Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3137372e38362e3136382e302f32312d3234203d3e203532353733.roa
File:                     3137372e38362e3136382e302f32312d3234203d3e203532353733.roa (raw, json)
Hash identifier:          TW2/z8wOjRykDJ2aAuRBi3Q9i2x2BEpVRFucwO4UNb4=
Subject key identifier:   EC:78:CC:E4:2D:27:EE:48:BE:E8:AF:40:93:C1:F4:B9:16:94:EA:D0
Certificate issuer:       /CN=3574A58A568C8AE1ADC3EE503BF56A5366499355
Certificate serial:       42F684CDF62179642BBCDD28864BE9FD173BD9C0
Authority key identifier: 35:74:A5:8A:56:8C:8A:E1:AD:C3:EE:50:3B:F5:6A:53:66:49:93:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3137372e38362e3136382e302f32312d3234203d3e203532353733.roa
Signing time:             Mon 29 May 2023 16:14:05 +0000
ROA not before:           Mon 29 May 2023 16:09:05 +0000
ROA not after:            Mon 27 May 2024 16:14:05 +0000
asID:                     52573
IP address blocks:        177.86.168.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f6:84:cd:f6:21:79:64:2b:bc:dd:28:86:4b:e9:fd:17:3b:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3574A58A568C8AE1ADC3EE503BF56A5366499355
        Validity
            Not Before: May 29 16:09:05 2023 GMT
            Not After : May 27 16:14:05 2024 GMT
        Subject: CN=EC78CCE42D27EE48BEE8AF4093C1F4B91694EAD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5f:f5:91:3b:01:fe:ae:cf:b5:66:de:ec:92:
                    23:a4:2c:63:ce:c6:bf:65:4d:e1:5a:69:9f:c2:d8:
                    5c:36:9f:14:84:7a:fa:63:1d:60:00:8e:21:78:53:
                    40:37:c4:d7:c1:c9:1d:ea:c5:d3:9c:81:ac:b1:2a:
                    29:d9:74:49:c8:0e:ac:35:0d:46:54:da:9e:bb:5a:
                    2c:3a:9a:80:7b:67:03:f8:66:84:bf:c8:43:72:e6:
                    97:21:cb:76:7a:66:51:b4:03:69:69:86:14:5a:2f:
                    65:9b:0c:d9:ba:53:67:4c:3d:ea:9a:f4:84:a0:5b:
                    4f:60:25:03:e2:b1:1e:5e:e8:34:af:cf:01:f4:f9:
                    3c:0e:a1:5a:3e:70:91:f0:d4:43:62:88:e8:c3:4e:
                    98:be:55:b7:61:26:b3:cd:e4:18:a7:c3:45:51:7a:
                    46:71:30:c7:5c:3e:69:46:39:fc:40:f1:e3:86:be:
                    3d:91:66:c4:5a:57:5d:73:d5:59:dc:f6:d2:cd:87:
                    00:67:63:28:d5:5c:5d:1d:9d:27:3e:9a:45:8f:21:
                    14:1b:eb:86:11:23:29:fb:2a:5a:9f:5a:fd:96:63:
                    c7:cf:dc:7c:85:aa:93:5a:46:8c:ab:87:78:f8:eb:
                    9c:94:27:c1:b0:b0:ca:7b:39:b6:c3:98:72:37:80:
                    ae:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:78:CC:E4:2D:27:EE:48:BE:E8:AF:40:93:C1:F4:B9:16:94:EA:D0
            X509v3 Authority Key Identifier:
                keyid:35:74:A5:8A:56:8C:8A:E1:AD:C3:EE:50:3B:F5:6A:53:66:49:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3137372e38362e3136382e302f32312d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:11:99:b2:7d:38:70:0b:9e:2d:55:64:4b:f0:81:b8:9d:cd:
         ca:9d:f0:5f:a0:6b:e4:92:5a:b5:d1:2d:d9:aa:8b:12:b7:ab:
         a0:b6:94:b8:f7:14:27:bb:3b:65:32:70:b4:c1:e6:ea:28:c1:
         60:f3:e1:2b:db:37:60:ee:7d:a5:83:5a:a6:96:d3:ce:e3:46:
         17:88:10:0c:22:0c:d9:5c:15:9f:55:58:27:50:e3:8c:ca:50:
         3a:7c:6f:3b:69:4a:ed:77:3d:3a:59:53:3f:52:59:ef:4c:95:
         d3:e3:1c:cb:21:44:2b:16:07:8a:f9:10:85:32:f5:75:01:60:
         04:5c:5c:fe:85:c5:6a:37:90:fc:f1:32:2b:34:e9:8f:ed:23:
         65:c3:33:9b:ac:0a:ff:25:2c:69:41:8e:80:19:21:5e:42:59:
         bf:3c:d2:2d:f7:ee:75:e5:a5:8a:b8:78:8e:aa:10:f9:b0:d1:
         49:ae:6c:df:5f:eb:ae:75:43:dc:4d:69:22:e7:e4:0f:25:fc:
         da:c4:6b:90:37:92:ef:80:69:1e:4f:ef:7c:c8:76:7a:48:04:
         bb:2c:f8:a4:bb:c6:a9:73:23:b0:fc:f9:8b:0f:a5:db:7f:8d:
         fc:f1:8d:cd:47:93:b6:43:2f:5d:7e:c3:a1:bb:25:65:23:c3:
         be:ec:47:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:42 2025 by rpki-client