Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3137372e3138342e36342e302f32302d3234203d3e203532383938.roa
File:                     3137372e3138342e36342e302f32302d3234203d3e203532383938.roa (raw, json)
Hash identifier:          cW6uzlmqRmK7WNbyLiqI37Y9E1ADHVVyGg0jgDIJ8qY=
Subject key identifier:   FB:93:54:9D:CD:DB:EF:3F:36:B3:C6:A1:09:BE:CF:85:D2:61:57:72
Certificate issuer:       /CN=ECFAB6AC9374C6518AC9B2588CE9843E89FD8654
Certificate serial:       3C09697F8635ED6AFCCD4C74462D9143820E76D8
Authority key identifier: EC:FA:B6:AC:93:74:C6:51:8A:C9:B2:58:8C:E9:84:3E:89:FD:86:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECFAB6AC9374C6518AC9B2588CE9843E89FD8654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3137372e3138342e36342e302f32302d3234203d3e203532383938.roa
Signing time:             Mon 23 Dec 2024 11:42:12 +0000
ROA not before:           Mon 23 Dec 2024 11:37:12 +0000
ROA not after:            Mon 22 Dec 2025 11:42:12 +0000
asID:                     52898
IP address blocks:        177.184.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:09:69:7f:86:35:ed:6a:fc:cd:4c:74:46:2d:91:43:82:0e:76:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECFAB6AC9374C6518AC9B2588CE9843E89FD8654
        Validity
            Not Before: Dec 23 11:37:12 2024 GMT
            Not After : Dec 22 11:42:12 2025 GMT
        Subject: CN=FB93549DCDDBEF3F36B3C6A109BECF85D2615772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:dc:e5:e4:8a:d5:e4:49:39:41:f2:46:d6:
                    01:46:56:ba:25:41:4b:e2:5f:b3:4d:be:c3:18:c1:
                    97:91:0e:81:58:36:91:0e:2e:d8:fa:3d:0d:76:25:
                    39:76:74:3a:7d:dc:d1:52:a2:fe:48:db:6d:22:dc:
                    d8:ba:11:ca:b3:49:0b:10:77:0e:9f:67:31:29:e5:
                    30:ad:a0:ed:29:56:54:30:0f:7b:fd:41:5c:ba:cb:
                    78:c6:d0:c2:ba:be:24:59:8a:05:fc:96:a7:00:c8:
                    2d:1c:7c:df:f2:23:78:5b:22:7a:5f:bb:c9:78:a1:
                    81:3c:c5:fb:4e:9f:14:9a:54:30:9a:15:0c:c4:db:
                    d1:a5:c8:87:69:c6:32:20:4b:3f:63:57:85:0c:48:
                    d1:cd:b9:29:0a:33:ff:15:6a:4e:e4:ab:46:5d:22:
                    bb:33:7d:93:f5:53:27:d1:d2:03:66:30:de:66:ba:
                    65:2f:4d:0c:e8:ce:a9:e8:b0:3a:52:f7:9f:42:a8:
                    42:02:02:63:22:63:17:1b:1e:27:6a:00:66:c7:57:
                    41:98:01:75:6b:06:4a:51:17:51:46:a4:ba:69:16:
                    18:33:d3:17:e4:36:86:c9:fe:23:cb:17:ff:4f:f7:
                    02:64:1c:58:17:d5:c8:ad:fc:8f:1c:94:30:7b:77:
                    51:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:93:54:9D:CD:DB:EF:3F:36:B3:C6:A1:09:BE:CF:85:D2:61:57:72
            X509v3 Authority Key Identifier:
                keyid:EC:FA:B6:AC:93:74:C6:51:8A:C9:B2:58:8C:E9:84:3E:89:FD:86:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/ECFAB6AC9374C6518AC9B2588CE9843E89FD8654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECFAB6AC9374C6518AC9B2588CE9843E89FD8654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3137372e3138342e36342e302f32302d3234203d3e203532383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:b7:9e:71:08:bb:03:38:79:59:fa:d8:98:ea:e5:47:b4:79:
         5d:32:85:38:05:cd:b9:6b:e7:a4:53:0d:b5:1f:5b:35:79:32:
         f6:13:29:da:df:29:3b:c6:43:b6:d7:71:c3:eb:21:e1:33:74:
         e6:f4:46:82:aa:81:06:31:b9:5c:11:36:a4:28:1f:70:48:2e:
         e2:ed:34:37:51:15:4c:7a:f1:9f:b9:f7:37:d5:0c:e0:fb:c9:
         2d:19:1a:4e:3b:3b:fc:75:30:21:c7:33:24:3e:37:f8:ba:4f:
         18:22:a0:60:95:7a:14:10:de:ea:9c:17:5f:d4:9a:16:dc:fd:
         03:d1:2e:01:14:82:8b:2a:63:e0:08:66:25:3a:d0:5b:72:62:
         93:5e:b5:bf:23:af:65:87:61:3f:a7:55:a2:bb:09:a9:9f:a4:
         fd:13:9d:bc:b9:57:bd:59:c6:98:32:4c:30:e3:37:34:3a:06:
         1b:80:aa:2b:a0:02:d7:28:1f:5c:1b:cc:79:5f:b2:f7:bc:8b:
         5e:6f:28:f0:18:b1:8b:b2:cf:67:a1:79:df:58:00:fb:f9:09:
         b9:5e:78:d2:95:e1:a6:bf:a2:fc:96:67:1f:aa:67:74:a7:e8:
         34:c6:dc:e4:6a:c5:90:b6:de:2e:2d:75:30:4c:67:79:1c:c6:
         0c:cb:35:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:26 2025 by rpki-client