Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230332e302f32342d3234203d3e20323636333034.roa
File:                     3137302e37392e3230332e302f32342d3234203d3e20323636333034.roa (raw, json)
Hash identifier:          5q6L1HggKwgPMoo/wHQHbx/X3psbyqlYtQ8Lo5uCRbA=
Subject key identifier:   24:50:A7:3D:8D:75:45:49:65:07:2F:4D:CC:AB:9C:FC:2D:14:63:34
Certificate issuer:       /CN=95D85AE78879E9C1F337A939AFF0652A7EF31796
Certificate serial:       980E03E1D77724D9D7FCBCCA65C774F9765B75
Authority key identifier: 95:D8:5A:E7:88:79:E9:C1:F3:37:A9:39:AF:F0:65:2A:7E:F3:17:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D85AE78879E9C1F337A939AFF0652A7EF31796.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230332e302f32342d3234203d3e20323636333034.roa
Signing time:             Thu 15 Aug 2024 22:13:40 +0000
ROA not before:           Thu 15 Aug 2024 22:08:40 +0000
ROA not after:            Thu 14 Aug 2025 22:13:40 +0000
asID:                     266304
IP address blocks:        170.79.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            98:0e:03:e1:d7:77:24:d9:d7:fc:bc:ca:65:c7:74:f9:76:5b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95D85AE78879E9C1F337A939AFF0652A7EF31796
        Validity
            Not Before: Aug 15 22:08:40 2024 GMT
            Not After : Aug 14 22:13:40 2025 GMT
        Subject: CN=2450A73D8D75454965072F4DCCAB9CFC2D146334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3b:95:92:7d:64:29:de:55:ac:e3:51:f5:39:
                    7e:f0:3a:49:da:2d:8d:8e:e3:46:d0:cc:41:9a:25:
                    2d:1a:2b:30:86:d8:57:a0:dc:83:af:63:61:23:46:
                    82:b8:b7:46:a8:7d:02:73:29:d7:82:9e:35:51:01:
                    19:e6:fa:77:cc:35:f6:3a:1f:11:b9:b5:2a:ca:d4:
                    ac:7f:8d:69:17:40:79:66:59:41:85:8a:c4:3c:76:
                    6f:6e:b2:d2:86:48:ff:c2:a3:37:c5:c3:4d:d5:60:
                    aa:45:4c:9b:1f:be:65:17:9d:4d:ce:0a:bc:86:06:
                    64:99:7b:ff:ab:73:89:56:dd:a2:58:12:00:88:87:
                    bb:35:0f:92:38:68:a3:d8:af:01:03:a9:24:aa:bf:
                    57:3e:15:8c:b9:36:77:ba:4c:f0:68:55:04:e9:39:
                    7c:e4:01:74:be:f5:32:c4:95:1a:a4:f2:c0:b5:db:
                    e6:76:3a:e1:8e:01:7d:0b:f9:e0:ee:8c:e7:53:4c:
                    2d:95:a1:73:f0:3c:56:e5:36:6f:93:ae:53:98:e4:
                    a7:9b:ec:e9:e2:f3:b9:5f:d9:4a:43:f4:24:71:ba:
                    15:1c:f7:72:00:0b:58:dc:92:cf:71:d1:ad:e7:e5:
                    ee:cd:23:83:af:56:e7:e6:05:ea:b8:24:5a:03:ff:
                    4f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:50:A7:3D:8D:75:45:49:65:07:2F:4D:CC:AB:9C:FC:2D:14:63:34
            X509v3 Authority Key Identifier:
                keyid:95:D8:5A:E7:88:79:E9:C1:F3:37:A9:39:AF:F0:65:2A:7E:F3:17:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/95D85AE78879E9C1F337A939AFF0652A7EF31796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D85AE78879E9C1F337A939AFF0652A7EF31796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/3137302e37392e3230332e302f32342d3234203d3e20323636333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:62:cd:52:74:79:cf:ae:c9:e6:1c:83:97:46:e9:1c:fe:44:
         cc:eb:e8:6f:ee:f5:c8:a8:11:b7:e6:e2:11:3e:3b:20:ac:6a:
         aa:7c:ae:72:02:51:65:02:2f:61:8c:46:2c:fc:5f:6f:df:7d:
         2c:05:c1:5b:20:ed:74:a4:5b:84:0d:94:c5:fa:06:98:db:80:
         e1:f2:ec:16:d4:df:5d:ec:6f:20:82:93:c5:d8:e4:1a:ee:63:
         82:c6:04:49:7f:75:c2:44:4d:0a:2a:85:67:fd:44:9a:cd:24:
         4d:76:61:03:74:14:8e:22:13:5e:22:51:f2:51:4c:ca:6a:53:
         41:82:f7:5d:83:01:40:47:a1:1d:37:2c:07:32:ee:38:ee:16:
         4c:ef:e1:fd:74:2f:e8:b6:3b:12:22:4b:22:44:cc:c0:a6:e0:
         39:82:e5:45:02:29:49:a5:5d:78:a5:90:fe:82:77:6f:83:e2:
         50:f9:17:a1:7e:a2:f3:72:5b:68:ac:95:6b:ea:9a:e8:d1:22:
         5c:d4:1c:80:f3:ee:a8:66:67:37:e3:ae:45:46:80:65:7a:8f:
         6e:f7:d3:d3:08:2e:8b:5d:7e:21:0b:b5:03:31:f8:c2:d2:78:
         c3:a8:f8:20:7d:93:7c:6d:ad:63:a7:0a:52:3e:7a:f9:99:21:
         be:31:12:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:50:43 2025 by rpki-client