Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235342e302f32332d3233203d3e203532353536.roa
File:                     3137372e38352e3235342e302f32332d3233203d3e203532353536.roa (raw, json)
Hash identifier:          tTC2u1oXgIeUAjqprYoinprcLORfIDWGOLiqbLZWpys=
Subject key identifier:   D9:E8:78:79:F5:E6:09:76:1B:FC:23:E8:83:F1:94:A2:16:B7:B0:E4
Certificate issuer:       /CN=EB2037C39904E1F64A8252CC14D3C08F8F7863B2
Certificate serial:       6FB7442A62AF759330FEC6B0AD918D87475AAA50
Authority key identifier: EB:20:37:C3:99:04:E1:F6:4A:82:52:CC:14:D3:C0:8F:8F:78:63:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235342e302f32332d3233203d3e203532353536.roa
Signing time:             Wed 03 Jul 2024 17:34:45 +0000
ROA not before:           Wed 03 Jul 2024 17:29:45 +0000
ROA not after:            Wed 02 Jul 2025 17:34:45 +0000
asID:                     52556
IP address blocks:        177.85.254.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b7:44:2a:62:af:75:93:30:fe:c6:b0:ad:91:8d:87:47:5a:aa:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2037C39904E1F64A8252CC14D3C08F8F7863B2
        Validity
            Not Before: Jul  3 17:29:45 2024 GMT
            Not After : Jul  2 17:34:45 2025 GMT
        Subject: CN=D9E87879F5E609761BFC23E883F194A216B7B0E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:89:92:05:f7:34:ee:55:42:ce:04:37:3c:
                    ec:78:86:f1:36:6f:37:27:1f:9d:3a:cd:a7:bb:50:
                    a2:58:e5:48:b8:60:33:45:10:37:fe:86:c8:de:5e:
                    6e:e9:45:e6:75:7d:93:79:68:4b:01:be:09:14:64:
                    56:c4:9f:1a:42:c4:f1:9d:fd:bb:32:29:ca:92:ec:
                    7e:a9:03:7d:58:d6:89:f0:18:82:a6:78:7c:98:92:
                    98:4f:56:14:f2:fa:6d:37:84:ab:41:f2:fe:19:13:
                    fd:b0:aa:9d:b0:17:06:75:b1:a6:e1:81:49:89:41:
                    06:8b:1e:d4:8c:d8:b1:98:4c:2e:9b:09:c9:0d:91:
                    01:45:1e:44:3f:7f:2b:d5:49:c7:a5:61:05:05:3f:
                    4c:6d:07:bf:6e:01:db:37:c8:7c:71:6c:50:77:30:
                    00:34:8a:c2:58:5d:b4:47:1d:3f:fd:39:9e:fa:9e:
                    3e:60:0c:0d:c3:b6:42:cd:37:68:df:3d:fa:11:e0:
                    a4:bd:60:64:1c:bd:97:13:f9:f3:9a:cb:1b:ba:94:
                    85:41:eb:5f:aa:b5:df:74:c8:5d:b8:2d:78:38:77:
                    2f:01:82:58:ef:f2:cc:ad:50:52:09:3e:d5:96:df:
                    2a:9a:3d:75:9d:af:98:6a:31:12:c3:e2:9b:94:34:
                    05:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E8:78:79:F5:E6:09:76:1B:FC:23:E8:83:F1:94:A2:16:B7:B0:E4
            X509v3 Authority Key Identifier:
                keyid:EB:20:37:C3:99:04:E1:F6:4A:82:52:CC:14:D3:C0:8F:8F:78:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235342e302f32332d3233203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:03:73:d6:f5:ad:de:f8:d9:cc:c9:ce:5d:ba:d9:f6:bf:61:
         97:ea:06:c1:fb:ce:63:a8:a2:1f:d9:c3:25:28:64:11:e8:c7:
         27:0a:bf:ed:f5:e4:5c:d4:0b:8c:84:27:b6:25:66:44:a5:ae:
         3b:3f:0a:55:90:e6:3e:2f:d4:9a:6c:e3:96:ef:60:65:5a:4f:
         eb:7b:84:35:f2:02:eb:ed:be:bd:cc:06:42:1a:e0:6d:b6:df:
         43:d1:af:e4:5a:3f:78:f1:09:06:42:d3:70:ee:70:ea:36:af:
         f4:fa:26:a9:ad:5f:b3:1b:0b:6b:1b:da:fe:f9:fb:9b:7b:ac:
         50:42:24:07:ed:4a:e6:00:12:e8:b9:6e:da:d8:d2:0f:92:cb:
         2a:04:73:15:ff:43:78:14:e1:6f:bc:84:89:fb:8f:1f:dd:39:
         66:2a:66:08:63:20:f4:5b:ca:f2:3b:4a:2a:db:44:81:a5:30:
         b3:3b:5a:4b:4b:39:32:0b:61:0e:47:5a:1d:ee:cd:cc:61:b3:
         86:b4:8a:02:db:c7:59:ad:4e:1e:b8:35:30:a8:17:72:40:40:
         f9:40:d0:9d:dd:e2:cc:6e:fe:b9:91:41:8c:3c:8e:2a:34:25:
         4f:81:81:b4:03:7b:f6:ca:a9:5d:12:e9:65:d2:c9:17:54:a8:
         98:12:7b:c8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUb7dEKmKvdZMw/sawrZGNh0daqlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIyMDM3QzM5OTA0RTFGNjRBODI1MkNDMTREM0MwOEY4
Rjc4NjNCMjAeFw0yNDA3MDMxNzI5NDVaFw0yNTA3MDIxNzM0NDVaMDMxMTAvBgNV
BAMTKEQ5RTg3ODc5RjVFNjA5NzYxQkZDMjNFODgzRjE5NEEyMTZCN0IwRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fomSBfc07lVCzgQ3POx4hvE2
bzcnH506zae7UKJY5Ui4YDNFEDf+hsjeXm7pReZ1fZN5aEsBvgkUZFbEnxpCxPGd
/bsyKcqS7H6pA31Y1onwGIKmeHyYkphPVhTy+m03hKtB8v4ZE/2wqp2wFwZ1sabh
gUmJQQaLHtSM2LGYTC6bCckNkQFFHkQ/fyvVScelYQUFP0xtB79uAds3yHxxbFB3
MAA0isJYXbRHHT/9OZ76nj5gDA3DtkLNN2jfPfoR4KS9YGQcvZcT+fOayxu6lIVB
61+qtd90yF24LXg4dy8Bgljv8sytUFIJPtWW3yqaPXWdr5hqMRLD4puUNAUfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2eh4efXmCXYb/CPog/GUoha3sOQwHwYDVR0j
BBgwFoAU6yA3w5kE4fZKglLMFNPAj494Y7IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2dvZXZSaFZzeXRZVkFSNkF6WW55Q2Q1cGpGU1VMc2llTjFkM3FqR3V6
NHIvMC9FQjIwMzdDMzk5MDRFMUY2NEE4MjUyQ0MxNEQzQzA4RjhGNzg2M0IyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCMjAzN0MzOTkwNEUxRjY0
QTgyNTJDQzE0RDNDMDhGOEY3ODYzQjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNnb2V2UmhWc3l0WVZBUjZBellueUNkNXBqRlNVTHNpZU4xZDNxakd1ejRyLzAv
MzEzNzM3MmUzODM1MmUzMjM1MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzUzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsVX+MA0GCSqGSIb3DQEBCwUAA4IBAQAtA3PW9a3e
+NnMyc5dutn2v2GX6gbB+85jqKIf2cMlKGQR6McnCr/t9eRc1AuMhCe2JWZEpa47
PwpVkOY+L9SabOOW72BlWk/re4Q18gLr7b69zAZCGuBttt9D0a/kWj948QkGQtNw
7nDqNq/0+iaprV+zGwtrG9r++fube6xQQiQH7UrmABLouW7a2NIPkssqBHMV/0N4
FOFvvISJ+48f3TlmKmYIYyD0W8ryO0oq20SBpTCzO1pLSzkyC2EOR1od7s3MYbOG
tIoC28dZrU4euDUwqBdyQED5QNCd3eLMbv65kUGMPI4qNCVPgYG0A3v2yqldEull
0skXVKiYEnvI
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:15 2025 by rpki-client