Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PBA4yrX8UxhiTYuQsDmzo1HVY8fXMw2re1CdYBNAsfa/0/3137372e38372e3234302e302f32312d3332203d3e20323632333130.roa
File:                     3137372e38372e3234302e302f32312d3332203d3e20323632333130.roa (raw, json)
Hash identifier:          L/9Q1+bq1S5MnsxMlBJFLxaucsKdTNc4WmVvrCu3/KM=
Subject key identifier:   96:54:01:0F:37:EC:45:78:E4:1F:BF:EA:B6:60:43:93:B5:76:8E:CA
Certificate issuer:       /CN=15FAE1DAEE4377F151B6F71CA4052F0484861346
Certificate serial:       16708E53000E9D6DBC6DB7B559F210D7B46C2730
Authority key identifier: 15:FA:E1:DA:EE:43:77:F1:51:B6:F7:1C:A4:05:2F:04:84:86:13:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15FAE1DAEE4377F151B6F71CA4052F0484861346.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PBA4yrX8UxhiTYuQsDmzo1HVY8fXMw2re1CdYBNAsfa/0/3137372e38372e3234302e302f32312d3332203d3e20323632333130.roa
Signing time:             Wed 29 Jan 2025 18:50:40 +0000
ROA not before:           Wed 29 Jan 2025 18:45:40 +0000
ROA not after:            Wed 28 Jan 2026 18:50:40 +0000
asID:                     262310
IP address blocks:        177.87.240.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:70:8e:53:00:0e:9d:6d:bc:6d:b7:b5:59:f2:10:d7:b4:6c:27:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FAE1DAEE4377F151B6F71CA4052F0484861346
        Validity
            Not Before: Jan 29 18:45:40 2025 GMT
            Not After : Jan 28 18:50:40 2026 GMT
        Subject: CN=9654010F37EC4578E41FBFEAB6604393B5768ECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:3d:50:ae:02:99:4d:b6:42:f0:17:e5:5a:
                    17:ae:d6:d0:b1:aa:d7:ab:4a:a2:4b:7d:f9:fe:b4:
                    a7:24:15:7e:85:8a:a1:91:e1:bd:6d:d4:1c:5d:3b:
                    a9:1f:e4:51:1d:f8:51:90:cc:5e:a4:1d:91:04:ec:
                    43:19:51:a7:2b:0b:3c:03:f9:c8:48:8f:88:6b:92:
                    e5:f5:c1:de:c4:3a:7e:08:e1:1e:ff:93:b5:76:47:
                    bc:d6:ed:20:08:a2:dd:1e:08:0f:f9:70:62:10:e7:
                    c3:be:c1:44:44:84:b2:5c:3c:db:45:fc:cb:a9:f8:
                    bc:36:b9:05:7c:52:6b:56:30:b7:dd:04:92:86:1e:
                    a6:af:4c:04:b6:39:54:61:d0:6d:a3:ca:df:8b:fd:
                    fb:da:09:63:fe:b9:45:17:b2:2b:ba:e7:fd:55:ce:
                    ad:f4:96:e1:ad:a3:37:31:cb:44:80:a8:ba:69:16:
                    eb:b7:d8:50:86:26:f3:c5:00:c9:b6:e3:8e:fb:09:
                    17:03:26:d2:5b:9c:a2:af:76:1c:09:6a:25:6a:a3:
                    a3:37:1b:d0:31:2c:16:a4:6c:c5:db:ec:fb:5d:f2:
                    b2:14:d7:45:f5:c8:4f:5a:70:7d:3e:c3:f3:57:2f:
                    c4:f1:46:bc:1e:bf:72:86:be:c3:bd:5a:63:85:7c:
                    01:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:54:01:0F:37:EC:45:78:E4:1F:BF:EA:B6:60:43:93:B5:76:8E:CA
            X509v3 Authority Key Identifier:
                keyid:15:FA:E1:DA:EE:43:77:F1:51:B6:F7:1C:A4:05:2F:04:84:86:13:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PBA4yrX8UxhiTYuQsDmzo1HVY8fXMw2re1CdYBNAsfa/0/15FAE1DAEE4377F151B6F71CA4052F0484861346.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15FAE1DAEE4377F151B6F71CA4052F0484861346.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PBA4yrX8UxhiTYuQsDmzo1HVY8fXMw2re1CdYBNAsfa/0/3137372e38372e3234302e302f32312d3332203d3e20323632333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:d3:d5:0c:a2:1b:31:60:6e:ff:90:4d:90:2a:ee:70:20:3a:
         47:f7:0d:1b:1c:0c:32:2b:6d:22:7d:ba:0d:46:f9:14:2b:7e:
         12:48:72:43:ea:fb:2c:27:83:06:2d:c0:7a:38:86:fb:76:ce:
         81:a7:3d:9b:20:0c:cf:07:48:de:9e:f5:3f:a0:1f:4b:7a:ea:
         df:7b:fe:0d:ab:90:8f:8a:ea:f5:1c:5f:99:ba:5e:7a:44:9e:
         cc:f2:73:45:8b:ec:1c:db:8a:95:49:16:f3:d4:27:81:b5:b8:
         fc:8f:25:19:12:a2:eb:0e:43:f7:ed:ea:6e:7d:d1:e4:9c:93:
         7a:ac:f6:a6:93:58:4d:27:e6:db:bf:18:9f:03:aa:36:d6:2e:
         40:0a:c5:91:d4:ec:83:69:93:7f:bd:2a:60:63:31:b9:6e:69:
         52:1b:fd:2b:2f:b8:8b:fa:1a:a5:c6:72:07:ac:43:29:24:3c:
         97:39:d8:25:d7:70:d8:69:d1:0b:e7:c3:68:d8:a7:7a:02:21:
         f7:0f:b0:9f:80:8b:b0:0b:cb:cf:af:a2:ea:31:6b:8d:f8:15:
         37:94:5c:b4:c7:64:ff:71:b2:e9:95:ff:47:d3:67:e9:82:aa:
         c7:46:65:df:27:ab:d8:75:2c:00:8b:ac:b3:a9:0a:e8:3a:de:
         dc:fe:e6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:30:20 2025 by rpki-client