Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32372e302f32342d3234203d3e203532363835.roa
File:                     3137372e37332e32372e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          tfPz19BLbC2mu/B6Vzxzgna2S4SjeLstt0j4hZhBuqs=
Subject key identifier:   89:10:8A:9A:F7:B1:02:D7:E1:34:20:30:D3:D3:84:83:E1:A6:1D:19
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       6D681836CB9711C3D7A286A6EEDA8DDF67F59F9E
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32372e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 05 Mar 2025 20:59:43 +0000
ROA not before:           Wed 05 Mar 2025 20:54:43 +0000
ROA not after:            Wed 04 Mar 2026 20:59:43 +0000
asID:                     52685
IP address blocks:        177.73.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:68:18:36:cb:97:11:c3:d7:a2:86:a6:ee:da:8d:df:67:f5:9f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Mar  5 20:54:43 2025 GMT
            Not After : Mar  4 20:59:43 2026 GMT
        Subject: CN=89108A9AF7B102D7E1342030D3D38483E1A61D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:00:3c:c6:e6:2c:53:3e:a5:66:63:21:f3:
                    d1:a3:87:8d:d3:b2:d6:4d:10:f2:77:01:86:93:79:
                    d1:43:20:d3:88:3c:60:ca:1d:0e:18:06:f4:fe:e5:
                    a3:bc:96:95:8f:53:af:44:81:7b:b9:27:0a:9c:2d:
                    ee:6e:81:47:fc:eb:f2:ab:c4:ea:f0:f9:99:a3:1e:
                    5f:1a:db:7c:5f:59:b8:d4:1e:e3:8b:47:13:ad:7b:
                    72:d7:b6:da:e3:56:12:b6:08:38:d8:18:ca:89:d1:
                    ba:3d:50:7d:f9:fa:63:42:ed:ba:9c:fe:17:13:aa:
                    2c:e3:12:e9:f2:5d:9e:83:10:00:46:65:65:61:dc:
                    dc:43:8c:9a:de:9d:1c:99:ae:35:11:71:90:67:b8:
                    88:1e:e9:1b:46:14:e5:d4:ce:96:cf:ce:1a:f8:cc:
                    12:d1:be:5b:95:c1:7e:d5:ea:54:f2:35:47:87:0f:
                    f6:71:30:8a:ff:00:a8:46:ac:7f:ff:f4:30:a4:0e:
                    1e:3b:2f:ff:6a:7c:40:21:33:14:dd:16:10:90:48:
                    d5:2f:f6:bd:60:25:05:4f:c1:36:0b:9e:fd:6c:d8:
                    cb:47:1f:cc:e5:70:82:5a:e2:6e:48:fd:1a:b0:19:
                    fc:84:ab:f9:df:8c:b3:e6:fe:7e:53:c7:4a:00:1e:
                    c2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:10:8A:9A:F7:B1:02:D7:E1:34:20:30:D3:D3:84:83:E1:A6:1D:19
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32372e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:4e:3c:a9:e4:6c:31:f7:2f:ef:37:4f:91:cb:70:9f:f6:43:
         ae:5d:7a:16:6d:4e:d5:13:48:80:01:c3:ce:9d:36:83:ef:18:
         b7:b8:f5:c2:51:58:0f:c5:0f:ed:4f:c2:9a:80:c0:de:75:81:
         49:5f:35:b2:06:61:d6:c4:91:58:24:44:21:15:4e:36:57:af:
         01:71:25:5b:b1:a1:91:db:96:35:16:36:1d:07:bc:f2:80:a7:
         30:fb:13:87:0d:ba:48:20:6d:68:3a:c3:f0:d2:cd:f1:aa:c9:
         4b:33:2a:24:e3:b7:54:cb:0f:ac:5f:31:5b:5f:08:dc:f4:9a:
         fa:06:3a:40:c4:29:1c:b4:c1:ae:10:e7:74:7c:8e:a9:45:c2:
         25:4e:01:c5:7e:90:2d:62:c2:2f:16:26:07:84:4f:45:a1:e2:
         52:d0:5b:e2:ec:08:4d:1c:fe:8c:8a:af:97:0b:b1:4c:5f:62:
         86:7e:55:b7:4a:da:2c:d5:b6:ca:cb:e7:ef:07:3d:4d:af:d9:
         19:a5:e6:9a:21:5b:d8:f6:d3:c4:42:04:e5:ef:8d:bb:8f:44:
         93:09:83:f1:8a:fe:a9:ca:3b:f5:59:37:c2:92:03:aa:56:a1:
         c5:0a:53:63:59:af:3d:bf:3f:47:0a:31:76:a5:05:0b:0f:54:
         b9:e0:4a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:02:47 2025 by rpki-client