Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/3137372e39312e33322e302f32322d3332203d3e20323633343234.roa
File:                     3137372e39312e33322e302f32322d3332203d3e20323633343234.roa (raw, json)
Hash identifier:          oSCvDBojHPFpX7dpP5jjddNrdDYL3aa+5Fspww/xs/g=
Subject key identifier:   8B:13:89:0C:8E:C7:D6:E7:E6:94:D0:1D:09:29:31:17:C9:13:36:1C
Certificate issuer:       /CN=7CA1E2D818532F6321B3C9E6EE790B2AFE560E21
Certificate serial:       58EDD3271C33F67E9EAE14C579F809E1D2AFE2A6
Authority key identifier: 7C:A1:E2:D8:18:53:2F:63:21:B3:C9:E6:EE:79:0B:2A:FE:56:0E:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/3137372e39312e33322e302f32322d3332203d3e20323633343234.roa
Signing time:             Sat 15 Feb 2025 22:36:45 +0000
ROA not before:           Sat 15 Feb 2025 22:31:45 +0000
ROA not after:            Sat 14 Feb 2026 22:36:45 +0000
asID:                     263424
IP address blocks:        177.91.32.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ed:d3:27:1c:33:f6:7e:9e:ae:14:c5:79:f8:09:e1:d2:af:e2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA1E2D818532F6321B3C9E6EE790B2AFE560E21
        Validity
            Not Before: Feb 15 22:31:45 2025 GMT
            Not After : Feb 14 22:36:45 2026 GMT
        Subject: CN=8B13890C8EC7D6E7E694D01D09293117C913361C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:46:b8:b9:fa:2c:ce:95:0f:6b:d2:46:08:97:
                    d4:c4:be:70:eb:3e:68:20:6f:cf:e5:c8:37:40:dd:
                    56:36:f4:d5:44:b8:88:da:af:e0:95:f1:39:bf:23:
                    2a:a4:9a:7c:fc:a8:1a:a6:15:50:08:af:af:7b:a8:
                    6e:87:9f:45:f7:5a:43:7d:0f:da:dc:3a:20:d4:74:
                    96:28:47:e1:c6:e4:8e:78:3b:82:17:24:7a:af:24:
                    d8:9e:88:44:7e:d0:4f:ba:d3:20:2b:3e:39:0c:23:
                    03:07:fe:a0:1d:dc:57:9d:b7:05:df:17:30:29:62:
                    48:46:6e:d9:fc:62:12:1c:29:63:a2:08:45:02:2d:
                    9c:0c:85:e0:ba:02:8c:58:d3:14:49:b3:1d:a4:68:
                    cd:b1:a8:49:21:c3:4a:cc:b6:86:9e:55:f1:d1:c3:
                    64:14:29:6d:96:a2:41:dd:dc:e0:f1:96:42:70:05:
                    cc:eb:27:9b:72:f2:7c:73:38:6b:d9:38:98:61:f1:
                    3b:37:0a:45:22:92:6e:ab:5c:2b:e0:a5:83:b8:27:
                    dd:68:c1:04:ac:27:88:8a:16:35:9d:c8:55:5d:93:
                    70:a5:00:41:73:94:bb:4c:57:4c:ca:25:37:09:fa:
                    6d:74:d8:7e:a5:36:cc:16:5f:0d:ab:96:71:62:32:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:13:89:0C:8E:C7:D6:E7:E6:94:D0:1D:09:29:31:17:C9:13:36:1C
            X509v3 Authority Key Identifier:
                keyid:7C:A1:E2:D8:18:53:2F:63:21:B3:C9:E6:EE:79:0B:2A:FE:56:0E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/3137372e39312e33322e302f32322d3332203d3e20323633343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:24:29:01:18:ca:15:85:0b:55:09:14:a7:d4:cc:b9:68:31:
         cb:98:aa:7d:e7:f9:6a:76:ac:78:b0:12:7a:74:a4:da:8b:f2:
         29:c1:7d:af:7b:a9:c3:9d:ba:96:04:02:39:49:68:2b:cf:b4:
         5c:04:45:5b:31:74:39:fc:31:cd:a9:3d:0a:2f:f9:c7:c7:89:
         c2:53:96:c2:80:bb:56:40:91:7c:b3:5e:ce:59:cd:4e:2a:0d:
         f5:7c:e6:2c:8a:79:c8:e6:3a:1d:e2:0e:3d:cf:16:89:52:f7:
         35:34:43:3c:83:e9:89:77:58:b5:9b:f8:41:af:ba:1c:ff:12:
         ae:65:e2:0e:f4:60:a1:ee:a0:0e:72:64:33:67:ec:6c:ea:e3:
         59:23:af:7a:64:b6:8b:67:b2:c6:a4:dc:04:68:16:ef:2e:f4:
         22:10:35:fc:de:60:c1:c0:39:eb:ab:75:63:be:04:9f:95:68:
         4d:99:44:98:b1:12:49:c0:71:93:b8:e2:8b:01:01:50:08:42:
         ee:5c:6f:4e:76:77:40:47:95:02:11:c8:c1:98:b6:7f:9e:34:
         49:8d:39:fe:10:b3:25:45:15:c0:77:43:9c:f2:1c:a5:ba:d5:
         38:53:f9:b7:5d:27:ac:8d:57:1d:9f:d8:72:ff:d3:f9:c0:13:
         80:36:5f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:35 2025 by rpki-client