Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/3137392e34392e3137362e302f32322d3232203d3e20323731323033.roa
File:                     3137392e34392e3137362e302f32322d3232203d3e20323731323033.roa (raw, json)
Hash identifier:          9wImAtKjZgRDpmbdaByqZxZR286ELk10ILaaHxAE07I=
Subject key identifier:   DB:44:39:B5:FB:37:13:3D:9B:9A:F0:9C:C2:C7:1B:F2:B1:9B:CB:AB
Certificate issuer:       /CN=6FF99BACEA5931A351E1A4B143DD026829448291
Certificate serial:       38EDC18FE7DFA8492176E11C4BF4B2C2E22DAD69
Authority key identifier: 6F:F9:9B:AC:EA:59:31:A3:51:E1:A4:B1:43:DD:02:68:29:44:82:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FF99BACEA5931A351E1A4B143DD026829448291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/3137392e34392e3137362e302f32322d3232203d3e20323731323033.roa
Signing time:             Mon 12 Jun 2023 21:53:11 +0000
ROA not before:           Mon 12 Jun 2023 21:48:11 +0000
ROA not after:            Mon 10 Jun 2024 21:53:11 +0000
asID:                     271203
IP address blocks:        179.49.176.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ed:c1:8f:e7:df:a8:49:21:76:e1:1c:4b:f4:b2:c2:e2:2d:ad:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF99BACEA5931A351E1A4B143DD026829448291
        Validity
            Not Before: Jun 12 21:48:11 2023 GMT
            Not After : Jun 10 21:53:11 2024 GMT
        Subject: CN=DB4439B5FB37133D9B9AF09CC2C71BF2B19BCBAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:c4:ff:6d:d4:c9:f5:4f:71:22:2c:30:1b:
                    d0:d7:ef:b7:c9:59:a2:4c:d2:79:ae:2a:c2:d0:ad:
                    5e:f9:34:1c:e4:34:8b:07:9c:7e:db:72:f3:fd:88:
                    21:57:96:74:9b:83:b4:54:0b:a1:5e:b2:9c:f0:42:
                    cd:d7:5d:fc:af:67:b3:77:6b:56:20:dd:67:46:68:
                    5a:25:da:f3:56:5d:ab:e6:12:6f:fa:57:e5:63:3c:
                    a3:50:4a:48:b3:0a:61:ec:95:0f:66:d1:83:04:99:
                    42:18:8a:11:3c:1d:c0:91:fb:58:ed:39:78:09:a4:
                    95:db:91:73:93:eb:fa:f0:f3:b8:25:2c:ae:28:7b:
                    77:d7:67:e8:42:3f:db:95:7e:c0:bd:71:bf:0b:7b:
                    75:19:19:ca:15:a6:15:e4:14:c9:b3:45:05:71:0c:
                    29:af:56:4b:17:21:81:d1:19:bf:90:38:a0:a6:ee:
                    7b:ad:1e:f7:91:1c:d7:c9:1a:a1:aa:43:61:6e:cb:
                    f4:f8:01:0b:78:24:89:27:b8:f1:f2:8f:e3:4f:44:
                    46:83:70:54:af:e0:cc:4e:62:fa:a2:14:83:48:a1:
                    5e:e6:8b:4a:da:8f:f2:ef:c8:d0:49:de:de:fb:45:
                    d9:39:9e:8a:ad:00:52:4d:7b:1c:03:63:2f:24:00:
                    7a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:44:39:B5:FB:37:13:3D:9B:9A:F0:9C:C2:C7:1B:F2:B1:9B:CB:AB
            X509v3 Authority Key Identifier:
                keyid:6F:F9:9B:AC:EA:59:31:A3:51:E1:A4:B1:43:DD:02:68:29:44:82:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/6FF99BACEA5931A351E1A4B143DD026829448291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6FF99BACEA5931A351E1A4B143DD026829448291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wEFrqxLZ6J8Bfbb3kLkiaSGsge1FUhEBrii2n5cRyKv/0/3137392e34392e3137362e302f32322d3232203d3e20323731323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:30:e6:f8:be:b6:98:b1:40:72:26:f0:79:42:f0:88:d3:3c:
         95:10:f7:c1:93:5d:7e:20:64:60:5a:fe:01:f3:f3:bc:cd:4e:
         86:eb:37:eb:d5:d3:92:cc:a1:10:7d:8c:7e:3e:66:45:cd:f1:
         d8:d5:38:68:5d:c8:70:b7:78:ce:82:dd:e0:aa:8b:ec:f8:53:
         ff:c5:ec:82:09:c2:66:5a:3f:78:70:18:06:0f:b6:4c:ef:86:
         6f:f3:f2:de:42:9c:9b:b3:d1:f7:dd:23:57:f9:d0:ef:71:e0:
         5a:ea:13:11:6a:70:cf:aa:ab:1d:94:56:f6:6b:1f:cd:2d:81:
         34:5a:c7:e3:f0:66:da:db:e0:72:ae:db:70:c4:3d:8e:30:2c:
         0b:7b:02:38:35:a5:81:4e:be:5d:e6:32:ea:06:ed:a5:ea:4f:
         ea:a2:db:01:b5:c3:43:ae:51:5a:ee:7e:71:4b:4e:c7:63:cc:
         bb:fe:cd:9b:9d:e9:35:e3:28:6d:4a:19:bd:bf:8d:05:2c:16:
         a3:5f:48:37:b5:67:93:1c:3b:0e:80:ac:ff:03:96:04:e8:f7:
         0b:88:3a:94:56:26:60:05:6f:17:d2:17:0a:ef:56:83:15:d4:
         09:fd:4b:ba:01:2a:6c:fb:06:a0:25:79:b9:58:57:64:a8:19:
         92:21:57:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:32:16 2025 by rpki-client