Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138362e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3138362e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          ea2nWrhsYfiXSxrJeY/B2qhgjRFbxwaqwN7Y0NIn+5g=
Subject key identifier:   A1:44:D3:70:50:8D:06:33:67:C9:74:F0:BF:C8:1A:C6:1F:D0:95:51
Certificate issuer:       /CN=ACCC0F5DCF06D085FDFED520EB02F87054728167
Certificate serial:       642481990E45A81EC1B9C26B33889DF22A0B6878
Authority key identifier: AC:CC:0F:5D:CF:06:D0:85:FD:FE:D5:20:EB:02:F8:70:54:72:81:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACCC0F5DCF06D085FDFED520EB02F87054728167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138362e302f32342d3234203d3e203238353837.roa
Signing time:             Fri 26 Jul 2024 22:08:33 +0000
ROA not before:           Fri 26 Jul 2024 22:03:33 +0000
ROA not after:            Fri 25 Jul 2025 22:08:33 +0000
asID:                     28587
IP address blocks:        177.128.186.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:24:81:99:0e:45:a8:1e:c1:b9:c2:6b:33:88:9d:f2:2a:0b:68:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACCC0F5DCF06D085FDFED520EB02F87054728167
        Validity
            Not Before: Jul 26 22:03:33 2024 GMT
            Not After : Jul 25 22:08:33 2025 GMT
        Subject: CN=A144D370508D063367C974F0BFC81AC61FD09551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:01:d5:5a:02:12:9b:6d:81:fa:61:be:93:b6:
                    25:1c:15:70:2a:3f:ce:b9:16:27:3d:d4:12:ef:69:
                    68:9e:ac:29:3b:ad:f2:a5:5c:40:9d:f2:df:27:ae:
                    55:bb:13:f6:73:ef:99:11:90:1d:f0:a7:ee:4b:d4:
                    5d:d5:da:9f:19:64:a7:fd:53:af:43:a7:86:d2:cc:
                    ec:55:da:99:92:0f:2d:3e:a1:ef:ba:a7:b8:7f:d4:
                    17:8a:3c:aa:96:30:26:ae:36:1b:2f:55:44:bd:4a:
                    85:6b:ca:75:a5:be:d9:f3:ef:31:b8:88:56:cf:41:
                    74:56:52:bf:68:52:dc:2a:92:68:c9:d1:7f:28:46:
                    31:c7:3e:17:e4:bc:8e:55:22:60:a8:46:64:79:b0:
                    56:b1:30:95:34:85:35:07:5d:47:6b:97:80:d8:ba:
                    b9:69:19:13:c5:22:a6:04:5b:28:20:da:8b:99:5b:
                    d4:22:25:57:46:da:76:88:c3:09:81:be:80:90:9a:
                    ee:d5:51:d2:67:1f:d4:77:5c:f7:a9:0a:b5:da:c7:
                    b4:15:26:4f:0c:51:9f:a8:da:66:60:82:61:3e:e3:
                    2d:2d:18:30:61:2d:e3:1a:bc:cf:08:50:27:da:b0:
                    8d:6c:42:a4:6e:eb:63:4e:c8:12:ce:13:df:fa:93:
                    f3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:44:D3:70:50:8D:06:33:67:C9:74:F0:BF:C8:1A:C6:1F:D0:95:51
            X509v3 Authority Key Identifier:
                keyid:AC:CC:0F:5D:CF:06:D0:85:FD:FE:D5:20:EB:02:F8:70:54:72:81:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/ACCC0F5DCF06D085FDFED520EB02F87054728167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACCC0F5DCF06D085FDFED520EB02F87054728167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138362e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:2b:2b:6e:0d:2e:2e:b5:cf:40:48:c2:dc:cb:f4:6c:d7:de:
         49:67:40:17:d0:bc:98:c4:72:db:cc:e6:d6:39:e7:9f:71:26:
         73:53:21:28:bc:a0:cc:47:e7:e0:c3:df:93:2a:39:bb:c2:01:
         2b:84:e1:27:6c:d9:5a:ab:a3:b1:98:63:ef:9d:c0:fe:28:ee:
         93:e8:88:41:86:26:84:f0:7f:86:8b:89:24:66:70:5e:90:c2:
         60:2c:aa:73:ff:84:dc:ff:a5:1b:5e:42:c4:c9:52:3b:b0:6d:
         93:d5:e3:f6:4d:a4:51:4b:8f:cd:f2:d3:55:4d:bc:23:09:e3:
         ef:f4:82:09:9f:90:f7:08:45:78:86:34:7e:09:99:94:a5:e3:
         79:29:54:64:9b:61:1a:9b:f4:e0:5f:34:09:af:9e:85:e0:50:
         c4:bb:2b:b8:e3:b4:66:c5:9f:ed:0f:15:95:70:44:92:ed:b8:
         d9:86:c4:bc:38:2c:e5:97:7b:16:1a:aa:9b:d3:3f:2d:38:97:
         84:49:83:c5:29:76:de:36:cf:ca:a6:7f:07:11:96:6c:69:d8:
         66:1c:04:0e:bc:a5:1e:ad:7a:93:77:ab:5f:76:98:3f:a8:f8:
         33:a1:fd:ad:2f:b7:6e:df:9b:92:00:1a:81:95:58:3b:c3:cd:
         45:f0:d8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:54 2025 by rpki-client