Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3231312e302f32342d3234203d3e203532363835.roa
File:                     3137372e3133362e3231312e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          /OyNWwkzahmyVs4kVALkruzfN19DZ9eH9dOEGgnSQN4=
Subject key identifier:   34:5C:7B:44:3D:F8:57:82:BA:66:9D:83:27:BE:51:66:FB:7B:41:50
Certificate issuer:       /CN=74869BE33EABA28B9D63EED4592740833EA9826B
Certificate serial:       5D3894ADF1243949AB0709E5407B793301D20199
Authority key identifier: 74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3231312e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 17 May 2023 16:45:42 +0000
ROA not before:           Wed 17 May 2023 16:40:42 +0000
ROA not after:            Wed 15 May 2024 16:45:42 +0000
asID:                     52685
IP address blocks:        177.136.211.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:38:94:ad:f1:24:39:49:ab:07:09:e5:40:7b:79:33:01:d2:01:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74869BE33EABA28B9D63EED4592740833EA9826B
        Validity
            Not Before: May 17 16:40:42 2023 GMT
            Not After : May 15 16:45:42 2024 GMT
        Subject: CN=345C7B443DF85782BA669D8327BE5166FB7B4150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:56:e0:01:d5:54:37:64:b8:66:b3:8f:9e:
                    80:32:b0:0f:0f:96:7b:95:cb:2d:f8:7a:8b:cb:f0:
                    9d:63:9c:14:41:bc:32:45:07:79:8e:5e:b2:eb:6b:
                    3f:6b:26:17:de:e1:d6:90:b4:b9:47:54:12:d4:57:
                    f7:92:13:e5:1d:54:30:1d:58:ed:b8:eb:49:cb:14:
                    b4:36:bb:33:e3:0a:5f:ba:63:35:a1:cc:42:70:c8:
                    b8:ba:02:b1:61:5b:46:ba:6c:db:08:8a:4c:a2:c0:
                    10:81:5b:37:35:1a:58:75:4c:5e:e4:0a:ba:7b:e1:
                    b9:5d:a2:65:9e:8c:a6:1c:f2:22:c5:c9:55:be:a2:
                    d4:10:93:49:e7:e0:f0:2d:be:68:f4:40:97:55:6e:
                    05:82:cf:3e:ce:36:1d:62:03:49:d2:5f:52:51:51:
                    7b:48:c7:0c:ed:ec:f9:b5:bb:81:2c:79:70:c1:57:
                    3e:ec:e7:c0:f4:b0:bb:dd:b7:0e:90:d5:8c:3b:27:
                    e6:d4:6c:73:17:71:b9:ab:06:eb:46:0f:43:a9:69:
                    a0:11:82:60:a2:ec:52:aa:2d:96:24:a5:3b:21:97:
                    f1:73:0e:38:b0:09:62:f5:2d:95:bf:75:e4:5e:d0:
                    c2:4e:3e:5a:01:bc:ef:5f:8e:59:05:49:02:d3:10:
                    38:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5C:7B:44:3D:F8:57:82:BA:66:9D:83:27:BE:51:66:FB:7B:41:50
            X509v3 Authority Key Identifier:
                keyid:74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/74869BE33EABA28B9D63EED4592740833EA9826B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/3137372e3133362e3231312e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:e1:44:90:76:55:ad:34:f0:1c:d3:1c:f9:16:92:30:42:23:
         6d:4f:ee:e9:cc:79:b5:1b:e3:bd:f4:0e:90:00:b5:39:3f:b9:
         45:4c:e6:da:8e:4e:db:93:7d:8e:39:19:92:cb:01:1f:f2:e0:
         93:db:9f:d3:6f:4e:8d:a2:df:40:17:7a:4e:89:d2:b8:94:14:
         11:50:d0:d0:4b:91:70:b9:68:4b:6f:ff:9d:42:44:9c:67:3d:
         3e:c4:b0:d2:6f:c5:81:7f:3f:3b:7b:fb:79:69:8f:cf:3b:d8:
         7d:b4:e7:a2:4b:c8:01:df:b3:b7:fc:58:9c:03:3f:26:6b:49:
         34:5b:17:52:87:8f:e5:2f:b3:35:00:7f:bb:d0:04:db:20:41:
         69:01:4b:04:48:74:6d:86:f7:d3:51:16:76:70:35:0a:5b:25:
         ef:b6:13:19:b1:6e:0a:46:b5:72:ae:6b:af:c1:b2:d0:72:15:
         09:b1:12:b8:1c:bf:dc:62:c8:89:ae:66:02:f4:bd:f8:a2:33:
         d9:05:07:e2:cc:ec:f0:3e:35:20:9c:4e:03:52:48:83:a4:3b:
         1c:6e:52:da:18:b6:d9:36:1d:5f:fc:05:f0:cd:8e:04:56:61:
         0b:fb:db:09:45:52:e3:2a:39:61:ca:91:ac:dc:a8:51:ca:7a:
         64:8e:2c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:04 2025 by rpki-client