Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3137372e3132392e3230382e302f32322d3332203d3e20323633303437.roa
File:                     3137372e3132392e3230382e302f32322d3332203d3e20323633303437.roa (raw, json)
Hash identifier:          h6+0aMAqgLWT7b1/dU8g0fHHamO5wnkMTcnqosd0ums=
Subject key identifier:   74:12:2F:7F:70:BC:18:71:5D:97:F0:A7:49:B6:9A:1C:DC:BF:B0:97
Certificate issuer:       /CN=2D5218850067B1879FF7D928A844733CA008C908
Certificate serial:       6DBD2AE17D8641D6F850091A5B87D84898B10EBE
Authority key identifier: 2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3137372e3132392e3230382e302f32322d3332203d3e20323633303437.roa
Signing time:             Wed 29 Jan 2025 13:25:02 +0000
ROA not before:           Wed 29 Jan 2025 13:20:02 +0000
ROA not after:            Wed 28 Jan 2026 13:25:02 +0000
asID:                     263047
IP address blocks:        177.129.208.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bd:2a:e1:7d:86:41:d6:f8:50:09:1a:5b:87:d8:48:98:b1:0e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5218850067B1879FF7D928A844733CA008C908
        Validity
            Not Before: Jan 29 13:20:02 2025 GMT
            Not After : Jan 28 13:25:02 2026 GMT
        Subject: CN=74122F7F70BC18715D97F0A749B69A1CDCBFB097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:39:53:70:e1:8c:95:28:f7:62:5a:14:48:
                    60:2f:27:86:7d:1f:14:6c:86:7b:6c:d6:63:6e:bb:
                    65:92:ee:cc:69:77:1a:36:29:d6:14:d5:7a:79:6c:
                    5e:92:d3:1f:f5:6d:1d:50:04:20:e2:be:ff:32:98:
                    fb:7d:b6:32:71:ed:41:cf:6b:6a:ca:74:0b:66:c6:
                    29:7f:3b:8c:6a:36:5d:c5:d9:7d:c7:61:c3:7f:62:
                    66:bc:5e:cb:ef:a1:c7:70:0c:ce:f8:a4:16:c6:3c:
                    19:35:17:66:23:16:88:d0:2c:bc:3c:c4:3d:67:81:
                    cd:d8:71:3c:db:b9:10:dc:74:7f:f3:c5:67:80:ac:
                    b8:b4:65:c2:7a:08:0c:4e:b0:be:85:f1:ef:37:06:
                    90:64:19:b7:7e:48:95:14:30:b8:ec:8e:74:52:52:
                    b8:0e:bb:3d:8c:9d:f3:ab:34:9d:81:92:a7:40:22:
                    06:96:65:20:0c:09:02:5c:8b:38:b5:13:4c:98:26:
                    aa:ba:cd:fd:cb:8c:6b:61:f4:75:82:18:d1:9a:00:
                    44:1f:0f:a4:51:47:fb:b6:1f:84:3b:35:9f:6b:5d:
                    2c:ee:b9:b2:fc:a3:a4:45:6e:64:59:2d:ff:c1:3c:
                    34:c0:ce:c3:6c:85:0b:42:1f:37:29:f1:ef:62:f5:
                    bf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:12:2F:7F:70:BC:18:71:5D:97:F0:A7:49:B6:9A:1C:DC:BF:B0:97
            X509v3 Authority Key Identifier:
                keyid:2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3137372e3132392e3230382e302f32322d3332203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:58:28:28:d8:17:62:5e:f3:19:77:9b:a0:2e:2b:ec:e4:99:
         33:2d:47:e3:47:ea:b3:ac:d7:bb:a7:e6:24:13:ab:79:47:da:
         89:ba:5d:32:a8:38:1c:d6:18:c1:9b:f4:44:1b:0a:77:b3:8f:
         97:17:64:18:1e:ac:30:da:e7:46:58:1c:20:09:3a:0b:18:a1:
         1b:de:cd:7b:68:d9:28:aa:4c:a1:ba:03:fe:b0:ed:c5:0f:1e:
         ca:61:81:2e:ff:fb:82:f8:f1:ae:b7:43:20:b6:9f:f0:c7:f2:
         b3:42:97:bf:ca:f2:50:c7:2d:dd:2f:ac:05:b8:f0:62:31:14:
         d0:5a:81:fb:89:38:34:0f:5e:ce:48:0a:bd:d4:9f:cd:6a:4b:
         f3:7f:d7:0e:c4:fa:32:4e:75:cc:71:18:92:9a:1d:22:fe:b0:
         c7:fc:a1:93:dd:d4:ed:c2:8a:58:a3:7e:02:9a:50:0f:98:da:
         8e:51:6a:02:a0:7c:37:f9:c4:a5:9e:d7:47:5f:59:78:27:e9:
         35:e7:c3:77:a4:e9:23:86:d4:39:52:d6:ec:5e:7e:8c:08:03:
         02:e7:00:be:7d:53:66:56:33:08:42:f4:7c:8d:a9:b7:f5:80:
         5c:5e:ae:fc:f5:15:a3:ab:4c:2c:76:9c:60:32:29:a0:af:a6:
         db:1a:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:45:39 2025 by rpki-client