Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233392e302f32342d3234203d3e20323632333133.roa
File:                     3137372e3130352e3233392e302f32342d3234203d3e20323632333133.roa (raw, json)
Hash identifier:          EkeRo5vqwKnkQcvZAAD43LGS1BFQtwl+AhfF/AB3wT4=
Subject key identifier:   53:02:0F:91:ED:FC:11:2A:99:B2:34:6D:8D:C9:A6:2C:2A:16:85:45
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       4CE1E8E6CDB404D09ED35D21565DE205E36AA762
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233392e302f32342d3234203d3e20323632333133.roa
Signing time:             Wed 05 Mar 2025 22:00:26 +0000
ROA not before:           Wed 05 Mar 2025 21:55:26 +0000
ROA not after:            Wed 04 Mar 2026 22:00:26 +0000
asID:                     262313
IP address blocks:        177.105.239.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e1:e8:e6:cd:b4:04:d0:9e:d3:5d:21:56:5d:e2:05:e3:6a:a7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Mar  5 21:55:26 2025 GMT
            Not After : Mar  4 22:00:26 2026 GMT
        Subject: CN=53020F91EDFC112A99B2346D8DC9A62C2A168545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:de:13:e7:e1:8f:26:80:34:71:95:2c:1b:
                    4d:fd:39:58:28:50:e6:49:dc:e2:63:e9:e8:f3:da:
                    d4:70:3f:29:a7:dd:6a:07:41:46:e7:bd:be:01:05:
                    14:0a:39:c2:a4:d6:17:fe:ad:8f:25:cb:08:aa:c8:
                    8b:42:0e:60:b9:ad:3d:96:3b:29:f3:db:b5:e2:aa:
                    07:a7:99:5d:51:a8:23:db:b4:e3:1e:80:66:f2:aa:
                    c0:88:81:b9:fa:ea:b1:c8:85:5b:a4:ff:b2:b0:df:
                    95:4c:98:03:c9:5b:4d:95:e9:4a:13:0a:44:75:bd:
                    bf:c0:cd:25:38:c7:52:26:14:a0:83:ac:91:84:7a:
                    01:f7:73:1b:41:aa:5e:b9:5b:70:3b:6d:bb:ae:56:
                    ab:39:49:ab:2d:73:9a:68:a9:04:51:85:cd:c4:b6:
                    ee:04:5b:26:b4:c5:05:7e:91:31:c4:a0:f0:d1:23:
                    4d:cb:81:8d:8d:7c:ba:21:f9:dd:55:f9:48:25:69:
                    7c:a2:32:93:fc:84:b8:3c:84:cd:69:26:44:08:e6:
                    5a:04:ec:d2:2d:4d:45:32:12:4c:d6:48:4d:e8:c1:
                    f6:8c:4d:f8:58:1b:ec:89:c6:e7:22:6c:91:bb:9d:
                    c3:33:4e:3d:63:2b:1b:7f:27:a7:2d:f4:b0:33:04:
                    55:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:02:0F:91:ED:FC:11:2A:99:B2:34:6D:8D:C9:A6:2C:2A:16:85:45
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233392e302f32342d3234203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:20:7b:9c:d3:dd:b0:19:b8:d9:cd:81:04:2c:17:ae:24:19:
         40:f9:b9:7a:4b:dd:12:54:1e:dc:db:6b:5e:be:92:cc:03:bf:
         a3:04:11:de:d8:f6:43:e6:9d:2a:01:fb:de:9a:a3:8c:0b:78:
         9c:0a:d9:b8:e6:0c:cd:82:6f:7b:ea:bb:b7:8c:dc:5b:77:05:
         52:41:29:59:63:7d:44:1c:24:c0:d9:b3:88:a2:1e:76:61:81:
         57:42:d2:80:08:a9:5d:22:98:40:04:d0:5a:fa:37:ba:43:53:
         86:38:7e:00:a2:37:40:10:8f:bd:05:a2:13:a2:ba:f9:4e:62:
         b2:3a:b9:64:95:a2:89:00:2f:89:10:24:28:31:9c:12:f9:da:
         91:3b:8a:73:d4:c0:8a:6f:7b:1d:aa:a6:3d:50:dd:c1:70:9a:
         dc:2a:72:9d:8d:30:6e:19:6c:9d:e2:6c:de:de:f9:14:d6:a8:
         fc:bf:eb:35:fd:8a:95:79:d3:54:ea:34:45:27:74:ce:58:f7:
         3b:3c:31:8c:d1:c0:6b:5d:d8:e3:62:fc:f1:61:ae:38:59:83:
         52:d4:05:0e:85:f6:18:bb:77:94:c7:9a:7e:de:b5:56:74:4e:
         0d:47:7b:76:c6:b9:9e:57:4e:e7:74:09:36:03:5f:bf:2f:aa:
         c7:f2:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:39 2025 by rpki-client