Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3230382e302f32312d3231203d3e203532363835.roa
File:                     3137372e3133362e3230382e302f32312d3231203d3e203532363835.roa (raw, json)
Hash identifier:          +erLjSg2zRJNzTMgy40SwQ+DdK8n8SeD6B9soFzpeUU=
Subject key identifier:   7F:C2:0E:97:4F:31:34:AB:63:B0:C7:1C:19:6C:48:89:AC:1C:FF:68
Certificate issuer:       /CN=74869BE33EABA28B9D63EED4592740833EA9826B
Certificate serial:       66015442C61B4B05677A36EB243B70743A1F8D95
Authority key identifier: 74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3230382e302f32312d3231203d3e203532363835.roa
Signing time:             Mon 08 Apr 2024 19:43:37 +0000
ROA not before:           Mon 08 Apr 2024 19:38:37 +0000
ROA not after:            Mon 07 Apr 2025 19:43:37 +0000
asID:                     52685
IP address blocks:        177.136.208.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:01:54:42:c6:1b:4b:05:67:7a:36:eb:24:3b:70:74:3a:1f:8d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74869BE33EABA28B9D63EED4592740833EA9826B
        Validity
            Not Before: Apr  8 19:38:37 2024 GMT
            Not After : Apr  7 19:43:37 2025 GMT
        Subject: CN=7FC20E974F3134AB63B0C71C196C4889AC1CFF68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2d:0e:00:a4:3e:c1:9e:a3:8b:29:c8:ed:53:
                    71:90:9d:b0:c4:3e:9e:bf:f1:fc:a3:27:67:83:6e:
                    0d:dd:f0:0a:73:a4:83:fb:98:c4:d8:27:af:86:47:
                    43:78:36:ac:f2:f2:c1:f5:d2:3a:5c:fc:15:26:0e:
                    d8:65:3c:65:3b:93:c1:4a:e4:e5:f2:51:c1:6e:42:
                    cb:5d:cd:56:2e:ba:87:45:81:89:82:f4:1d:1f:7f:
                    40:69:bb:a8:f7:2b:c7:0a:3a:74:6f:24:46:7d:15:
                    ba:8e:69:d7:82:a6:39:f3:10:83:19:40:6d:bc:e9:
                    34:97:8e:c0:19:10:60:8e:21:d0:73:4f:e6:c4:c8:
                    3c:b6:3c:47:cb:23:59:99:19:bc:b7:b5:ae:c3:8c:
                    77:e0:a1:8c:8a:fb:0e:39:b9:8d:d5:2f:50:db:28:
                    66:54:10:05:df:e9:65:ca:d3:4e:0d:c1:e5:8b:26:
                    33:50:a5:86:ea:23:eb:35:bf:13:98:6d:01:45:b3:
                    07:4a:5a:4c:ae:e1:db:11:a2:ab:d6:0a:e1:d7:5c:
                    3c:c1:9e:85:da:13:b2:72:b0:a3:cd:7c:59:c9:4a:
                    a9:22:8f:c2:d5:49:d1:0c:91:02:7a:4d:b7:b9:91:
                    70:ca:2d:8c:a3:15:b1:2e:e4:ae:50:39:fa:b9:49:
                    87:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C2:0E:97:4F:31:34:AB:63:B0:C7:1C:19:6C:48:89:AC:1C:FF:68
            X509v3 Authority Key Identifier:
                keyid:74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/74869BE33EABA28B9D63EED4592740833EA9826B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3230382e302f32312d3231203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:d4:74:1c:da:ae:25:4b:cd:76:3b:49:17:e2:15:26:62:30:
         23:25:98:69:a4:86:08:3e:b0:40:e9:82:23:08:a2:4e:5a:3f:
         7f:bd:b9:b9:ce:83:7c:dd:4a:cb:3c:ab:fc:01:f3:9a:26:37:
         2e:b1:9e:06:7a:c8:a7:26:f0:18:69:e1:95:b7:84:be:23:ad:
         6d:e1:c9:a3:0f:77:96:36:bd:df:0f:58:10:a7:f1:38:77:12:
         0a:2c:22:6d:63:10:ea:cc:22:68:3d:92:18:82:cf:5a:13:85:
         05:32:11:b0:e9:40:5f:c5:a7:d2:75:16:81:c4:f2:dc:9c:0f:
         d7:14:d6:8a:e8:90:0f:36:30:70:0d:22:df:47:9a:5f:dd:d3:
         e2:8f:70:f2:75:c6:55:89:e1:36:39:f0:b2:c8:db:51:8c:72:
         98:1e:e1:c2:b2:a1:c4:f7:a1:a7:85:04:1b:d9:08:25:ae:de:
         31:51:a8:a5:48:0c:f9:54:eb:4e:07:cc:28:56:ef:6e:4c:9d:
         6b:c6:ba:ab:19:7f:8f:76:9f:81:a7:71:fc:07:68:2d:a0:c4:
         20:f2:08:11:b0:c5:28:5f:fb:01:42:cf:dd:63:0c:f1:9f:29:
         3d:b6:a9:b0:e0:13:ca:c2:65:a7:c2:d4:8b:d6:40:70:e7:7e:
         b0:71:ca:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:52 2025 by rpki-client