Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32332d3233203d3e20323633363132.roa
File:                     3137392e3138392e3131322e302f32332d3233203d3e20323633363132.roa (raw, json)
Hash identifier:          cAcp7E4Fhf5iH0okQWsnWe5YsM9h5UTuO3ZzHbWJSzQ=
Subject key identifier:   9A:9C:60:75:C6:B2:25:B6:67:AF:AD:2E:03:4F:63:85:46:1D:F3:F7
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       46F1CE8B90E1560C78193086904C6EF9633D51F1
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32332d3233203d3e20323633363132.roa
Signing time:             Tue 18 Mar 2025 13:36:36 +0000
ROA not before:           Tue 18 Mar 2025 13:31:36 +0000
ROA not after:            Tue 17 Mar 2026 13:36:36 +0000
asID:                     263612
IP address blocks:        179.189.112.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f1:ce:8b:90:e1:56:0c:78:19:30:86:90:4c:6e:f9:63:3d:51:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Mar 18 13:31:36 2025 GMT
            Not After : Mar 17 13:36:36 2026 GMT
        Subject: CN=9A9C6075C6B225B667AFAD2E034F6385461DF3F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:10:37:58:c1:43:e5:ce:6a:69:5b:d5:60:
                    52:0a:66:19:81:fe:c2:93:04:7e:8e:a5:ed:a2:83:
                    b6:7d:1e:7e:2e:13:68:7e:21:a4:73:00:f3:f4:c8:
                    f5:c9:ab:29:92:c3:1a:b0:56:d4:f1:74:e4:ef:d5:
                    36:b4:14:69:52:ad:13:6b:7c:64:74:a3:04:4d:da:
                    86:d1:09:4c:a7:a2:99:d2:c0:bb:f8:de:2b:5b:76:
                    a0:7f:7f:5a:fc:8b:34:13:33:c2:7f:02:3e:ff:b3:
                    82:34:79:e9:a9:d0:63:5c:f8:44:fd:96:83:3e:f3:
                    2c:ab:d7:c8:02:45:41:2a:30:68:ea:ef:2b:91:41:
                    17:7a:52:37:58:fb:8a:3b:3b:24:b9:ef:2d:31:7a:
                    bd:a4:85:db:8c:e7:4c:e9:21:80:24:73:81:25:32:
                    65:f8:de:1f:01:fd:74:90:3f:4a:92:73:fe:28:6a:
                    c3:9e:08:16:bb:73:e4:48:0f:a5:2a:13:72:34:c2:
                    7c:cf:47:b3:3f:e1:f9:d0:45:5c:7b:63:6c:76:26:
                    ac:39:18:76:d1:22:95:3a:7c:71:ce:f8:ce:df:69:
                    4f:30:4b:f5:a7:ed:a7:fd:4b:22:4b:2b:13:86:bf:
                    11:83:99:1f:6c:83:47:ba:2f:cf:ce:2f:6b:3d:f0:
                    16:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9C:60:75:C6:B2:25:B6:67:AF:AD:2E:03:4F:63:85:46:1D:F3:F7
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32332d3233203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:69:c8:5f:df:bf:c5:6e:3c:77:ce:4a:e8:3e:34:d7:80:e4:
         34:7e:06:2c:a4:20:62:8a:fb:bc:77:47:60:7a:5f:1f:59:51:
         be:fe:c2:4c:30:0e:d1:1a:8d:4e:d3:37:65:82:8d:03:e2:11:
         ed:fa:d1:63:4d:9a:23:f1:1f:a1:84:6d:1f:e4:0e:c2:85:25:
         1a:84:bc:b3:7e:77:1b:5e:b6:ec:8d:5a:ef:57:d5:0d:31:94:
         5c:77:a3:25:f1:e9:a0:30:c9:57:23:e6:00:a6:2d:71:fa:d4:
         81:86:88:22:3f:28:ef:75:d2:d1:bd:26:6c:57:48:6b:6b:1f:
         13:2a:96:2a:82:35:37:f0:25:9d:f4:96:5d:8c:36:e8:5b:3a:
         2a:51:f4:a4:54:73:3d:9c:c7:ab:b0:3f:4b:9d:05:95:eb:92:
         a4:ea:fd:a7:d8:aa:3c:a8:1a:04:16:7a:f2:3a:90:27:29:1e:
         8f:47:13:c5:26:2a:cc:c3:07:d6:6f:4a:bf:a4:a8:21:e2:d2:
         6f:2c:d0:15:7b:7a:f1:85:72:9c:a2:40:1e:60:8e:cd:6f:e2:
         a7:5a:a5:04:f7:88:dc:ff:ad:13:59:fe:93:16:17:73:3d:09:
         12:b1:35:fb:e3:74:11:af:97:8b:3f:de:df:9a:18:ae:60:86:
         70:fa:f2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:00 2025 by rpki-client