Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130332e302f32342d3234203d3e203631363732.roa
File:                     3137372e31312e3130332e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          C/G1fkd3CGtqVZqURcftM69Vf/GLYGZUQZN5m3vLEVY=
Subject key identifier:   19:B4:F0:A7:32:F8:7B:30:9E:CD:81:82:79:EC:B0:99:53:04:13:5A
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       3955424FB207D090E075A6DC3129071C1DFEC77B
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130332e302f32342d3234203d3e203631363732.roa
Signing time:             Thu 06 Mar 2025 18:53:30 +0000
ROA not before:           Thu 06 Mar 2025 18:48:30 +0000
ROA not after:            Thu 05 Mar 2026 18:53:30 +0000
asID:                     61672
IP address blocks:        177.11.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:55:42:4f:b2:07:d0:90:e0:75:a6:dc:31:29:07:1c:1d:fe:c7:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Mar  6 18:48:30 2025 GMT
            Not After : Mar  5 18:53:30 2026 GMT
        Subject: CN=19B4F0A732F87B309ECD818279ECB0995304135A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:dd:f1:24:30:ef:58:d4:eb:26:1b:23:33:
                    d8:de:d7:41:2a:22:5c:f0:f2:d0:01:cf:8c:d8:13:
                    1b:77:8b:0d:c3:e7:9f:32:c2:c3:08:9f:0a:f3:43:
                    7c:8a:18:45:ce:84:f7:ea:22:a8:f7:c4:e4:73:ba:
                    82:12:fd:bf:65:2c:ef:5e:21:0f:a0:5a:15:68:4e:
                    f3:93:b7:49:a1:f0:ec:93:32:1b:38:e6:ef:a9:6f:
                    b9:5d:ff:65:d2:ee:c2:6b:fe:c0:7f:88:b9:7f:00:
                    58:45:9a:4a:11:93:34:21:05:27:39:cc:5c:4d:c4:
                    10:6b:b2:33:16:76:49:0e:28:c5:c4:91:ae:d9:40:
                    c3:11:8e:c6:ec:f0:ea:cc:d1:1a:58:5f:48:df:d1:
                    5e:f7:2d:f8:f4:74:92:af:97:4a:95:1b:b6:e8:c9:
                    ae:7b:80:04:73:af:1a:e2:1b:c0:1a:0d:1a:98:8c:
                    54:f7:ca:3e:58:0f:38:47:52:fb:06:b4:1d:b2:d0:
                    ad:c2:e1:ed:97:2b:57:93:d0:3f:d8:72:8a:11:ed:
                    f2:e9:ae:dd:d5:f9:ad:06:95:e9:c5:8c:22:9c:bb:
                    e7:82:b7:e6:9a:0e:b5:d7:0f:6b:45:2f:8b:58:0f:
                    45:ed:84:11:25:7b:68:dc:d0:f5:c4:88:37:b6:50:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B4:F0:A7:32:F8:7B:30:9E:CD:81:82:79:EC:B0:99:53:04:13:5A
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130332e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:d4:4c:e8:71:a0:38:b0:da:30:4c:2d:e2:08:b4:de:07:ba:
         a1:7c:74:d0:32:be:90:f5:cc:bf:2a:2b:b0:98:1c:68:ca:c9:
         0f:6f:1b:9b:94:ad:04:32:36:7b:a2:03:86:78:53:7d:c2:5e:
         91:21:cc:38:c8:99:bd:97:b6:a9:b4:21:da:27:99:46:a6:a9:
         67:6f:53:0f:41:14:f4:f1:2d:ac:c9:14:90:93:03:63:d1:20:
         7a:12:a4:34:e3:b1:fc:ec:c5:4b:dc:af:0c:eb:1a:e9:df:97:
         08:b0:97:a9:df:0b:b6:65:26:a0:38:f4:e0:cf:8f:d1:b2:cb:
         4d:cd:97:2d:86:25:a6:1d:f6:67:99:da:c9:72:56:fa:ea:e6:
         98:f3:1c:b0:9e:9a:eb:38:9b:9d:9a:19:88:76:4f:88:cf:46:
         00:0a:1b:cc:a1:d2:97:7a:be:ff:59:15:5a:94:25:a6:16:6f:
         3b:d6:05:2a:18:41:70:72:45:1e:48:05:38:c9:5e:e6:f1:02:
         cb:c9:e5:ca:1e:42:3a:48:3e:70:c4:41:0d:0b:2b:f6:a8:89:
         6e:88:41:1c:c6:21:17:2e:2c:cc:bf:77:fb:5b:d7:5a:a4:2f:
         19:45:8e:16:e2:34:41:23:41:e6:b7:62:c5:8c:21:6f:39:42:
         61:22:58:42
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOVVCT7IH0JDgdabcMSkHHB3+x3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlGQTcxOEE3Njg5RjcxOEFCQjRDNDZEMEQ5QjBBMEMw
MzY2NjI4MTAeFw0yNTAzMDYxODQ4MzBaFw0yNjAzMDUxODUzMzBaMDMxMTAvBgNV
BAMTKDE5QjRGMEE3MzJGODdCMzA5RUNEODE4Mjc5RUNCMDk5NTMwNDEzNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6RN3xJDDvWNTrJhsjM9je10Eq
Ilzw8tABz4zYExt3iw3D558ywsMInwrzQ3yKGEXOhPfqIqj3xORzuoIS/b9lLO9e
IQ+gWhVoTvOTt0mh8OyTMhs45u+pb7ld/2XS7sJr/sB/iLl/AFhFmkoRkzQhBSc5
zFxNxBBrsjMWdkkOKMXEka7ZQMMRjsbs8OrM0RpYX0jf0V73Lfj0dJKvl0qVG7bo
ya57gARzrxriG8AaDRqYjFT3yj5YDzhHUvsGtB2y0K3C4e2XK1eT0D/YcooR7fLp
rt3V+a0GlenFjCKcu+eCt+aaDrXXD2tFL4tYD0XthBEle2jc0PXEiDe2UKR/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGbTwpzL4ezCezYGCeeywmVMEE1owHwYDVR0j
BBgwFoAUGfpxinaJ9xirtMRtDZsKDANmYoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1VIYUxMV1Q1aVNkOE41aEFxUW1IVW5LWEpMUDJ1RlNSZ2tNN3NZcHY3
RlgvMS8xOUZBNzE4QTc2ODlGNzE4QUJCNEM0NkQwRDlCMEEwQzAzNjY2MjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5RkE3MThBNzY4OUY3MThB
QkI0QzQ2RDBEOUIwQTBDMDM2NjYyODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNVSGFMTFdUNWlTZDhONWhBcVFtSFVuS1hKTFAydUZTUmdrTTdzWXB2N0ZYLzEv
MzEzNzM3MmUzMTMxMmUzMTMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzYzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsQtnMA0GCSqGSIb3DQEBCwUAA4IBAQCi1EzocaA4
sNowTC3iCLTeB7qhfHTQMr6Q9cy/KiuwmBxoyskPbxublK0EMjZ7ogOGeFN9wl6R
Icw4yJm9l7aptCHaJ5lGpqlnb1MPQRT08S2syRSQkwNj0SB6EqQ047H87MVL3K8M
6xrp35cIsJep3wu2ZSagOPTgz4/RsstNzZcthiWmHfZnmdrJclb66uaY8xywnprr
OJudmhmIdk+Iz0YAChvModKXer7/WRValCWmFm871gUqGEFwckUeSAU4yV7m8QLL
yeXKHkI6SD5wxEENCyv2qIluiEEcxiEXLizMv3f7W9dapC8ZRY4W4jRBI0Hmt2LF
jCFvOUJhIlhC
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:51 2025 by rpki-client