Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136302e302f32312d3231203d3e20323632333034.roa
File:                     3137372e38372e3136302e302f32312d3231203d3e20323632333034.roa (raw, json)
Hash identifier:          LBxbWsHZ0PfN7iGj0JV0bCAJhpAo4vT4tMh00V+CYE8=
Subject key identifier:   39:10:5B:0C:7D:35:AF:8F:AD:FB:50:64:BC:9D:47:94:97:CC:0B:94
Certificate issuer:       /CN=3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA
Certificate serial:       1ED38542BCD413A7E4D6E7AE7F1DBFF8673D54FE
Authority key identifier: 3C:11:4E:1D:6E:6D:B8:2E:AD:5D:41:F4:2D:C6:7A:14:53:A4:EF:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136302e302f32312d3231203d3e20323632333034.roa
Signing time:             Wed 14 Jun 2023 20:53:59 +0000
ROA not before:           Wed 14 Jun 2023 20:48:59 +0000
ROA not after:            Wed 12 Jun 2024 20:53:59 +0000
asID:                     262304
IP address blocks:        177.87.160.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d3:85:42:bc:d4:13:a7:e4:d6:e7:ae:7f:1d:bf:f8:67:3d:54:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA
        Validity
            Not Before: Jun 14 20:48:59 2023 GMT
            Not After : Jun 12 20:53:59 2024 GMT
        Subject: CN=39105B0C7D35AF8FADFB5064BC9D479497CC0B94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:34:27:ee:70:b8:6d:40:fc:dd:ea:92:52:
                    01:71:e3:34:96:2d:b6:16:53:8b:eb:11:98:c1:75:
                    26:4b:c9:73:c0:55:e2:4f:69:df:54:40:3b:f4:2d:
                    ed:92:81:f7:00:ad:15:3c:56:50:d2:8c:2f:f2:ae:
                    39:90:7a:ae:21:50:29:c3:57:1c:08:48:ca:9c:82:
                    a0:8a:94:3c:d9:07:b6:e5:21:b3:fb:5b:9e:ce:71:
                    fe:9f:58:3c:4e:1a:52:df:c2:1e:a3:d7:a7:ec:0b:
                    c8:59:dd:08:d7:1b:f2:c8:31:52:cd:64:01:76:67:
                    20:14:a5:75:5e:62:7b:cb:c6:e6:80:1a:4d:bc:06:
                    91:ca:8e:8a:18:65:f1:7f:9d:0e:ca:23:5a:3b:c8:
                    21:f3:60:60:69:09:fa:b9:e0:9b:73:ad:cc:31:84:
                    7f:ec:91:a5:4d:9f:d9:98:af:67:79:7b:4f:c6:e4:
                    48:7a:ed:4e:ed:d1:08:44:43:14:86:68:cd:d5:64:
                    75:4d:55:70:69:8f:42:d1:6f:4b:44:3d:a8:11:9f:
                    db:32:86:58:1f:98:e7:e1:6f:34:94:c0:52:59:a4:
                    cd:0d:4b:f8:53:d0:52:45:44:95:67:a1:b9:01:46:
                    a7:b1:55:86:63:cd:f5:44:cb:25:54:38:c5:81:07:
                    5a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:10:5B:0C:7D:35:AF:8F:AD:FB:50:64:BC:9D:47:94:97:CC:0B:94
            X509v3 Authority Key Identifier:
                keyid:3C:11:4E:1D:6E:6D:B8:2E:AD:5D:41:F4:2D:C6:7A:14:53:A4:EF:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3137372e38372e3136302e302f32312d3231203d3e20323632333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bc:a0:04:70:67:0c:b0:3f:b2:0b:e1:8f:82:a0:1d:e4:0b:a3:
         90:28:a5:2d:40:60:0d:2f:25:4d:70:75:57:e7:f4:48:4d:fb:
         27:98:97:72:2a:56:04:58:99:e8:6d:1e:2f:fc:6a:36:fc:46:
         f2:33:74:b2:e8:d2:c7:5d:ee:bc:d0:18:dd:09:27:9e:2e:25:
         01:c0:39:bd:7b:e6:69:77:e8:aa:31:0e:a4:6e:8b:22:1a:f9:
         cb:12:c7:f5:54:4d:c1:ad:40:9e:fb:5f:28:46:43:74:b3:4b:
         1b:e4:84:1b:6b:6f:50:51:d2:f8:1e:6d:ee:b5:07:41:6a:e1:
         0f:41:16:fb:1b:77:f5:b0:c3:ad:41:48:a1:d4:7c:03:47:d7:
         48:37:b1:e4:a9:ab:1c:b2:c8:81:4a:aa:22:57:6e:8e:7c:3e:
         04:c0:90:0a:3e:34:16:7d:a5:c0:42:4d:6c:80:e4:26:6a:4b:
         36:f3:39:8a:0c:ae:f0:10:dd:51:35:89:17:71:02:a6:b1:ea:
         22:8b:1c:cb:1a:5b:ca:7d:c7:61:b5:68:44:01:e1:ce:2f:9f:
         11:46:f2:40:d1:1c:f7:d4:7f:58:7b:00:03:6e:0a:01:19:cf:
         a5:31:4d:1f:dd:54:89:d5:d3:9c:89:ef:5a:e2:73:37:7c:9c:
         68:84:33:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:58 2025 by rpki-client