Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34372e302f32342d3234203d3e20323634383836.roa
File:                     3137392e3130382e34372e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          gY8kw6hNoQ0gIdhAv8pzJGMDeWlM/OvbIf0ZEIUK9wA=
Subject key identifier:   2D:16:6C:77:71:DA:B0:38:D5:72:32:C7:28:46:7C:24:72:69:CF:78
Certificate issuer:       /CN=BE343E3D32BA67E514AD2010392367A6DF1F003E
Certificate serial:       4FD513EE8BDC7A37E51000EEC1385046A07AECD0
Authority key identifier: BE:34:3E:3D:32:BA:67:E5:14:AD:20:10:39:23:67:A6:DF:1F:00:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34372e302f32342d3234203d3e20323634383836.roa
Signing time:             Thu 17 Nov 2022 18:25:22 +0000
ROA not before:           Thu 17 Nov 2022 18:20:22 +0000
ROA not after:            Thu 16 Nov 2023 18:25:22 +0000
asID:                     264886
IP address blocks:        179.108.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d5:13:ee:8b:dc:7a:37:e5:10:00:ee:c1:38:50:46:a0:7a:ec:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE343E3D32BA67E514AD2010392367A6DF1F003E
        Validity
            Not Before: Nov 17 18:20:22 2022 GMT
            Not After : Nov 16 18:25:22 2023 GMT
        Subject: CN=2D166C7771DAB038D57232C728467C247269CF78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:d8:35:a5:d8:8a:de:2c:fd:a6:55:1a:ca:
                    00:1b:29:52:3f:29:6d:00:ec:35:b4:a4:9e:59:77:
                    29:f8:85:ff:de:7d:ee:bd:7f:65:48:a6:12:7d:d2:
                    99:5a:e2:cb:24:8c:63:f7:a1:1c:28:82:d4:b9:af:
                    39:6e:48:b0:f9:c0:d9:39:89:a4:81:4c:6a:2d:af:
                    7f:9f:23:52:fc:ad:27:a9:2e:93:dc:fd:7c:7e:03:
                    91:18:69:e8:11:14:31:21:6f:ca:65:0b:56:c3:f8:
                    74:3d:0f:d2:cc:e5:32:93:01:dc:a4:67:b8:be:68:
                    40:7b:86:dd:7a:1b:92:ec:14:55:43:9b:10:72:74:
                    99:38:eb:32:4d:79:a3:68:9e:1e:a3:51:24:f6:a4:
                    a4:12:6c:53:58:40:3c:dd:ea:8c:ad:57:42:9b:0e:
                    43:3f:a4:19:ef:49:a2:98:91:71:ec:d6:5c:fe:64:
                    04:11:5b:31:f4:a9:b0:a7:1a:2e:68:e2:83:25:30:
                    b4:76:37:74:13:f3:17:4c:08:ad:8b:90:30:ba:e7:
                    00:f2:4a:ec:cc:29:3c:89:27:b2:45:8c:60:23:21:
                    2d:df:73:68:3c:b0:16:20:04:74:6b:a5:6c:9b:0f:
                    4d:b2:39:f6:8d:58:72:67:87:1b:7e:97:70:1a:51:
                    c3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:16:6C:77:71:DA:B0:38:D5:72:32:C7:28:46:7C:24:72:69:CF:78
            X509v3 Authority Key Identifier:
                keyid:BE:34:3E:3D:32:BA:67:E5:14:AD:20:10:39:23:67:A6:DF:1F:00:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34372e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ad:c4:5c:7a:a8:c8:1e:9d:ae:87:d5:0e:00:df:01:c6:67:
         03:b8:df:64:0a:18:89:6b:f3:86:c2:31:11:18:e4:f9:ef:c0:
         ed:3a:5a:9a:08:bf:73:24:69:ee:92:ce:50:b0:76:11:c5:82:
         57:0c:2c:6c:e7:1c:ae:92:49:14:72:6f:48:df:ad:d7:4c:a1:
         47:fd:dd:0d:8c:8c:ff:c8:3d:23:ed:ca:dc:dc:b0:a3:78:9a:
         02:5e:c0:20:e5:91:aa:08:41:5a:f1:f4:40:10:94:43:e2:36:
         92:df:ee:18:65:ac:0f:a5:9e:c8:a3:09:dd:a1:39:d8:cf:d5:
         7c:5e:94:42:82:65:49:98:fc:ba:b7:c6:2c:ea:b7:19:fd:07:
         d2:d1:ac:32:37:a2:fc:bd:11:2e:0c:fb:f0:f7:69:09:9f:b3:
         4c:95:9c:34:85:e0:29:87:ff:87:a3:28:00:1a:cf:cd:b6:db:
         e0:93:9a:55:01:4a:ef:a7:f5:0d:8f:e4:86:4d:37:42:88:49:
         72:c5:4f:8b:9f:66:0a:89:68:ad:d0:f4:b0:39:29:02:13:39:
         81:42:df:27:84:e7:98:ff:d0:55:8d:10:07:76:13:45:32:6d:
         4f:87:0b:ed:98:87:ea:0f:71:6e:b9:9e:5f:86:3d:b4:3f:e8:
         61:53:da:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:47 2025 by rpki-client