Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138392e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3138392e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          LI2eaUfchIQKx0U1yvYud1Ey+4xAJ0nMJvH4WcYtZR0=
Subject key identifier:   B0:7E:29:18:4C:F3:AF:2A:FA:62:8C:4D:9A:5C:44:66:16:A5:A0:CB
Certificate issuer:       /CN=ACCC0F5DCF06D085FDFED520EB02F87054728167
Certificate serial:       1B41C4EDB6FB55CA44A2270D8C00C8A3A6696C7B
Authority key identifier: AC:CC:0F:5D:CF:06:D0:85:FD:FE:D5:20:EB:02:F8:70:54:72:81:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACCC0F5DCF06D085FDFED520EB02F87054728167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138392e302f32342d3234203d3e203238353837.roa
Signing time:             Fri 26 Jul 2024 22:08:45 +0000
ROA not before:           Fri 26 Jul 2024 22:03:45 +0000
ROA not after:            Fri 25 Jul 2025 22:08:45 +0000
asID:                     28587
IP address blocks:        177.128.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:41:c4:ed:b6:fb:55:ca:44:a2:27:0d:8c:00:c8:a3:a6:69:6c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACCC0F5DCF06D085FDFED520EB02F87054728167
        Validity
            Not Before: Jul 26 22:03:45 2024 GMT
            Not After : Jul 25 22:08:45 2025 GMT
        Subject: CN=B07E29184CF3AF2AFA628C4D9A5C446616A5A0CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:44:a6:ae:01:56:39:57:d8:f0:b0:4a:56:99:
                    b6:96:59:86:4e:da:c8:de:8b:59:71:17:62:76:15:
                    55:1c:1e:c7:d3:dc:e5:99:f7:65:7a:6e:43:69:bd:
                    85:7f:aa:bc:bd:26:5d:45:6d:6b:88:bd:6b:c6:5f:
                    d6:33:d2:a3:14:9d:5d:b5:60:c2:52:be:63:fe:48:
                    52:fb:6e:89:05:e4:ae:58:ae:50:1a:c0:93:01:94:
                    92:11:8e:10:f2:55:34:d1:65:ec:46:0f:9c:80:0c:
                    67:fd:3d:58:35:40:a3:3f:71:cc:32:cb:1c:61:3d:
                    2d:1f:ad:86:da:c8:04:4a:81:1c:6f:fb:30:33:62:
                    36:82:68:34:ca:8f:21:8e:59:70:fc:f8:d4:6a:a9:
                    22:98:a9:2d:8c:97:a1:64:2f:c0:ab:c1:bc:c0:58:
                    f2:17:6e:09:44:38:28:9a:09:48:9c:a5:4d:7a:ba:
                    c3:57:b2:a0:61:3b:3e:fc:d2:aa:af:5c:2e:c4:ae:
                    cb:33:d9:2a:a0:7d:4d:96:bb:cf:0b:01:7a:29:5c:
                    e4:5d:9e:06:df:2d:1e:13:68:53:b9:26:99:1a:b5:
                    29:51:e4:99:70:b6:cc:1f:f5:b4:7f:07:8d:42:cd:
                    b3:e0:36:ac:8f:ee:51:41:92:07:fd:61:c5:26:55:
                    cc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7E:29:18:4C:F3:AF:2A:FA:62:8C:4D:9A:5C:44:66:16:A5:A0:CB
            X509v3 Authority Key Identifier:
                keyid:AC:CC:0F:5D:CF:06:D0:85:FD:FE:D5:20:EB:02:F8:70:54:72:81:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/ACCC0F5DCF06D085FDFED520EB02F87054728167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACCC0F5DCF06D085FDFED520EB02F87054728167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138392e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:d0:cd:30:65:12:37:65:9e:eb:94:08:37:1c:8c:77:42:4d:
         0a:67:e9:94:91:9f:66:f7:5b:36:2e:d8:bc:c3:1f:a1:f8:39:
         10:1e:fc:0a:65:a9:c8:84:55:7c:fc:53:c0:c8:04:f7:32:eb:
         98:04:fc:8e:cd:96:cf:a3:fb:92:52:db:bc:58:3d:1c:c4:27:
         93:c0:62:79:95:4f:09:cf:23:88:d6:bf:b2:82:4e:68:77:b1:
         b0:43:ea:73:eb:db:fd:c3:fb:6e:ff:38:f1:38:36:bf:3c:f6:
         77:8d:59:d4:dd:24:b9:38:43:b8:ea:f9:bf:c9:dd:08:f3:86:
         3f:01:76:1e:66:a9:2a:3f:42:e8:30:80:1e:3b:eb:37:58:45:
         90:0d:c4:90:99:62:39:15:89:8c:77:5c:95:9f:4d:29:a3:5d:
         db:a1:dd:57:56:ed:5c:1a:30:68:6c:3b:85:f8:3d:8a:18:b3:
         b0:60:6a:3c:3c:a4:ce:15:d3:c4:a3:69:6e:67:2a:2b:90:e6:
         33:6e:25:86:9e:48:7d:7c:41:13:ae:4d:18:b5:d7:eb:63:02:
         51:0c:ef:c8:7c:2c:49:be:b5:11:e0:1b:2e:08:c1:01:b1:62:
         94:b0:13:13:37:dd:c5:3c:8b:94:9f:c0:45:7f:a2:54:5e:2f:
         3d:6d:6e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:39 2025 by rpki-client