Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/3137372e38362e34302e302f32322d3234203d3e20323632363232.roa
File:                     3137372e38362e34302e302f32322d3234203d3e20323632363232.roa (raw, json)
Hash identifier:          ZWZVYogJK2uJv23wIjfTYwgsMsA1XqkNODIX7U9zhsk=
Subject key identifier:   17:74:2E:AE:12:EA:C3:B6:89:CD:02:62:E6:0F:C3:0B:FF:63:B1:A8
Certificate issuer:       /CN=2EF0CF727D2573B3CCB71103C2E44D1F67817E6D
Certificate serial:       650C0C8CF2F3A0E2D94C44A6441D2EBA53882CF3
Authority key identifier: 2E:F0:CF:72:7D:25:73:B3:CC:B7:11:03:C2:E4:4D:1F:67:81:7E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/3137372e38362e34302e302f32322d3234203d3e20323632363232.roa
Signing time:             Mon 28 Apr 2025 17:25:16 +0000
ROA not before:           Mon 28 Apr 2025 17:20:16 +0000
ROA not after:            Mon 27 Apr 2026 17:25:16 +0000
asID:                     262622
IP address blocks:        177.86.40.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0c:0c:8c:f2:f3:a0:e2:d9:4c:44:a6:44:1d:2e:ba:53:88:2c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF0CF727D2573B3CCB71103C2E44D1F67817E6D
        Validity
            Not Before: Apr 28 17:20:16 2025 GMT
            Not After : Apr 27 17:25:16 2026 GMT
        Subject: CN=17742EAE12EAC3B689CD0262E60FC30BFF63B1A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e6:19:08:65:59:64:e3:07:07:7a:f1:65:b3:
                    0f:b0:19:7f:a1:20:52:0f:92:7c:83:15:05:2f:3e:
                    39:34:9d:dd:bc:d3:22:ea:ed:ac:56:d4:12:72:ef:
                    07:b6:12:9a:8f:6e:dc:0e:56:d8:eb:51:0a:55:f6:
                    b4:8a:08:ee:f3:0d:a3:9d:bd:24:02:e6:45:6d:40:
                    c2:b8:4d:b8:bb:cf:cc:35:87:76:6a:98:55:10:fe:
                    2f:8b:ad:cc:8c:e7:29:81:1d:52:30:c9:07:f3:1e:
                    09:5c:de:cc:7f:7a:c7:14:c7:28:f5:e1:f1:56:35:
                    6e:ad:fe:a1:33:0a:d0:3b:c8:7d:b8:9a:62:42:4d:
                    8e:c8:8e:0e:99:45:0d:3b:1e:d2:08:6a:75:f5:33:
                    09:5b:8c:05:bc:f8:21:2a:3d:b1:21:50:8d:7e:22:
                    40:e5:09:35:84:8f:93:0e:98:14:15:8c:d9:a5:1f:
                    89:73:79:01:e7:df:18:39:5e:68:44:cf:21:31:3f:
                    39:89:67:02:ba:39:3d:8c:09:aa:10:21:98:14:a4:
                    9f:cb:1f:e7:9c:25:be:5d:c8:90:f7:ca:27:09:b0:
                    23:17:6c:19:5f:1a:0d:70:5d:ef:20:49:ad:3c:01:
                    f1:12:da:36:fb:e3:1b:8b:05:d3:be:f8:37:8f:66:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:74:2E:AE:12:EA:C3:B6:89:CD:02:62:E6:0F:C3:0B:FF:63:B1:A8
            X509v3 Authority Key Identifier:
                keyid:2E:F0:CF:72:7D:25:73:B3:CC:B7:11:03:C2:E4:4D:1F:67:81:7E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/3137372e38362e34302e302f32322d3234203d3e20323632363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:b1:1f:6b:f0:3a:bc:a0:92:66:59:e0:5a:8e:87:79:69:c8:
         3f:9d:0e:f3:36:de:70:75:46:b6:2c:ac:88:4e:68:b2:0c:2c:
         a6:9c:9f:72:94:4b:8d:31:b3:c8:cd:9a:0e:1e:b5:89:87:3b:
         26:44:6a:26:c4:1d:5a:a0:db:a5:5c:65:92:af:b2:13:ec:e0:
         f5:f9:56:12:ff:78:5d:30:ff:3c:36:e9:12:46:1a:2d:a4:83:
         ce:56:11:9d:73:a6:f6:c8:bd:6a:3a:51:7c:80:f5:b5:99:bb:
         2e:8c:e0:32:57:1e:dc:41:99:53:68:39:49:4e:cb:39:a3:62:
         74:2e:6a:ef:1a:60:c7:6f:a0:79:75:7a:5b:c4:cb:4e:b8:3c:
         fc:99:d4:4f:52:e9:f6:ff:80:8f:6c:0b:2d:df:93:17:b5:42:
         d9:0d:2b:b5:5e:66:f6:f1:7f:89:da:40:5a:49:77:05:91:f5:
         08:22:04:78:86:86:d2:45:f6:27:ec:6d:59:0f:b3:ba:39:e1:
         2a:6d:4f:97:1b:fa:1c:48:e2:14:ad:23:b6:b1:99:be:5a:3f:
         47:0b:52:19:a2:7b:e8:7e:d6:a4:ad:ad:b1:6e:3a:a2:74:0b:
         d5:fd:a5:13:12:49:11:eb:e4:2a:e1:21:e3:a6:2a:27:9e:62:
         12:d2:ea:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:25:50 2025 by rpki-client