Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/3137372e38352e3134342e302f32312d3332203d3e203533303435.roa
File:                     3137372e38352e3134342e302f32312d3332203d3e203533303435.roa (raw, json)
Hash identifier:          SwzhHwvnVjOWpG7pShGgiG+PQq8n1CC513wtM2e+AfA=
Subject key identifier:   0C:9F:A5:90:16:DC:AB:7A:75:0E:31:99:53:FC:67:D8:D4:34:7B:E6
Certificate issuer:       /CN=67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC
Certificate serial:       2BE0B3F571990A5312FA74E0721B26D4EAC6F355
Authority key identifier: 67:F9:C1:5F:CB:2C:83:39:DC:83:7E:A9:BA:2B:56:A6:25:DD:2F:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/3137372e38352e3134342e302f32312d3332203d3e203533303435.roa
Signing time:             Tue 25 Jun 2024 14:34:37 +0000
ROA not before:           Tue 25 Jun 2024 14:29:37 +0000
ROA not after:            Tue 24 Jun 2025 14:34:37 +0000
asID:                     53045
IP address blocks:        177.85.144.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e0:b3:f5:71:99:0a:53:12:fa:74:e0:72:1b:26:d4:ea:c6:f3:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC
        Validity
            Not Before: Jun 25 14:29:37 2024 GMT
            Not After : Jun 24 14:34:37 2025 GMT
        Subject: CN=0C9FA59016DCAB7A750E319953FC67D8D4347BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c0:2e:8d:a5:25:cc:54:89:ac:88:48:e1:b4:
                    87:78:89:c0:1e:1c:66:cb:62:37:c0:aa:d8:d5:65:
                    df:94:bc:28:03:5a:e8:b8:dc:6c:8a:b6:cb:19:bb:
                    f5:05:c6:c2:fd:9d:8f:36:8c:c8:0a:ee:9e:ee:18:
                    fe:99:db:be:b1:0c:a8:8c:45:da:6e:52:54:f3:02:
                    ec:71:7a:66:24:0a:92:8f:b7:42:a5:9e:c7:eb:59:
                    b9:e8:6b:86:05:9d:ec:c6:97:12:05:a1:e3:5d:68:
                    fc:c2:dd:f6:9e:cd:53:08:db:c8:7d:c3:13:3a:68:
                    58:f9:2d:b1:38:88:ba:9c:54:0e:0b:dd:0a:b2:c6:
                    74:d7:55:ea:e9:f5:eb:b4:1d:e4:79:48:d0:32:cf:
                    64:02:33:ac:1d:7c:dc:3b:e7:ea:36:d1:a1:ed:e9:
                    35:15:a6:57:ab:46:84:27:f8:5b:e3:fb:1f:c7:1f:
                    d7:a5:5e:4b:85:18:ec:a3:84:34:cf:fa:6b:3a:38:
                    16:cf:3c:bf:50:78:4b:22:f6:cf:84:a3:20:c4:21:
                    ac:48:e7:c5:7b:8e:89:f1:d8:c2:b3:35:ef:38:73:
                    cd:f6:ff:7f:b9:9d:dc:1e:56:14:8f:65:3a:21:5e:
                    9a:d5:7d:bf:1d:f7:6d:8e:e5:51:96:51:cc:f0:f3:
                    d3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9F:A5:90:16:DC:AB:7A:75:0E:31:99:53:FC:67:D8:D4:34:7B:E6
            X509v3 Authority Key Identifier:
                keyid:67:F9:C1:5F:CB:2C:83:39:DC:83:7E:A9:BA:2B:56:A6:25:DD:2F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F9C15FCB2C8339DC837EA9BA2B56A625DD2FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/3137372e38352e3134342e302f32312d3332203d3e203533303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:9f:41:c6:8e:33:8b:72:03:de:03:74:2c:95:35:9f:42:fa:
         77:4e:6e:7a:24:18:67:5c:7a:e1:1d:08:44:e9:b9:80:35:a0:
         8d:c2:60:19:c9:f4:9c:bd:87:55:88:9b:18:7b:19:d7:59:6a:
         71:90:ea:1a:e2:89:c4:e5:20:15:0d:56:cf:4e:c3:e6:d8:1b:
         26:e9:2f:8d:95:88:90:27:e4:f6:b8:35:41:38:a4:db:dc:fb:
         1f:c2:eb:44:a4:c9:38:9a:5f:5e:e4:9d:7a:be:0b:20:97:1c:
         54:ad:25:44:b7:8b:5a:18:cf:0f:ae:c0:41:9b:06:f5:68:56:
         43:90:bd:a9:6c:b6:a2:c4:18:97:0f:41:e1:54:cc:46:d5:26:
         3d:f8:1c:cc:ab:72:9e:cb:19:4c:54:dc:19:21:69:bb:e0:5e:
         af:36:7c:cf:32:80:f3:b3:8c:87:57:6f:51:b0:88:eb:48:65:
         34:47:84:cd:51:d0:b6:b2:8c:6b:be:aa:ff:50:74:f5:9c:08:
         7b:4d:de:b2:b9:35:b9:35:97:5b:00:de:ae:91:7e:10:73:d1:
         3e:d8:a9:db:62:2a:01:df:52:fa:69:5b:db:ba:cf:bb:16:0d:
         80:6a:35:e2:35:af:fc:91:ed:a8:f0:c5:4d:c0:5c:ae:51:46:
         a3:8a:64:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:27:47 2025 by rpki-client