Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/3137372e31312e3235322e302f32342d3234203d3e203532373536.roa
File:                     3137372e31312e3235322e302f32342d3234203d3e203532373536.roa (raw, json)
Hash identifier:          gkXquS9EJ/tuPfl1ohYVujNl+x8KUnd8Wida4cM1tBo=
Subject key identifier:   9C:F8:D6:2E:93:07:E1:A3:53:60:D9:23:6F:C7:A0:73:77:23:56:6E
Certificate issuer:       /CN=B9CD500DA2BC8C2710486802D7F1C006136FD6B4
Certificate serial:       0177C92D9C836789CF04C1A15BCAC7D9B3423AEA
Authority key identifier: B9:CD:50:0D:A2:BC:8C:27:10:48:68:02:D7:F1:C0:06:13:6F:D6:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/3137372e31312e3235322e302f32342d3234203d3e203532373536.roa
Signing time:             Tue 03 Oct 2023 20:11:42 +0000
ROA not before:           Tue 03 Oct 2023 20:06:42 +0000
ROA not after:            Tue 01 Oct 2024 20:11:42 +0000
asID:                     52756
IP address blocks:        177.11.252.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:77:c9:2d:9c:83:67:89:cf:04:c1:a1:5b:ca:c7:d9:b3:42:3a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9CD500DA2BC8C2710486802D7F1C006136FD6B4
        Validity
            Not Before: Oct  3 20:06:42 2023 GMT
            Not After : Oct  1 20:11:42 2024 GMT
        Subject: CN=9CF8D62E9307E1A35360D9236FC7A0737723566E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:56:56:05:03:78:dd:44:ab:5d:a4:ba:c9:79:
                    70:db:19:15:22:10:4e:4b:13:dc:7a:0f:48:8f:c6:
                    84:e1:29:1c:90:24:98:46:8b:d8:d1:d5:8a:96:c2:
                    cb:ca:53:fe:86:38:ff:d5:25:48:82:00:fb:b5:6e:
                    c3:22:ef:21:6b:a8:b6:cc:97:c9:e4:69:6d:41:81:
                    4d:0a:c5:d2:7a:35:f2:ed:00:a3:ed:43:8f:ec:7f:
                    14:23:3b:e7:1f:ae:a7:ba:de:45:c4:03:58:41:07:
                    5a:a6:63:84:b9:2a:99:fb:d9:6f:c5:a2:5d:f7:13:
                    19:57:71:0b:6e:30:f7:a1:93:e4:8b:fb:65:a5:5e:
                    95:51:d0:21:08:ce:63:0b:21:e7:89:12:dd:da:b0:
                    0b:84:45:22:d5:8a:15:74:0a:e1:55:65:54:d8:52:
                    8f:5b:97:c7:e5:43:3f:f6:6c:96:3e:d4:6f:67:17:
                    6c:91:ae:8a:07:f7:9f:97:1f:c8:ae:a8:de:02:16:
                    cc:59:1d:00:e2:70:8f:29:9b:69:7b:fe:16:f7:ef:
                    c2:15:b4:27:0e:30:5d:8f:b2:85:58:36:48:02:70:
                    c8:73:c0:bb:ec:48:38:c1:d7:df:a1:14:6f:b6:f3:
                    c9:91:94:87:b7:ba:fd:d9:03:f0:86:5f:8c:20:be:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F8:D6:2E:93:07:E1:A3:53:60:D9:23:6F:C7:A0:73:77:23:56:6E
            X509v3 Authority Key Identifier:
                keyid:B9:CD:50:0D:A2:BC:8C:27:10:48:68:02:D7:F1:C0:06:13:6F:D6:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9CD500DA2BC8C2710486802D7F1C006136FD6B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/0/3137372e31312e3235322e302f32342d3234203d3e203532373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:bc:f6:02:05:f6:b1:da:28:c5:4b:a7:06:8a:4f:b3:40:b6:
         77:27:2d:77:ea:8b:86:66:3d:17:e6:44:26:88:65:4c:d8:64:
         b0:e1:4c:0f:9a:66:41:96:fd:1f:22:30:1b:e4:a7:26:7d:b3:
         d1:37:e3:9a:de:02:d7:49:f7:6d:2e:bd:6a:b7:bc:34:34:79:
         03:31:08:d3:3c:5e:45:aa:0d:23:de:1c:1b:33:e5:80:fe:e0:
         2e:3d:83:a1:15:65:a2:7e:52:f3:ba:56:61:03:3a:e9:12:d9:
         e2:6c:f1:25:63:9f:bb:f4:ca:e4:46:21:2d:63:0c:85:16:99:
         11:1b:bf:f4:d2:dd:dd:20:65:10:58:11:4b:98:d5:76:ec:75:
         07:5c:01:d7:a0:6c:37:0c:8f:d8:31:75:cb:74:79:24:64:44:
         8b:a5:f6:63:25:fb:e7:e3:86:12:11:ad:c4:da:59:58:6a:89:
         84:59:6a:8c:a4:91:d0:94:0e:5e:ef:f6:d0:4b:2c:29:53:67:
         f1:1b:12:84:da:09:9b:fa:1c:3f:16:70:92:5f:ff:fb:d5:43:
         f2:72:c1:f2:a0:47:d9:cf:38:12:9f:7d:64:92:be:96:cd:25:
         f6:01:0c:aa:16:e5:ce:6e:73:3c:cc:93:b0:2c:d3:fb:dc:7b:
         c8:e7:48:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:20 2025 by rpki-client