Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230382e302f32322d3232203d3e203532363835.roa
File:                     3137372e3133362e3230382e302f32322d3232203d3e203532363835.roa (raw, json)
Hash identifier:          aUfvIhRfSf2PL6DngZqjTkzJyNi3dScRpAuQ41ewAZU=
Subject key identifier:   7E:E0:C9:46:BE:24:10:D1:68:CF:3E:97:30:CF:44:91:99:92:03:8F
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       2D7F3E9B3E4E7E7A925B71666415D99896D9FE5B
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230382e302f32322d3232203d3e203532363835.roa
Signing time:             Wed 05 Mar 2025 20:59:39 +0000
ROA not before:           Wed 05 Mar 2025 20:54:39 +0000
ROA not after:            Wed 04 Mar 2026 20:59:39 +0000
asID:                     52685
IP address blocks:        177.136.208.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7f:3e:9b:3e:4e:7e:7a:92:5b:71:66:64:15:d9:98:96:d9:fe:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Mar  5 20:54:39 2025 GMT
            Not After : Mar  4 20:59:39 2026 GMT
        Subject: CN=7EE0C946BE2410D168CF3E9730CF44919992038F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:fe:95:40:cf:f8:b8:d4:fc:bd:bf:43:3e:fd:
                    8b:9e:3a:c6:8d:15:f5:7d:a1:73:e0:9b:7b:81:1c:
                    19:90:7c:4a:0f:f9:09:6e:75:1a:ba:3d:43:30:33:
                    99:cf:3d:3c:58:fa:9c:34:91:92:cf:45:9b:97:28:
                    3f:ed:f9:f4:75:bc:b1:6c:12:4c:43:a5:2f:1d:e7:
                    9f:2b:e1:e5:ed:f0:e1:47:19:ac:9f:1a:48:cd:cb:
                    a8:b9:66:76:f9:7d:3b:8e:f7:75:be:6c:48:41:70:
                    f7:89:e3:60:15:a5:24:78:81:63:19:55:cb:69:56:
                    c3:e0:05:b6:f5:a6:a9:36:85:e2:5a:11:02:ef:f8:
                    7a:1f:a8:cb:dd:25:78:dd:ef:99:b5:80:bf:25:c2:
                    2d:1f:52:32:23:eb:2c:06:4f:ef:80:85:98:43:75:
                    16:59:4f:ff:c0:05:2c:b2:97:b9:8c:e7:d9:11:53:
                    03:5b:de:aa:cb:10:28:bb:60:9a:fd:10:51:85:8c:
                    09:fc:02:9f:b8:1e:15:e8:9b:a2:c3:33:fc:d5:3c:
                    3d:a2:0e:14:0f:da:f1:a2:b4:d7:e3:9b:e5:9b:9f:
                    63:f1:de:1e:c9:98:7c:e0:ca:32:3f:74:14:f5:05:
                    17:3a:78:e5:9c:26:44:df:23:26:c6:af:21:a0:f1:
                    99:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E0:C9:46:BE:24:10:D1:68:CF:3E:97:30:CF:44:91:99:92:03:8F
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230382e302f32322d3232203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:b3:dc:52:dd:21:50:20:ea:27:bc:35:29:52:51:90:fa:77:
         12:ab:83:a3:43:fc:c2:a6:55:63:a1:f8:4b:91:ed:ea:c0:00:
         b3:38:e3:3d:72:3a:68:a8:0b:0c:7f:56:dd:39:01:ad:fa:32:
         28:1b:68:15:70:00:66:31:7f:40:34:3a:0f:16:f1:9e:23:f8:
         e1:fc:27:a2:75:9c:c0:db:6a:9d:0c:32:31:cd:ef:12:3b:1d:
         e9:15:87:62:2c:0d:6c:58:8a:4a:6d:19:5e:88:4b:f4:e0:55:
         ee:41:f8:6b:6f:e4:0d:85:45:67:3f:e4:e9:95:e6:bc:31:ce:
         37:0c:f0:34:72:4d:f0:5b:2f:03:bf:32:51:b1:a0:4e:f2:4f:
         9c:b8:81:02:43:6f:c9:6c:70:9d:23:78:b7:3c:44:be:93:3d:
         9d:3a:bc:0e:6c:a1:b4:e7:ab:ac:c0:7f:b4:64:ed:c2:9c:ee:
         11:55:f3:c7:c1:62:fa:6d:86:fb:96:23:65:fc:ed:5e:b3:e1:
         1f:72:76:50:db:20:06:77:cd:f9:fe:1e:38:19:db:b8:ba:67:
         9b:16:e3:30:9f:7c:d2:8a:48:db:95:3f:41:5e:a2:75:91:18:
         54:eb:42:8f:31:b1:99:e6:cd:4d:2c:10:5f:4f:92:3f:37:07:
         f8:63:1d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:59 2025 by rpki-client