Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32392e302f32342d3234203d3e203532363835.roa
File:                     3137372e37332e32392e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          vYwpkTdwveB74WKCJ7nNpG5vjbbSctCSif7SsMj4yLA=
Subject key identifier:   3E:3F:02:EA:8E:BF:A7:E4:BE:A7:F3:52:65:2E:EE:CA:5A:2D:08:EF
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       5E5BEDE113BCBDC5892F152E8CEF0C70D3EF0750
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32392e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 05 Mar 2025 20:59:38 +0000
ROA not before:           Wed 05 Mar 2025 20:54:38 +0000
ROA not after:            Wed 04 Mar 2026 20:59:38 +0000
asID:                     52685
IP address blocks:        177.73.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5b:ed:e1:13:bc:bd:c5:89:2f:15:2e:8c:ef:0c:70:d3:ef:07:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Mar  5 20:54:38 2025 GMT
            Not After : Mar  4 20:59:38 2026 GMT
        Subject: CN=3E3F02EA8EBFA7E4BEA7F352652EEECA5A2D08EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:c3:9c:f9:e2:dd:b4:df:e3:e7:78:06:0f:
                    49:7d:3e:2e:a0:c1:e8:47:cd:e2:b1:3c:75:f3:0c:
                    13:3a:ed:0f:55:53:43:77:fd:50:4c:a3:10:3c:3f:
                    c5:b2:f4:63:ae:89:e8:7c:dc:37:40:00:14:d2:4b:
                    6d:5e:96:8a:70:b1:cb:6e:5f:9b:e8:6e:47:67:d6:
                    eb:1f:df:0c:a7:06:f9:50:d8:fa:f8:75:90:72:02:
                    c2:11:57:7b:38:5b:15:aa:1e:db:9b:2f:9d:3b:bd:
                    95:14:9f:1b:48:fa:dc:ba:15:fa:71:6a:83:b6:94:
                    fe:2f:1e:01:51:f2:83:4f:92:18:35:e4:38:5a:27:
                    01:aa:d2:fa:c8:9e:62:f6:06:12:11:5c:cf:9d:87:
                    1a:7a:00:07:f4:0f:41:51:97:ff:f8:7f:0e:e8:f7:
                    b5:be:41:78:0b:d1:47:7e:7c:f6:9a:b0:ca:67:fe:
                    da:cf:2b:dc:ba:04:65:1e:f9:7e:a9:26:36:23:09:
                    9e:ca:aa:8b:4e:6a:51:13:a5:29:db:dc:3c:2e:d6:
                    5b:a0:5a:3b:d8:a1:6d:62:da:ed:59:40:1e:e9:ab:
                    2f:ff:16:c9:7e:4a:36:e8:22:b9:41:93:83:24:f9:
                    db:33:e9:d6:c6:07:92:c9:69:cf:be:eb:10:a3:72:
                    e6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3F:02:EA:8E:BF:A7:E4:BE:A7:F3:52:65:2E:EE:CA:5A:2D:08:EF
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32392e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:d9:ef:9d:51:46:75:79:7d:e2:bd:c3:00:2a:0f:f7:75:55:
         64:21:ef:6b:bb:98:e5:f7:da:a7:05:2b:68:28:f4:28:fc:6d:
         7d:6c:57:c5:72:f9:ec:45:90:7f:20:67:c2:bf:d0:37:27:99:
         e5:f3:ef:c5:5b:96:f1:40:9e:c2:91:09:8f:4e:2d:16:8b:57:
         21:da:48:37:e6:33:ec:5e:b2:7d:e3:81:01:fd:b5:0e:a4:bf:
         bf:76:ae:c5:2a:9a:e5:1c:73:fc:8d:07:75:e0:e5:0c:62:00:
         c2:d4:26:35:d0:86:54:9e:e1:5e:73:73:f3:40:a7:44:ac:a8:
         4a:04:7d:2f:6a:fd:3b:ea:f6:1e:39:3a:4e:57:1f:c9:b5:02:
         ff:5d:31:d1:d7:f5:ec:db:ca:86:0c:a2:92:8d:b7:99:32:8c:
         66:41:6e:66:54:25:83:ad:35:ca:df:8a:37:72:2f:26:ca:cd:
         e9:a9:55:7d:3f:12:84:88:4d:4b:74:a3:9b:31:74:e2:94:7a:
         da:65:78:9e:95:e5:f6:cd:7a:ef:74:2e:af:d7:87:0a:8f:9b:
         da:b3:87:ef:5b:fa:34:ca:42:14:7a:ed:9c:ee:df:ad:53:4c:
         27:f9:2e:a5:2c:6c:8b:f1:65:7b:a5:14:21:be:53:56:1d:78:
         2c:64:19:2d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXlvt4RO8vcWJLxUujO8McNPvB1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhDRjY3NzRCNTJEOEE2MDg3NTIzMDNDMDhEODEzOUFC
QjY5RTNGMDAeFw0yNTAzMDUyMDU0MzhaFw0yNjAzMDQyMDU5MzhaMDMxMTAvBgNV
BAMTKDNFM0YwMkVBOEVCRkE3RTRCRUE3RjM1MjY1MkVFRUNBNUEyRDA4RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+SsOc+eLdtN/j53gGD0l9Pi6g
wehHzeKxPHXzDBM67Q9VU0N3/VBMoxA8P8Wy9GOuieh83DdAABTSS21elopwsctu
X5vobkdn1usf3wynBvlQ2Pr4dZByAsIRV3s4WxWqHtubL507vZUUnxtI+ty6Ffpx
aoO2lP4vHgFR8oNPkhg15DhaJwGq0vrInmL2BhIRXM+dhxp6AAf0D0FRl//4fw7o
97W+QXgL0Ud+fPaasMpn/trPK9y6BGUe+X6pJjYjCZ7KqotOalETpSnb3Dwu1lug
WjvYoW1i2u1ZQB7pqy//Fsl+SjboIrlBk4Mk+dsz6dbGB5LJac++6xCjcuYhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUPj8C6o6/p+S+p/NSZS7uylotCO8wHwYDVR0j
BBgwFoAUOM9ndLUtimCHUjA8CNgTmrtp4/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxREpGcTZ4WFd5QTduV041RkdnOE53RXNmWG5tWEtqS2d6bVNBVFBz
THQvMS8zOENGNjc3NEI1MkQ4QTYwODc1MjMwM0MwOEQ4MTM5QUJCNjlFM0YwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4Q0Y2Nzc0QjUyRDhBNjA4
NzUyMzAzQzA4RDgxMzlBQkI2OUUzRjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MURKRnE2eFhXeUE3bldONUZHZzhOd0VzZlhubVhLaktnem1TQVRQc0x0LzEv
MzEzNzM3MmUzNzMzMmUzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM2
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFJHTANBgkqhkiG9w0BAQsFAAOCAQEAxNnvnVFGdXl9
4r3DACoP93VVZCHva7uY5ffapwUraCj0KPxtfWxXxXL57EWQfyBnwr/QNyeZ5fPv
xVuW8UCewpEJj04tFotXIdpIN+Yz7F6yfeOBAf21DqS/v3auxSqa5Rxz/I0HdeDl
DGIAwtQmNdCGVJ7hXnNz80CnRKyoSgR9L2r9O+r2Hjk6TlcfybUC/10x0df17NvK
hgyiko23mTKMZkFuZlQlg601yt+KN3IvJsrN6alVfT8ShIhNS3SjmzF04pR62mV4
npXl9s1673Qur9eHCo+b2rOH71v6NMpCFHrtnO7frVNMJ/kupSxsi/Fle6UUIb5T
Vh14LGQZLQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:25 2025 by rpki-client