Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39322e302f32322d3232203d3e20323632333532.roa
File:                     3137372e3132362e39322e302f32322d3232203d3e20323632333532.roa (raw, json)
Hash identifier:          7vjKkxrq52lB0aoqCL8RQE8sbK94Wjui2mLx5B00xVo=
Subject key identifier:   15:E9:B2:D0:D9:EF:DC:06:55:65:D8:EC:B6:65:31:20:78:D3:54:7B
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       0A0E00C3ECAE4374372D4EF972EF8B9BB7609F9A
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39322e302f32322d3232203d3e20323632333532.roa
Signing time:             Thu 06 Mar 2025 15:41:21 +0000
ROA not before:           Thu 06 Mar 2025 15:36:21 +0000
ROA not after:            Thu 05 Mar 2026 15:41:21 +0000
asID:                     262352
IP address blocks:        177.126.92.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0e:00:c3:ec:ae:43:74:37:2d:4e:f9:72:ef:8b:9b:b7:60:9f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Mar  6 15:36:21 2025 GMT
            Not After : Mar  5 15:41:21 2026 GMT
        Subject: CN=15E9B2D0D9EFDC065565D8ECB665312078D3547B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fc:48:38:2b:0d:70:da:d7:68:8e:ec:fb:74:
                    34:b0:7a:c9:68:05:e8:f6:a8:d2:c4:54:08:4b:e2:
                    05:56:89:a5:e0:3e:35:0c:fc:d5:d4:ae:94:9c:a8:
                    30:3d:58:73:22:58:a2:ca:4f:f7:b8:09:7e:ae:ae:
                    62:16:0d:a0:1d:30:4a:b4:28:61:fb:07:fc:47:fd:
                    43:59:0d:14:5a:33:7a:50:63:92:bf:1a:da:41:23:
                    3f:59:46:a4:63:ca:8d:ae:f8:35:28:20:cd:78:ad:
                    01:df:4b:61:e4:ca:c6:8d:c9:10:19:5a:26:56:43:
                    4c:c6:36:b2:dc:60:ed:a5:11:b4:44:5c:5d:1a:23:
                    3a:f4:c7:cc:6d:47:7c:3b:b2:51:09:c0:be:6a:63:
                    26:dc:58:90:81:36:0c:5c:60:7f:32:f3:17:61:f4:
                    b6:49:2a:a1:36:2e:0b:12:16:c7:9c:54:f4:da:99:
                    c6:d8:24:10:74:51:4b:39:63:ec:c9:6e:91:3d:38:
                    fd:32:d0:48:9d:87:f0:3c:43:11:40:54:9f:b0:62:
                    12:ac:7f:70:d1:7d:70:2d:d6:82:e2:53:fc:ab:61:
                    5c:5b:58:a6:65:65:93:af:fa:d3:a8:df:82:15:7c:
                    47:fe:27:ca:3b:55:70:3d:a2:c7:0d:a7:49:b6:7d:
                    e4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E9:B2:D0:D9:EF:DC:06:55:65:D8:EC:B6:65:31:20:78:D3:54:7B
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39322e302f32322d3232203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:90:32:30:e3:04:52:c6:be:35:5e:1d:4c:6b:88:b6:b0:c6:
         e6:17:76:e8:39:3c:a0:74:dd:39:8f:55:f2:9f:a5:53:18:77:
         80:12:d6:46:60:b2:76:26:5c:ff:60:e6:fc:fa:ce:45:7a:89:
         78:ca:a7:fe:ff:16:1a:94:61:d7:68:82:7c:e9:e9:19:dc:9a:
         fe:7d:26:be:45:12:a6:dd:97:a0:2b:92:ed:e8:02:c9:14:10:
         20:e3:49:76:61:b7:93:0e:cb:a8:d5:c3:6e:6f:b8:fb:20:e2:
         3f:b7:bc:ca:cd:4a:66:2e:51:87:fe:a8:6c:da:e6:16:97:69:
         c3:a4:ea:65:96:1c:51:9e:0f:fc:43:bc:20:91:c1:d3:1b:b5:
         71:f5:d0:73:cd:35:cc:61:7e:b8:a1:f1:7b:aa:8d:e3:a7:ba:
         d5:80:c7:25:0f:05:33:7a:6b:f3:04:00:5d:cd:a4:b3:6d:17:
         3c:ab:f4:f4:6c:7d:b4:e7:34:cb:f5:4a:19:05:9a:cf:92:c0:
         7d:11:b8:16:a1:a6:4d:fa:53:8d:df:63:81:25:3b:7d:5a:6f:
         51:61:19:6a:97:ce:16:59:80:10:eb:96:ee:1c:b7:ab:af:64:
         ef:f7:ea:63:76:09:a4:01:e1:22:be:68:a8:31:8a:2b:f9:28:
         24:e1:2b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:35:44 2025 by rpki-client