Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38352e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38352e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          tm6wuYBuRyDuVgmp0Lpe5QMcN+AnKvP+kNrRH0fpRXk=
Subject key identifier:   6B:04:F9:9A:A8:F0:95:3F:C0:50:53:87:8B:C2:C3:85:DD:74:62:05
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       3ACB5B57E042316423E8589718E93A50C841AFCB
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38352e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:02 +0000
ROA not before:           Wed 05 Mar 2025 23:55:02 +0000
ROA not after:            Thu 05 Mar 2026 00:00:02 +0000
asID:                     52653
IP address blocks:        177.221.85.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:cb:5b:57:e0:42:31:64:23:e8:58:97:18:e9:3a:50:c8:41:af:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:02 2025 GMT
            Not After : Mar  5 00:00:02 2026 GMT
        Subject: CN=6B04F99AA8F0953FC05053878BC2C385DD746205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0a:21:a6:cd:1d:e7:4e:53:0b:84:57:05:44:
                    45:4f:a5:ff:28:c6:e3:3d:51:41:86:ba:80:30:55:
                    70:5a:7f:20:94:26:6e:80:96:30:16:d2:61:31:a5:
                    c5:61:ab:37:be:32:dd:ec:79:53:f3:00:b9:8c:2b:
                    5d:76:56:44:d6:ce:1b:0e:1e:74:47:7c:82:69:d8:
                    e7:7e:a2:ed:11:ac:30:96:5a:05:52:50:9e:a8:7d:
                    c1:02:f6:ea:3f:12:36:1c:52:5c:85:1a:3d:a7:2e:
                    e9:c0:a8:c7:0a:32:8a:03:79:71:14:e1:90:fb:ba:
                    83:14:7b:89:9a:12:0a:da:f0:dc:3a:04:57:05:16:
                    33:56:be:8a:2e:2e:de:a8:a7:d2:f5:fc:44:41:1f:
                    2e:f2:c9:80:76:fa:5c:85:19:1f:ce:9b:4a:cc:0e:
                    37:50:4a:a1:6c:3b:4f:6d:4e:e5:3d:52:a3:90:2d:
                    f1:17:69:20:e9:e4:0c:b6:c7:ca:04:34:eb:aa:8e:
                    b0:50:4d:af:ae:d6:34:98:05:f6:e4:36:a8:ac:d3:
                    9d:9e:c1:a8:4f:d8:f7:56:5c:b6:18:d7:d9:c0:7d:
                    04:0b:2f:f6:f0:fc:11:3c:d3:1e:30:5b:4f:e3:80:
                    e5:9e:d9:79:ca:d3:25:18:e1:83:05:2c:2d:8e:02:
                    7a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:04:F9:9A:A8:F0:95:3F:C0:50:53:87:8B:C2:C3:85:DD:74:62:05
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38352e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:2c:2c:72:e0:84:77:26:71:47:cb:2e:62:1b:66:be:aa:86:
         ef:0f:a6:26:21:ea:64:b1:7a:6a:92:03:dc:15:3e:67:34:1b:
         c7:88:6b:3c:2e:c3:36:d5:21:a2:37:7e:e6:15:07:99:47:74:
         bf:44:77:0d:30:3a:ae:6f:7a:39:f7:0c:b5:5b:a9:8c:e8:74:
         bc:d5:3c:53:14:32:08:b5:14:dc:05:c5:38:7e:1e:2e:1d:8d:
         8f:dc:b1:0c:bc:e9:42:b8:bc:68:ac:38:bd:a8:98:1d:19:8e:
         ad:4d:1a:27:13:ac:e0:47:2c:b3:97:ae:60:39:cd:61:06:65:
         2e:e1:72:46:5c:64:91:04:74:d3:e4:d0:cc:13:74:d3:ad:c8:
         e6:54:79:89:c3:ae:7c:3f:da:52:47:dd:bb:76:14:df:14:30:
         0e:c4:19:0b:c4:a2:de:a4:bf:dd:43:13:2f:81:3b:8f:ba:db:
         0c:44:19:c5:46:e4:a5:c4:b3:c2:ee:ca:13:91:87:ae:3a:44:
         3b:5d:e0:8b:3a:d5:b7:df:17:40:9b:71:96:ae:bb:12:af:97:
         45:73:07:32:76:a9:2d:9b:ab:50:87:8a:39:ac:a8:85:53:66:
         fc:f0:56:dd:f9:fc:65:33:3a:bc:8c:17:23:f5:77:ca:55:b7:
         e9:dd:34:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:10:28 2025 by rpki-client