3c:9f:dd:94:57:16:42:3d:dd:74:0a:ba:d7:cb:
                    c2:82:a7:b9:a1:11:0e:db:24:7b:01:1e:9c:2b:ab:
                    eb:31:4c:e1:de:58:c8:d9:d9:1c:42:69:41:f4:f9:
                    09:26:b3:1c:c1:70:cd:2b:35:e8:bf:08:4c:5e:54:
                    de:38:8e:c3:34:c3:4a:aa:b8:bb:e1:1f:a7:a1:9e:
                    fd:62:9a:be:c4:00:17:7c:4e:67:c0:e7:51:f9:70:
                    08:6a:fb:1a:89:94:36:89:af:17:37:65:a0:76:be:
                    4b:6a:1c:06:96:7f:fa:2a:3b:12:35:1c:1c:20:d7:
                    8b:22:81:5f:28:07:73:62:39:7f:c6:4f:4a:65:44:
                    c7:7c:b1:ab:0d:b6:ac:ee:0e:54:39:8b:3e:13:8c:
                    1f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3E:17:3F:67:ED:04:1F:68:DB:C6:16:C2:B6:3B:1E:6A:41:C5:5F
            X509v3 Authority Key Identifier:
                keyid:16:09:A1:F6:F1:44:F5:43:6B:D9:9A:38:E6:40:B3:10:CB:67:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/1609A1F6F144F5436BD99A38E640B310CB679304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1609A1F6F144F5436BD99A38E640B310CB679304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/3137392e3132372e37322e302f32312d3231203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:f4:d8:65:cf:71:58:dc:71:b3:d3:6a:bd:22:77:eb:1e:ca:
         7f:89:25:27:4e:56:b4:95:90:06:20:32:4c:cc:47:32:f7:7f:
         1b:e4:bc:dd:c0:39:7f:af:d2:7a:fb:53:52:ac:46:f5:61:85:
         e3:98:74:30:72:7a:20:1c:92:54:98:40:3b:c0:b1:ed:f2:e5:
         8a:5c:d0:ab:5a:c6:08:de:28:87:6b:49:af:51:2d:d2:59:57:
         2b:18:e7:1a:25:c0:a6:df:88:19:48:56:73:91:b7:ea:4e:8c:
         6d:3b:0d:5b:52:c6:c0:a8:b2:61:58:e6:60:9c:04:36:95:a3:
         91:d6:d2:78:02:35:20:93:f8:de:ca:18:db:1f:0e:52:c5:34:
         6d:03:e9:ed:25:5b:cd:82:97:d0:60:50:b4:0d:43:9f:ae:48:
         bb:a6:79:8f:fc:7d:77:ca:f2:c0:51:04:74:1f:71:73:92:a2:
         00:e3:e8:7e:4e:49:cd:bc:5f:04:84:82:3b:aa:8f:72:ea:8d:
         7e:40:bf:93:f4:5b:c9:7f:d1:78:b2:81:77:b2:33:aa:02:9c:
         34:db:7c:22:5b:8e:0d:32:00:cc:ca:06:c5:72:99:4a:ee:45:
         fc:08:e2:ee:b8:a9:a1:f8:ed:a1:21:6a:68:41:d3:67:41:45:
         2c:64:09:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:24:58 2025 by rpki-client