Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa
File:                     3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa (raw, json)
Hash identifier:          WZB5WJpKmN6iSnEg7cROo/mqf/cCOICYMdHAXFnakmg=
Subject key identifier:   A5:CD:9E:D8:6C:FE:58:91:23:6D:CD:15:B5:3F:FC:98:26:C7:61:3C
Certificate issuer:       /CN=31A0D65979DD9912F3B220BB4A873ED35729257C
Certificate serial:       5C76ECADD34CCFA875A089F6C9F56829F68E7A05
Authority key identifier: 31:A0:D6:59:79:DD:99:12:F3:B2:20:BB:4A:87:3E:D3:57:29:25:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa
Signing time:             Thu 06 Mar 2025 19:19:21 +0000
ROA not before:           Thu 06 Mar 2025 19:14:21 +0000
ROA not after:            Thu 05 Mar 2026 19:19:21 +0000
asID:                     28584
IP address blocks:        177.129.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:76:ec:ad:d3:4c:cf:a8:75:a0:89:f6:c9:f5:68:29:f6:8e:7a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31A0D65979DD9912F3B220BB4A873ED35729257C
        Validity
            Not Before: Mar  6 19:14:21 2025 GMT
            Not After : Mar  5 19:19:21 2026 GMT
        Subject: CN=A5CD9ED86CFE5891236DCD15B53FFC9826C7613C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:83:48:7d:4d:ad:4f:e1:c1:15:31:6b:01:04:
                    bd:9f:6f:b9:55:89:db:61:83:13:4b:e6:14:7d:b9:
                    da:cc:4f:05:00:86:0c:ca:9b:bb:3d:ed:e7:c2:5a:
                    62:1d:8c:ba:e7:a0:a8:e5:cf:54:bb:da:52:1e:3d:
                    66:c5:80:87:3d:08:e1:d2:27:39:1f:47:79:36:5e:
                    2f:32:86:0b:64:ac:01:f1:a5:48:d0:75:7e:7d:16:
                    7d:4e:89:c6:a2:4c:09:0c:c1:21:70:c3:00:ea:87:
                    c8:ad:48:f2:f3:2c:b2:4a:93:2a:4e:e6:5b:ac:10:
                    97:43:83:2b:c2:e8:2f:c9:52:53:1a:74:17:1d:91:
                    57:fc:3f:c0:2d:63:04:8b:61:e7:c5:d6:f6:36:9e:
                    27:ab:09:c0:2f:39:d2:e3:ad:06:97:21:4c:3a:02:
                    cc:10:ec:f8:71:63:d3:31:80:6c:e1:b4:16:1c:b4:
                    cd:07:6f:3b:70:69:1d:b8:1a:b0:fb:f5:fa:4b:5a:
                    a1:19:85:48:6a:16:61:8d:74:ac:b9:e9:ad:7a:bd:
                    28:21:21:ea:5b:b9:74:97:f2:c9:5c:45:72:73:f8:
                    1d:23:21:62:07:2f:c2:0f:88:90:2a:6e:2c:1d:8d:
                    3e:e8:d6:96:d6:96:44:af:aa:27:0d:6c:81:6e:72:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CD:9E:D8:6C:FE:58:91:23:6D:CD:15:B5:3F:FC:98:26:C7:61:3C
            X509v3 Authority Key Identifier:
                keyid:31:A0:D6:59:79:DD:99:12:F3:B2:20:BB:4A:87:3E:D3:57:29:25:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/31A0D65979DD9912F3B220BB4A873ED35729257C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:1d:de:42:b7:80:83:e8:a0:59:cd:c8:e9:d7:7c:49:e0:ca:
         3f:be:78:cb:84:07:68:0a:a3:01:a7:15:f7:70:29:45:7d:c4:
         64:f6:d3:89:26:15:0e:9a:1f:52:8f:93:27:af:65:ea:83:36:
         cd:1c:f8:b7:20:0d:e6:e2:5c:56:89:4b:f9:5b:f0:57:5c:2a:
         79:51:f7:cd:d6:bc:25:df:01:cc:e8:91:24:5d:9a:e1:f5:01:
         c4:8b:fd:04:dc:a8:8a:23:36:04:eb:5d:fc:35:af:49:3a:ac:
         55:83:a5:cc:e7:09:ae:dc:3a:82:59:e7:e6:de:d7:17:7a:5f:
         67:30:bf:37:24:55:14:93:14:a2:16:33:e2:0b:e5:b9:4a:c7:
         11:da:a0:68:7f:37:c5:97:eb:93:96:f3:d4:5f:96:15:20:4e:
         c6:97:aa:41:97:d2:3c:05:da:fa:fa:6e:6e:58:b2:65:00:f3:
         0b:b3:12:4c:df:cf:71:ab:14:21:9d:34:b0:f0:55:c3:73:4d:
         48:22:f7:01:96:cb:80:28:7b:77:c1:64:55:e9:49:52:eb:b1:
         16:99:2d:b0:c3:ab:23:16:ad:74:72:5a:c4:0d:ac:df:b7:6e:
         9a:06:9c:ae:d2:28:50:4d:37:be:d9:bd:8c:d8:49:2d:42:b5:
         ce:e1:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:29:42 2025 by rpki-client