Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/3137372e35322e302e302f32302d3234203d3e203532393830.roa
File:                     3137372e35322e302e302f32302d3234203d3e203532393830.roa (raw, json)
Hash identifier:          6zyhZAGJz8pPWesT/MhyqiVFxEZnipFYQqX6UPwp1ig=
Subject key identifier:   34:28:3C:8E:B6:D4:2B:B0:80:E5:F5:74:6C:36:9F:5F:02:58:BF:46
Certificate issuer:       /CN=D2D2D71D988525073935916EEBCA45B03AB78E14
Certificate serial:       75BC861409F0FEF9AD843AC80A791D3BA3C5D9DF
Authority key identifier: D2:D2:D7:1D:98:85:25:07:39:35:91:6E:EB:CA:45:B0:3A:B7:8E:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2D2D71D988525073935916EEBCA45B03AB78E14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/3137372e35322e302e302f32302d3234203d3e203532393830.roa
Signing time:             Mon 09 Jan 2023 18:00:02 +0000
ROA not before:           Mon 09 Jan 2023 17:55:02 +0000
ROA not after:            Tue 09 Jan 2024 18:00:02 +0000
asID:                     52980
IP address blocks:        177.52.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bc:86:14:09:f0:fe:f9:ad:84:3a:c8:0a:79:1d:3b:a3:c5:d9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2D2D71D988525073935916EEBCA45B03AB78E14
        Validity
            Not Before: Jan  9 17:55:02 2023 GMT
            Not After : Jan  9 18:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d5:bc:ea:2b:fd:78:d4:26:df:e7:ce:6d:90:
                    47:e5:98:71:92:41:20:7c:ee:ff:08:65:e8:c3:ec:
                    b5:37:fe:bc:0d:22:fa:f0:65:4e:c3:1d:53:4d:56:
                    ae:73:e5:b6:03:13:fe:3c:99:38:f9:e0:4e:6a:a8:
                    e4:12:d5:80:18:be:ee:bb:e3:44:b5:2f:c9:01:1c:
                    8a:38:6f:16:8d:bf:ac:08:46:78:7a:00:58:a4:0e:
                    67:f0:40:d7:24:0b:7f:32:61:8c:df:39:06:12:dd:
                    bf:d7:e0:1b:dd:c2:8b:a2:3d:db:06:e3:4d:8d:0a:
                    73:60:ab:f8:c2:2b:02:a7:5b:82:de:54:6a:30:7c:
                    a8:ec:ac:2f:98:58:cb:0c:57:c5:56:04:6b:d9:ca:
                    a9:7d:fd:87:a9:6e:e5:ac:70:dc:11:8b:32:2c:da:
                    4d:a7:aa:a2:2a:79:ef:19:b4:4b:c9:83:8b:f8:63:
                    63:59:10:85:4d:25:5e:3f:cb:b2:ef:25:22:3b:2b:
                    64:66:30:67:a4:bb:bf:df:3c:5b:1e:74:78:60:e4:
                    ef:34:40:c6:bf:af:da:1d:b8:ae:3e:9e:62:f9:47:
                    1a:ee:6b:49:50:5e:40:5d:56:1e:0f:80:74:a7:94:
                    03:33:1d:e6:f2:72:b5:ef:ae:de:3d:8e:1b:a6:42:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:28:3C:8E:B6:D4:2B:B0:80:E5:F5:74:6C:36:9F:5F:02:58:BF:46
            X509v3 Authority Key Identifier:
                keyid:D2:D2:D7:1D:98:85:25:07:39:35:91:6E:EB:CA:45:B0:3A:B7:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/D2D2D71D988525073935916EEBCA45B03AB78E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2D2D71D988525073935916EEBCA45B03AB78E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/3137372e35322e302e302f32302d3234203d3e203532393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:ec:ed:2c:69:1b:dd:f2:c1:00:3f:f0:26:7d:d2:8c:c6:a6:
         59:e7:2c:d8:b9:5a:89:6e:e8:48:2f:05:16:71:86:be:71:77:
         77:7d:f9:8e:7e:60:a5:49:36:12:25:a2:40:20:cb:36:33:9c:
         8f:5d:86:e6:cf:c6:ca:8d:e5:e1:46:6a:f6:fb:24:75:0c:f6:
         7b:df:5e:dd:b8:ab:3e:3e:95:60:09:cc:ef:85:fa:ee:5c:2b:
         65:41:c6:6c:b9:f8:34:04:60:fc:d3:f4:e0:98:7a:0a:e2:06:
         42:01:5e:c1:e5:03:b0:ee:9f:b0:ef:6d:b8:5b:6c:77:23:c1:
         24:66:a2:53:21:1f:1e:3c:52:f7:32:f0:2b:28:c8:5f:42:43:
         d5:ee:cb:54:d3:e2:be:b6:ec:b4:89:10:a4:63:ac:27:09:2a:
         86:a4:d9:fd:0a:12:9f:48:ec:24:bd:4e:bd:9c:c0:69:3b:5b:
         0f:a1:dd:f0:9e:15:94:e0:e9:6d:64:5a:82:90:e6:0b:fa:63:
         a7:cf:4b:98:2e:98:3b:6d:45:14:38:21:a9:ee:ab:fa:e3:be:
         6b:10:8f:12:11:62:71:80:b7:2b:08:b6:74:af:63:fe:7e:08:
         ac:fb:4c:cd:9e:f2:f1:84:e4:47:53:f0:9d:e1:9a:8c:c7:ac:
         ae:df:7c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:54 2025 by rpki-client