Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137372e39312e33322e302f32322d3332203d3e20323633343234.roa
File:                     3137372e39312e33322e302f32322d3332203d3e20323633343234.roa (raw, json)
Hash identifier:          05bv3rwHFKdXP0ka5nwmC7aUxyM/kFqlL8VfT5VE/hg=
Subject key identifier:   5E:A4:6F:8C:B9:EC:EF:B6:54:B9:CF:DA:48:89:05:50:EC:6B:18:3C
Certificate issuer:       /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Certificate serial:       7325C923653C4002697A00AD27FDA29863584477
Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137372e39312e33322e302f32322d3332203d3e20323633343234.roa
Signing time:             Wed 26 Mar 2025 11:43:40 +0000
ROA not before:           Wed 26 Mar 2025 11:38:40 +0000
ROA not after:            Wed 25 Mar 2026 11:43:40 +0000
asID:                     263424
IP address blocks:        177.91.32.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:25:c9:23:65:3c:40:02:69:7a:00:ad:27:fd:a2:98:63:58:44:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
        Validity
            Not Before: Mar 26 11:38:40 2025 GMT
            Not After : Mar 25 11:43:40 2026 GMT
        Subject: CN=5EA46F8CB9ECEFB654B9CFDA48890550EC6B183C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:22:db:99:68:f4:df:2c:7d:c4:58:dd:bb:
                    8e:70:10:d3:90:fd:b0:cd:51:8e:f4:d8:42:5f:f1:
                    63:81:ad:0d:fc:5c:4e:92:49:e9:bc:10:a1:70:e1:
                    3f:10:3c:44:74:76:2b:30:77:6d:a0:d0:a7:2c:8a:
                    c3:54:00:67:d6:4f:98:8a:cb:04:7a:17:44:9b:0f:
                    bb:4d:77:11:f1:7e:98:d9:f8:1b:24:bd:1f:20:84:
                    e7:03:58:c6:63:21:2d:41:10:2a:b9:b1:41:c2:9f:
                    f7:24:f8:20:c5:ba:16:27:d5:23:70:b5:85:67:de:
                    18:a9:84:37:41:f1:7f:43:87:4b:ff:87:3f:70:7e:
                    40:33:cd:23:b8:0d:90:ab:1d:47:4b:83:c2:33:16:
                    f0:69:ba:cc:b9:5e:8d:91:93:d1:fa:24:cd:e0:d9:
                    fe:1c:8d:85:db:51:09:4f:a7:13:39:38:8c:4b:92:
                    fe:1b:06:62:81:34:d6:ab:24:54:02:5e:4f:c2:c2:
                    a8:47:09:b0:c5:cb:1f:66:04:72:95:c4:8d:2f:85:
                    d4:fc:3a:b1:d8:7e:59:07:a1:c9:8e:e9:89:29:7a:
                    2d:82:a3:c1:15:a5:c3:53:7b:e3:fb:cd:37:2a:1c:
                    a1:69:e7:4e:57:48:3a:d6:81:5d:3f:bb:78:ec:ac:
                    2e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A4:6F:8C:B9:EC:EF:B6:54:B9:CF:DA:48:89:05:50:EC:6B:18:3C
            X509v3 Authority Key Identifier:
                keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137372e39312e33322e302f32322d3332203d3e20323633343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:61:df:76:ed:7e:06:a2:4e:d9:55:4f:85:e2:72:8f:52:16:
         d3:f6:bf:f8:36:a0:4c:ce:ab:18:e5:b3:97:77:cd:91:ec:f6:
         d8:23:08:6d:7a:d9:f1:90:16:6c:c5:31:71:5b:f1:8d:ed:8e:
         e7:4a:e3:7d:31:9c:1c:b4:e9:d9:d7:97:af:26:44:ee:1d:ce:
         37:65:af:f0:70:01:b4:b3:f0:4f:6f:7d:6f:c4:4c:4c:d2:c8:
         59:8c:53:a9:03:03:a5:9a:a7:ba:1d:9e:e6:a7:99:41:c5:4d:
         17:4d:f8:eb:f3:d2:98:75:49:ed:0a:56:46:54:ee:a9:74:5d:
         98:56:18:90:6b:0d:2b:6b:47:a1:05:71:af:ed:50:78:80:01:
         c4:e8:da:67:6d:aa:de:5d:5c:65:87:9c:c5:55:03:0f:cb:8e:
         4d:6c:30:6c:d1:de:3a:01:74:d0:f5:fd:63:1a:b5:c4:72:d0:
         89:33:f1:ed:52:1d:73:8f:44:53:cc:5f:c0:55:8f:e8:00:47:
         08:70:64:13:87:72:b9:e3:4f:a9:2f:38:f9:af:0f:74:2b:ca:
         41:51:0d:06:7f:f5:53:c8:bc:81:4c:9f:16:2b:35:79:e7:47:
         40:ba:d9:60:38:96:fc:34:25:cf:a2:67:6c:b6:c4:46:ee:8e:
         69:cd:68:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:19:47 2025 by rpki-client