Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3137392e3130362e37322e302f32332d3233203d3e20323633343135.roa
File:                     3137392e3130362e37322e302f32332d3233203d3e20323633343135.roa (raw, json)
Hash identifier:          laWAdsIwh9hbp0UB+GtBNxkaqoTqy9v5wW65d58N4HY=
Subject key identifier:   FC:64:FB:B5:0A:2F:D7:6C:1A:ED:B0:A2:EB:AA:61:63:73:23:3F:07
Certificate issuer:       /CN=0D48E03F31640B05A5550FBA2E206DC75A155B20
Certificate serial:       32311CAF68CBFAC72FACCA2067F9DB1B29BBD41A
Authority key identifier: 0D:48:E0:3F:31:64:0B:05:A5:55:0F:BA:2E:20:6D:C7:5A:15:5B:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3137392e3130362e37322e302f32332d3233203d3e20323633343135.roa
Signing time:             Fri 29 Nov 2024 12:46:20 +0000
ROA not before:           Fri 29 Nov 2024 12:41:20 +0000
ROA not after:            Fri 28 Nov 2025 12:46:20 +0000
asID:                     263415
IP address blocks:        179.106.72.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:31:1c:af:68:cb:fa:c7:2f:ac:ca:20:67:f9:db:1b:29:bb:d4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D48E03F31640B05A5550FBA2E206DC75A155B20
        Validity
            Not Before: Nov 29 12:41:20 2024 GMT
            Not After : Nov 28 12:46:20 2025 GMT
        Subject: CN=FC64FBB50A2FD76C1AEDB0A2EBAA616373233F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:a7:fa:42:3c:32:8f:60:1f:cb:81:5f:c5:
                    73:04:81:63:38:82:8a:4b:fd:c2:c9:92:51:25:6e:
                    86:ab:b9:06:2b:f8:7f:a8:29:20:0a:03:36:0d:0e:
                    61:0c:88:da:fc:64:23:18:08:44:fc:30:0e:f2:79:
                    8b:6a:64:7e:e9:4e:4b:3a:c5:40:79:7c:a7:87:86:
                    47:b4:f8:ff:77:c3:55:81:b0:ef:8c:4d:e7:87:02:
                    e9:c7:79:f8:65:14:59:e0:73:d7:b7:de:4a:bb:84:
                    da:f4:84:06:1e:4a:35:76:f8:d8:67:9d:76:7e:a7:
                    11:e3:54:91:1c:b1:90:80:27:7f:62:fe:f6:ff:65:
                    3a:85:88:71:bd:30:ad:5e:c6:65:80:cf:cc:04:ba:
                    68:d7:c6:32:a6:79:42:3c:9b:7e:b2:2c:d7:5a:47:
                    91:45:c5:7f:cc:3f:d2:32:46:30:b3:b8:38:20:2f:
                    af:0b:44:57:e0:47:4f:11:81:8f:ae:69:f3:42:fd:
                    4e:8f:4e:15:6d:c8:23:88:b3:41:c7:79:5c:d3:8b:
                    79:73:e4:de:bc:11:33:40:71:91:51:e7:4f:ca:44:
                    2c:0e:d3:a2:b6:56:a5:12:5e:6a:bf:16:5b:0e:41:
                    67:82:98:c5:9b:19:ff:89:01:37:e3:39:f3:32:fb:
                    35:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:64:FB:B5:0A:2F:D7:6C:1A:ED:B0:A2:EB:AA:61:63:73:23:3F:07
            X509v3 Authority Key Identifier:
                keyid:0D:48:E0:3F:31:64:0B:05:A5:55:0F:BA:2E:20:6D:C7:5A:15:5B:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3137392e3130362e37322e302f32332d3233203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:d7:da:6a:e0:b7:1f:1e:ea:f5:63:fe:bb:a7:a8:14:6e:5a:
         68:84:8d:49:ae:ef:70:19:5e:61:3a:50:8f:2d:ab:9e:58:02:
         bc:66:a5:76:53:63:ed:87:a8:9c:4a:d6:14:bb:12:90:13:66:
         7c:74:37:2d:d9:53:be:04:24:37:83:d6:66:74:06:98:15:3f:
         54:2b:3e:99:61:65:74:fa:be:95:db:17:fe:9b:ca:17:d4:f6:
         78:eb:47:3e:4c:e8:fa:77:48:e6:f4:88:ae:32:f4:8a:4f:d2:
         6f:f9:d7:2f:1d:c0:2e:0e:7d:1b:8c:af:d8:9f:5d:77:47:a4:
         f3:c1:84:77:e9:22:97:fd:2d:90:08:e1:dd:6a:dc:dd:eb:c3:
         93:e3:e7:b4:1e:d7:ec:96:b4:7b:8f:73:31:95:a1:9c:ca:4f:
         58:2b:9a:d4:4d:7d:99:f9:29:ea:79:74:23:42:04:3e:ca:a3:
         d8:83:bc:af:32:b1:ce:84:86:b8:7a:b7:18:b5:35:e3:b3:7a:
         15:aa:9f:c3:e5:b3:14:54:b1:2e:d9:e7:96:b6:d1:36:58:50:
         f9:e4:f9:72:d2:88:7c:03:4d:14:69:9d:b8:44:3e:c0:b0:db:
         e1:84:a8:35:9b:bc:99:14:a3:6f:3e:30:24:39:4c:5b:12:0d:
         6d:60:83:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:21:20 2025 by rpki-client