Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133392e302f32342d3234203d3e20323731323037.roa
File:                     3137392e34322e3133392e302f32342d3234203d3e20323731323037.roa (raw, json)
Hash identifier:          ekhGCkCLR0tzLsTQJ5STB+gSAwxFP0YLBUbEr+aHm4E=
Subject key identifier:   1C:2B:84:EC:33:9D:42:C4:7D:DA:CA:C5:69:6F:9C:A8:3E:2E:9A:77
Certificate issuer:       /CN=84A0648C9B9519DD03662E46C02F5297FC855EEE
Certificate serial:       616C97C40DB7C4CF105C4940A4643D7690A16C4A
Authority key identifier: 84:A0:64:8C:9B:95:19:DD:03:66:2E:46:C0:2F:52:97:FC:85:5E:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A0648C9B9519DD03662E46C02F5297FC855EEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133392e302f32342d3234203d3e20323731323037.roa
Signing time:             Tue 14 Jan 2025 13:55:45 +0000
ROA not before:           Tue 14 Jan 2025 13:50:45 +0000
ROA not after:            Tue 13 Jan 2026 13:55:45 +0000
asID:                     271207
IP address blocks:        179.42.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6c:97:c4:0d:b7:c4:cf:10:5c:49:40:a4:64:3d:76:90:a1:6c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84A0648C9B9519DD03662E46C02F5297FC855EEE
        Validity
            Not Before: Jan 14 13:50:45 2025 GMT
            Not After : Jan 13 13:55:45 2026 GMT
        Subject: CN=1C2B84EC339D42C47DDACAC5696F9CA83E2E9A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:99:a1:1a:a4:d3:39:62:e9:9d:c6:44:ec:
                    d1:0d:61:f1:46:2b:ee:74:45:83:bf:ec:2b:c2:28:
                    ba:f6:7d:4c:5f:40:66:26:99:8c:27:b8:11:5a:7f:
                    ef:61:46:42:2b:80:d3:5c:90:a5:71:d4:97:56:5f:
                    ad:2a:10:78:04:23:b4:83:de:ec:bc:bb:36:1e:e2:
                    28:c8:9c:5c:24:7c:a2:0e:a1:84:f4:cf:9d:b4:c6:
                    cc:f5:f1:c7:f4:8d:e4:f9:ca:71:b0:b6:4b:0f:86:
                    41:7e:c9:4a:aa:a0:68:33:91:48:89:c4:61:2a:1a:
                    48:5b:40:68:73:22:c8:75:a6:b5:3e:fa:cf:35:f8:
                    35:ec:e1:10:e9:d2:fa:1f:87:54:b1:63:45:11:9a:
                    b8:b6:80:d8:dc:a6:9e:42:12:db:be:4b:2a:aa:f3:
                    25:e3:ee:09:90:8c:cd:69:bb:da:29:55:23:c7:af:
                    f8:d0:ea:22:cb:65:cd:69:dd:f7:75:a6:bb:79:d6:
                    03:74:62:e9:45:93:fb:a9:3f:13:56:3f:60:f7:1c:
                    08:17:d0:66:00:a6:8e:d2:a6:46:b5:3b:17:db:08:
                    49:13:84:f0:5e:fa:32:81:77:ae:fa:7b:f7:b2:0a:
                    01:9f:d4:52:20:7e:f5:c0:bd:8a:83:8c:a7:5c:b5:
                    af:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2B:84:EC:33:9D:42:C4:7D:DA:CA:C5:69:6F:9C:A8:3E:2E:9A:77
            X509v3 Authority Key Identifier:
                keyid:84:A0:64:8C:9B:95:19:DD:03:66:2E:46:C0:2F:52:97:FC:85:5E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/84A0648C9B9519DD03662E46C02F5297FC855EEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A0648C9B9519DD03662E46C02F5297FC855EEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133392e302f32342d3234203d3e20323731323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:7e:cc:b3:69:70:9b:06:8f:ed:92:26:9a:61:4c:f8:d7:0c:
         10:07:7f:64:bd:7a:ea:d5:80:58:65:7a:93:66:9a:8d:c3:db:
         01:7e:0b:90:25:c1:f0:1b:17:fc:52:c9:b9:0a:83:c4:da:88:
         03:0b:99:58:e6:1b:78:1d:46:7a:14:0d:1e:ff:b2:57:d8:93:
         b9:6a:a7:be:35:78:79:6b:0b:ef:3b:89:e7:ca:75:e2:08:01:
         54:61:48:d5:bd:57:b2:7b:d8:42:7c:c3:54:05:d3:30:6b:9c:
         bf:57:24:c3:b6:36:1d:d2:0d:f9:92:e3:0d:1a:09:a5:94:5e:
         e2:2b:13:2d:34:cf:58:69:1a:b0:2e:df:81:06:0b:a1:92:a9:
         18:d7:9d:30:02:54:18:01:cb:b5:69:c9:66:5e:08:a8:e2:76:
         81:fd:45:3b:07:3b:0d:a6:a5:01:70:8e:c9:0c:d6:78:cc:8b:
         36:82:0d:f2:08:39:af:7b:2a:a7:27:a0:5a:26:8c:a0:bb:99:
         22:eb:f6:5e:99:d9:dd:04:b3:98:7b:dc:60:f3:28:aa:15:29:
         e9:a0:35:8e:59:53:c6:a0:41:8b:96:e7:17:78:9c:e1:70:ea:
         50:d1:32:8d:16:bf:c4:02:29:ed:9a:a2:34:70:bf:f4:f6:48:
         0a:97:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:25:20 2025 by rpki-client