Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/3137392e3130372e36342e302f32302d3332203d3e203532353433.roa
File:                     3137392e3130372e36342e302f32302d3332203d3e203532353433.roa (raw, json)
Hash identifier:          5cgZDBTeXMJ8eCZ+PcaaQPscIW4Cy3jvxI4uG83CH2A=
Subject key identifier:   DE:AB:07:F1:E6:4B:48:2E:5B:61:35:06:CF:33:62:C6:F6:FB:C1:E5
Certificate issuer:       /CN=52197FEC585FE6099BFE7D2C712776CD340C2B22
Certificate serial:       4847B31CA434EB1CA0DACF32CBDFBFC7A4D0ED88
Authority key identifier: 52:19:7F:EC:58:5F:E6:09:9B:FE:7D:2C:71:27:76:CD:34:0C:2B:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52197FEC585FE6099BFE7D2C712776CD340C2B22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/3137392e3130372e36342e302f32302d3332203d3e203532353433.roa
Signing time:             Fri 24 Jan 2025 12:43:24 +0000
ROA not before:           Fri 24 Jan 2025 12:38:23 +0000
ROA not after:            Fri 23 Jan 2026 12:43:23 +0000
asID:                     52543
IP address blocks:        179.107.64.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:47:b3:1c:a4:34:eb:1c:a0:da:cf:32:cb:df:bf:c7:a4:d0:ed:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52197FEC585FE6099BFE7D2C712776CD340C2B22
        Validity
            Not Before: Jan 24 12:38:23 2025 GMT
            Not After : Jan 23 12:43:23 2026 GMT
        Subject: CN=DEAB07F1E64B482E5B613506CF3362C6F6FBC1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:30:0d:b1:dc:a5:6b:46:68:b6:6b:49:76:
                    f0:83:4b:a7:c0:66:5b:40:b6:83:a1:9f:b6:b2:5b:
                    ed:40:b2:08:8d:e7:14:1a:c1:46:4a:fd:93:01:27:
                    f8:a7:f2:62:5a:9b:7e:72:d7:96:34:71:f3:d2:de:
                    4b:1d:89:1d:7b:9c:04:fa:b4:cc:c3:54:78:22:46:
                    77:d2:18:8e:29:9e:f7:99:9b:51:0f:3a:13:92:6c:
                    70:48:74:27:d5:75:d5:24:3b:43:1a:e6:60:80:15:
                    6b:ec:1a:a2:8c:6c:5f:8b:6c:34:1e:6d:0b:9d:80:
                    c2:c8:49:3d:b6:58:90:d3:aa:2c:ec:93:86:61:8f:
                    51:e9:81:e0:bc:d7:1d:46:39:28:cd:95:0e:b5:ed:
                    0e:a6:b2:ae:3d:6d:f4:54:ca:cb:f6:d5:b4:7e:de:
                    82:d5:ef:3c:fe:0e:94:9c:a8:f0:c9:e4:24:2b:49:
                    b7:f0:69:3c:6e:84:ea:8a:33:10:75:50:71:2c:60:
                    34:fd:22:5e:0d:54:60:ca:f2:6b:b9:89:dc:ed:85:
                    5d:6d:7a:51:56:09:4e:34:ad:8f:95:14:14:05:8d:
                    35:d2:9b:05:a5:eb:c6:de:90:0e:2e:a3:81:b4:e2:
                    22:d3:bc:a0:27:cc:63:ab:d0:52:da:7a:82:f0:87:
                    15:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AB:07:F1:E6:4B:48:2E:5B:61:35:06:CF:33:62:C6:F6:FB:C1:E5
            X509v3 Authority Key Identifier:
                keyid:52:19:7F:EC:58:5F:E6:09:9B:FE:7D:2C:71:27:76:CD:34:0C:2B:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/52197FEC585FE6099BFE7D2C712776CD340C2B22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52197FEC585FE6099BFE7D2C712776CD340C2B22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/3137392e3130372e36342e302f32302d3332203d3e203532353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:3f:99:a7:ac:3f:2b:67:32:21:64:c9:26:aa:29:d9:33:bf:
         bd:fb:b2:0b:9b:bd:4d:37:19:cd:23:54:d5:54:6c:48:35:e4:
         f5:ac:37:21:86:66:f1:4c:2b:3e:59:8d:d2:de:4f:09:5b:00:
         f5:c7:15:bf:84:b9:66:4f:a0:71:b3:75:9c:7f:fc:4e:27:ec:
         42:a9:a1:92:aa:e8:4d:d0:bf:13:ca:b8:2c:7b:20:97:5f:23:
         d3:cf:3f:23:e4:cf:dc:af:79:ba:a9:02:f8:1f:5e:af:f8:19:
         d5:98:1a:8a:47:d5:df:d0:71:01:54:8c:96:4d:b1:d8:04:92:
         5c:6a:c7:92:0f:f2:61:c5:14:4a:71:0e:8a:ad:61:30:35:ea:
         40:d5:56:f9:f5:97:ac:eb:ed:fc:13:73:2b:c8:d8:06:f8:0c:
         c4:71:61:5b:65:ba:38:a3:56:99:a0:e9:95:e9:e0:7d:b2:1c:
         60:1b:ae:af:d5:07:cb:27:ae:22:75:65:1f:80:8d:20:f0:61:
         24:a7:5c:0f:3e:16:03:2c:75:62:be:a0:d1:b0:03:7a:47:6d:
         e8:dd:0c:9a:fe:76:98:a4:19:b4:d6:56:b2:a6:0f:e4:32:64:
         89:3d:21:08:8f:e0:1e:6f:96:07:e0:15:2e:13:42:24:b4:6d:
         1b:2b:88:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:43:07 2025 by rpki-client