Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/3137392e3130372e3131322e302f32302d3234203d3e203533313332.roa
File:                     3137392e3130372e3131322e302f32302d3234203d3e203533313332.roa (raw, json)
Hash identifier:          TJrKtqVC4Sii3g9qpAW2V333dMFic56g963Uw1S+t/E=
Subject key identifier:   69:A5:73:12:19:DC:F3:34:45:B0:1C:D1:94:F0:C1:3B:AC:91:03:D7
Certificate issuer:       /CN=B53A77B5E460044CB626F7588E1A91702B1AE08E
Certificate serial:       1C51BA5DE131136EECDC815F4781A8417C735914
Authority key identifier: B5:3A:77:B5:E4:60:04:4C:B6:26:F7:58:8E:1A:91:70:2B:1A:E0:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/3137392e3130372e3131322e302f32302d3234203d3e203533313332.roa
Signing time:             Thu 06 Mar 2025 04:33:06 +0000
ROA not before:           Thu 06 Mar 2025 04:28:06 +0000
ROA not after:            Thu 05 Mar 2026 04:33:06 +0000
asID:                     53132
IP address blocks:        179.107.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:51:ba:5d:e1:31:13:6e:ec:dc:81:5f:47:81:a8:41:7c:73:59:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B53A77B5E460044CB626F7588E1A91702B1AE08E
        Validity
            Not Before: Mar  6 04:28:06 2025 GMT
            Not After : Mar  5 04:33:06 2026 GMT
        Subject: CN=69A5731219DCF33445B01CD194F0C13BAC9103D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:82:42:73:69:c2:96:d5:ae:e9:88:ea:d6:
                    c8:9b:f2:1c:1e:92:fa:4f:65:a5:6c:38:36:4a:1f:
                    8c:62:57:3b:c3:fc:d0:9e:f1:f8:ec:1f:db:d3:0d:
                    d0:e2:3c:a4:ef:4c:b0:5a:b8:0d:af:b9:5e:c2:6f:
                    46:43:31:46:bb:5f:97:cf:d7:dd:82:d9:34:f0:bc:
                    6c:9c:4a:d3:03:65:ac:3f:37:02:9b:66:1f:37:2d:
                    b8:9e:ae:13:38:fb:f8:9f:b7:2b:23:43:ea:dd:62:
                    49:b2:7f:95:70:48:ec:ec:b3:ac:6f:e3:89:bd:f8:
                    7c:f7:29:69:88:0c:97:49:33:5f:15:e4:78:90:d2:
                    0f:50:d5:b5:aa:fc:e8:88:f2:63:ac:46:97:8a:5b:
                    b9:49:5e:9b:15:fa:48:b0:d0:05:8b:3d:9c:f6:c7:
                    81:27:0a:cd:85:06:79:9b:fd:7f:78:78:50:11:02:
                    96:df:e5:04:a9:9f:51:1e:4e:a7:ba:ab:de:96:2c:
                    2f:c2:ef:ae:43:a0:32:ed:43:f6:03:a3:81:da:66:
                    95:f4:dd:58:80:56:89:91:cc:61:e6:a8:15:51:da:
                    fa:72:97:ff:3a:96:58:43:5a:28:e8:67:4b:07:6c:
                    67:6d:f6:ac:b1:02:4c:87:93:88:03:36:f8:91:44:
                    0b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A5:73:12:19:DC:F3:34:45:B0:1C:D1:94:F0:C1:3B:AC:91:03:D7
            X509v3 Authority Key Identifier:
                keyid:B5:3A:77:B5:E4:60:04:4C:B6:26:F7:58:8E:1A:91:70:2B:1A:E0:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/3137392e3130372e3131322e302f32302d3234203d3e203533313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:f6:1d:d0:2c:e2:23:16:b8:4e:dc:f3:7a:38:0d:59:99:67:
         93:ad:f7:1e:a7:f6:92:ed:d7:ff:4e:6f:1c:0d:b7:76:87:cc:
         7b:40:a4:59:6b:2e:28:08:99:0f:5f:d8:89:23:29:1e:34:a5:
         da:07:c3:f7:da:64:29:b2:39:69:3e:49:aa:d6:d5:b4:eb:b4:
         5d:9c:ed:75:f3:c0:c3:8c:82:e0:8f:eb:cb:d3:be:f1:d4:da:
         38:1e:aa:61:97:f4:3e:45:83:73:ac:2c:53:ac:62:e6:cd:5b:
         83:f5:46:dc:a0:74:48:dd:c8:22:23:f8:54:df:fc:98:13:aa:
         b8:a3:f6:2d:c0:64:58:af:63:3e:f2:48:41:8e:e6:a8:a0:e5:
         a1:b0:9a:f0:e6:c2:bc:5b:5d:f1:64:aa:e3:58:39:0b:d6:a2:
         e8:6d:68:2b:e8:9b:cf:d2:f9:47:73:c8:d3:07:b4:33:8a:4b:
         f2:69:b2:3f:03:d1:79:df:a4:4b:38:96:17:44:88:f1:25:67:
         0f:b8:a6:b1:af:d6:11:9a:a4:7c:ed:3e:e0:1c:71:df:88:8a:
         82:58:ff:ab:09:87:04:36:f4:7b:62:e8:c8:7c:a8:e6:3d:11:
         12:39:26:1a:46:66:4e:63:c4:2a:49:6f:aa:7a:b2:bd:cb:14:
         d8:1a:ff:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:53:37 2025 by rpki-client