Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3137392e3132372e39362e302f32302d3234203d3e20323632343639.roa
File:                     3137392e3132372e39362e302f32302d3234203d3e20323632343639.roa (raw, json)
Hash identifier:          4Dpc0fv+7P2m68jWU74nVR8kkteYDcvoPizul9s+qEg=
Subject key identifier:   04:D8:71:B0:5F:8E:D6:E1:17:B4:76:29:BD:C5:18:6F:E2:F1:3F:68
Certificate issuer:       /CN=2BE906475F069D2DBF48668B72C827DA2CA8E470
Certificate serial:       66C868A48F52A9313B3C0D1351BBB83AF0DEE7E6
Authority key identifier: 2B:E9:06:47:5F:06:9D:2D:BF:48:66:8B:72:C8:27:DA:2C:A8:E4:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE906475F069D2DBF48668B72C827DA2CA8E470.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3137392e3132372e39362e302f32302d3234203d3e20323632343639.roa
Signing time:             Wed 04 Dec 2024 11:10:29 +0000
ROA not before:           Wed 04 Dec 2024 11:05:29 +0000
ROA not after:            Wed 03 Dec 2025 11:10:29 +0000
asID:                     262469
IP address blocks:        179.127.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c8:68:a4:8f:52:a9:31:3b:3c:0d:13:51:bb:b8:3a:f0:de:e7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE906475F069D2DBF48668B72C827DA2CA8E470
        Validity
            Not Before: Dec  4 11:05:29 2024 GMT
            Not After : Dec  3 11:10:29 2025 GMT
        Subject: CN=04D871B05F8ED6E117B47629BDC5186FE2F13F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:77:90:b9:a7:98:60:d8:70:ee:c4:0e:80:ef:
                    51:dc:d6:28:99:5c:50:52:c1:93:6b:ca:82:8a:c6:
                    51:45:9d:dd:8a:62:9a:5c:67:9e:90:c0:6c:29:2a:
                    bb:7f:47:c9:36:cd:47:e3:11:f8:13:cf:1a:8f:e4:
                    f7:fe:4c:be:63:a1:52:e4:19:11:4f:db:c8:68:5b:
                    ba:6a:59:ce:f7:14:8f:b9:8a:41:50:bb:86:5f:6d:
                    fb:f7:ef:23:8c:75:3c:38:49:76:65:b7:a2:83:2d:
                    92:14:3c:f7:e7:d7:a1:8d:d3:8e:17:9f:ec:09:42:
                    f2:7e:c0:23:6d:6a:2c:74:ab:5c:36:63:f7:90:ef:
                    65:e6:a0:ce:e8:35:4d:36:89:cf:0f:a3:a0:14:16:
                    2f:d6:99:10:dd:22:d7:27:85:5d:d7:0c:42:ab:99:
                    1e:4e:66:c7:64:d7:43:e7:f6:24:69:93:4c:b5:2f:
                    05:70:6e:07:26:f6:ee:bf:cf:d8:e6:1a:a7:c4:d3:
                    99:6a:e5:fe:44:b2:4b:20:83:e3:f5:b4:58:70:e0:
                    11:69:02:88:5a:ca:6e:75:e2:38:3d:4d:05:06:17:
                    9b:53:13:a2:6e:63:63:db:35:c2:10:fa:10:85:0d:
                    1e:3f:92:48:39:6f:1b:a2:77:fd:f8:3e:60:89:2d:
                    1d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D8:71:B0:5F:8E:D6:E1:17:B4:76:29:BD:C5:18:6F:E2:F1:3F:68
            X509v3 Authority Key Identifier:
                keyid:2B:E9:06:47:5F:06:9D:2D:BF:48:66:8B:72:C8:27:DA:2C:A8:E4:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/2BE906475F069D2DBF48668B72C827DA2CA8E470.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE906475F069D2DBF48668B72C827DA2CA8E470.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3137392e3132372e39362e302f32302d3234203d3e20323632343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:16:a7:34:c2:30:2d:68:0b:eb:9c:ba:f6:7a:39:05:3c:8f:
         61:43:db:f5:2f:27:f7:f4:95:3b:e8:20:e0:bd:31:03:eb:e8:
         e6:60:5a:63:b3:85:f5:1c:78:e3:9a:53:c3:6b:93:84:72:ed:
         dd:34:09:57:93:6e:0c:91:06:7c:1e:3c:f3:0a:c2:82:43:e6:
         65:fb:d7:b2:b5:3d:60:cc:69:f7:bb:2e:96:a6:b2:50:78:24:
         07:af:6d:1b:ba:17:53:41:e7:a3:95:11:5f:6a:ea:82:10:f9:
         ec:f5:ad:71:d2:25:18:68:64:b5:a2:b8:4d:bf:a5:03:2f:77:
         af:09:1a:56:24:bd:1e:0f:41:9e:d1:9c:a9:43:2d:73:df:65:
         e4:e0:37:92:1f:c0:1e:de:6a:5e:79:48:b5:01:e9:a7:14:b4:
         b6:60:a6:17:89:74:3f:a8:5c:f7:bd:bf:30:ff:07:46:1b:e6:
         59:93:6e:a4:f3:ca:ab:a1:3c:86:ac:2f:c8:71:4a:9d:89:77:
         f2:d5:54:a8:df:2a:7a:6f:5e:a7:3d:8c:e7:8c:75:e8:a9:80:
         7b:34:22:ec:52:19:21:a1:36:11:58:23:c5:7a:bd:8e:e3:c5:
         65:22:1c:93:84:3f:a2:f0:99:3e:1f:9f:94:67:30:1f:12:6c:
         54:f8:cf:ed
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZshopI9SqTE7PA0TUbu4OvDe5+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJFOTA2NDc1RjA2OUQyREJGNDg2NjhCNzJDODI3REEy
Q0E4RTQ3MDAeFw0yNDEyMDQxMTA1MjlaFw0yNTEyMDMxMTEwMjlaMDMxMTAvBgNV
BAMTKDA0RDg3MUIwNUY4RUQ2RTExN0I0NzYyOUJEQzUxODZGRTJGMTNGNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpd5C5p5hg2HDuxA6A71Hc1iiZ
XFBSwZNryoKKxlFFnd2KYppcZ56QwGwpKrt/R8k2zUfjEfgTzxqP5Pf+TL5joVLk
GRFP28hoW7pqWc73FI+5ikFQu4Zfbfv37yOMdTw4SXZlt6KDLZIUPPfn16GN044X
n+wJQvJ+wCNtaix0q1w2Y/eQ72XmoM7oNU02ic8Po6AUFi/WmRDdItcnhV3XDEKr
mR5OZsdk10Pn9iRpk0y1LwVwbgcm9u6/z9jmGqfE05lq5f5Esksgg+P1tFhw4BFp
Aohaym514jg9TQUGF5tTE6JuY2PbNcIQ+hCFDR4/kkg5bxuid/34PmCJLR33AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBNhxsF+O1uEXtHYpvcUYb+LxP2gwHwYDVR0j
BBgwFoAUK+kGR18GnS2/SGaLcsgn2iyo5HAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUsyZGlxZWlZRGc3RDJQQmZXZndUYTRMcjZNUUVXY3JpZGtOaEd4Rjh0
ZzIvMC8yQkU5MDY0NzVGMDY5RDJEQkY0ODY2OEI3MkM4MjdEQTJDQThFNDcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRTkwNjQ3NUYwNjlEMkRC
RjQ4NjY4QjcyQzgyN0RBMkNBOEU0NzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVLMmRpcWVpWURnN0QyUEJmV2Z3VGE0THI2TVFFV2NyaWRrTmhHeEY4dGcyLzAv
MzEzNzM5MmUzMTMyMzcyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASzf2AwDQYJKoZIhvcNAQELBQADggEBACYWpzTC
MC1oC+ucuvZ6OQU8j2FD2/UvJ/f0lTvoIOC9MQPr6OZgWmOzhfUceOOaU8Nrk4Ry
7d00CVeTbgyRBnwePPMKwoJD5mX717K1PWDMafe7LpamslB4JAevbRu6F1NB56OV
EV9q6oIQ+ez1rXHSJRhoZLWiuE2/pQMvd68JGlYkvR4PQZ7RnKlDLXPfZeTgN5If
wB7eal55SLUB6acUtLZgpheJdD+oXPe9vzD/B0Yb5lmTbqTzyquhPIasL8hxSp2J
d/LVVKjfKnpvXqc9jOeMdeipgHs0IuxSGSGhNhFYI8V6vY7jxWUiHJOEP6LwmT4f
n5RnMB8SbFT4z+0=
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:26:38 2025 by rpki-client