Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32342d3234203d3e20323632353033.roa
File:                     3137372e36362e3139322e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          tYlcpSEuNFLaa4mKcev5SZJLtP2FX0z5JhmevMX7xXs=
Subject key identifier:   10:00:2D:30:82:D2:B2:8C:43:46:3B:7F:0C:AB:53:4D:A8:F5:BD:24
Certificate issuer:       /CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
Certificate serial:       229E9F67F537FBE844F23C7A5730B3A934F2F503
Authority key identifier: 91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 01 Apr 2025 15:16:00 +0000
ROA not before:           Tue 01 Apr 2025 15:11:00 +0000
ROA not after:            Tue 31 Mar 2026 15:16:00 +0000
asID:                     262503
IP address blocks:        177.66.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9e:9f:67:f5:37:fb:e8:44:f2:3c:7a:57:30:b3:a9:34:f2:f5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
        Validity
            Not Before: Apr  1 15:11:00 2025 GMT
            Not After : Mar 31 15:16:00 2026 GMT
        Subject: CN=10002D3082D2B28C43463B7F0CAB534DA8F5BD24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:0c:38:4f:b9:96:71:57:86:71:0b:cc:75:
                    31:d8:e4:b5:c4:f6:dc:48:24:6f:92:a6:57:0b:d2:
                    23:b6:f3:f9:46:2d:8f:16:4e:3b:09:27:3f:5b:57:
                    1a:87:be:6c:05:6f:8c:9b:de:02:92:66:1d:65:55:
                    96:94:6b:b8:ce:20:e2:8b:6d:6c:2a:94:14:46:e7:
                    30:90:8f:06:ed:0d:30:70:8f:3e:63:05:d7:68:99:
                    c5:93:1f:3c:7e:6e:fa:68:46:54:2a:f0:e4:7b:2e:
                    57:30:58:be:66:83:92:97:3a:f2:3e:31:15:29:ca:
                    b6:fd:9b:c6:55:fa:53:cd:62:c0:0e:8a:03:c7:79:
                    d8:68:33:81:09:0b:57:5b:72:92:9e:ef:4c:cd:9b:
                    81:db:cb:b1:cc:7d:38:42:9f:f9:e4:ac:5e:09:29:
                    65:f4:29:af:8b:e4:4e:06:f7:b6:19:9e:5e:67:1e:
                    09:27:14:67:67:0a:3a:93:37:ec:d5:62:3a:da:95:
                    b5:93:04:9d:46:5c:d3:cc:c0:e8:16:6c:ac:3a:e2:
                    fa:0d:d5:25:71:5b:13:4a:28:3b:f3:50:fe:78:67:
                    e6:cc:ff:e5:a6:1f:87:9d:74:20:dd:5e:e2:ef:9f:
                    75:55:b8:a3:c1:df:13:27:5d:42:15:0e:af:6e:e4:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:00:2D:30:82:D2:B2:8C:43:46:3B:7F:0C:AB:53:4D:A8:F5:BD:24
            X509v3 Authority Key Identifier:
                keyid:91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:44:c2:9d:18:15:b7:73:17:41:b4:0e:98:a8:78:f3:34:d9:
         7e:df:a4:06:2e:ab:d3:67:4f:f6:8b:0b:71:91:6c:ea:ca:18:
         84:29:ff:71:f8:87:b6:dd:cb:d3:c7:20:1c:67:59:99:a5:2f:
         26:77:ed:59:ed:c4:bb:e0:d4:7d:04:44:7f:b3:99:da:7b:64:
         11:0a:5c:2c:51:62:dc:e4:a4:bd:08:c1:86:53:15:2b:86:b2:
         22:7d:b7:00:76:ef:8f:78:85:de:78:54:c4:17:d3:99:0b:9c:
         b4:de:4c:e6:06:c8:4d:4e:4c:2e:63:a8:5d:6c:a8:c7:e1:af:
         48:34:cc:6c:81:cb:d4:7a:41:14:67:ad:d7:f0:6f:68:0f:19:
         e6:dc:7c:b9:c0:4f:b1:86:d9:61:8d:88:d2:5a:91:31:e6:23:
         a5:54:44:2c:eb:38:3b:34:82:a5:bc:04:14:08:bd:b3:50:dc:
         84:dc:32:1f:55:1c:36:0a:c2:71:9e:01:ce:e1:c7:24:52:7d:
         f9:23:3e:29:35:92:a5:eb:05:1f:9a:c0:62:88:7b:28:8a:05:
         b2:26:e5:1e:2d:eb:4c:33:70:ac:d7:38:61:e7:d9:aa:8a:6a:
         67:25:30:8f:f6:02:0c:ee:c5:3e:27:56:9b:6d:f3:80:02:71:
         89:85:ef:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:44:47 2025 by rpki-client