Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138392e302f32342d3234203d3e203238333036.roa
File:                     3137372e39312e3138392e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          l7sTIgg27Ia3kEvLQ39s6GAkhaPc3D/+VSXPH4YEk7g=
Subject key identifier:   8E:6A:4A:EE:DF:33:E7:A3:43:33:7C:83:DE:C8:8B:4E:85:1C:B6:7D
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       51B981D844430C9AA37025A1B937399EF0DD0C8C
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138392e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:21 +0000
ROA not before:           Tue 25 Jun 2024 15:16:21 +0000
ROA not after:            Tue 24 Jun 2025 15:21:21 +0000
asID:                     28306
IP address blocks:        177.91.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b9:81:d8:44:43:0c:9a:a3:70:25:a1:b9:37:39:9e:f0:dd:0c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:21 2024 GMT
            Not After : Jun 24 15:21:21 2025 GMT
        Subject: CN=8E6A4AEEDF33E7A343337C83DEC88B4E851CB67D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b7:d8:56:c2:54:7c:a8:cf:14:b4:7d:d5:09:
                    b7:ea:df:ac:ca:aa:a2:5f:a5:95:14:10:c5:cb:a5:
                    68:87:ef:d9:0c:6e:1a:de:c1:fb:ac:7c:6c:e2:a6:
                    59:0e:a2:54:b4:72:9c:af:57:5f:06:2b:94:02:3d:
                    0d:2f:3f:b7:aa:c4:28:85:4e:8b:b7:46:02:7d:d5:
                    9e:55:00:ba:03:b7:23:81:6a:56:17:59:81:9e:21:
                    8b:d0:b9:3b:08:8a:4e:44:f1:e0:f3:98:1d:a7:1c:
                    d1:bf:f0:24:e5:97:8f:cc:0a:f9:28:2c:a5:f1:90:
                    81:dc:e3:a8:69:c8:eb:0b:15:39:bf:32:cf:54:0f:
                    64:ee:f7:e0:52:42:d8:84:de:0f:8a:c2:e8:dc:b3:
                    58:9d:13:47:b7:dd:9e:81:a1:91:6d:bc:f7:db:68:
                    8b:2e:66:dc:51:2c:32:e4:2d:d1:01:f6:dd:e3:e0:
                    33:be:a9:10:98:ed:57:e0:eb:06:6e:de:72:0d:4b:
                    d7:6d:4a:be:60:1f:69:7e:84:98:03:38:64:70:5e:
                    47:38:f3:4e:04:88:3b:38:00:5d:50:68:3c:a3:98:
                    c8:b2:5c:9f:90:7f:28:3c:7e:24:c3:5a:a3:b8:20:
                    a1:af:6a:0e:b3:6a:f7:3c:06:0f:d0:7e:ab:a8:c1:
                    f5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6A:4A:EE:DF:33:E7:A3:43:33:7C:83:DE:C8:8B:4E:85:1C:B6:7D
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138392e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:33:ab:77:44:a8:a7:1f:f6:48:55:59:36:da:5b:27:b2:f3:
         27:60:05:f1:bd:73:c2:ce:9d:da:d9:95:04:de:f9:eb:e6:5a:
         5d:e6:77:94:61:0d:60:d2:f6:91:c6:b6:8d:6e:ce:8c:f5:ec:
         a4:1d:0e:cb:ff:56:72:ae:9b:0a:3d:10:d8:41:ba:bf:dc:1b:
         22:3f:9c:82:43:bc:a1:d3:4c:fe:9f:f9:b3:b0:00:a3:d2:bd:
         77:d5:83:cd:4f:2d:c6:4d:bd:ef:16:cc:33:f2:ca:c7:f4:0d:
         09:e7:8f:33:6c:1a:df:4b:3e:60:aa:b0:dc:63:49:0e:89:d4:
         41:e2:a4:f8:25:66:31:26:39:b0:63:a9:9b:62:3f:85:87:19:
         be:05:27:ad:9f:5f:f8:e2:79:5a:ab:e7:66:ab:24:b7:58:ba:
         d6:3d:42:72:68:b2:12:bb:79:90:a3:82:b5:0d:dc:83:fb:fb:
         90:8c:f1:08:cc:57:74:e7:1f:d1:4b:2e:f1:bc:77:22:65:f9:
         20:03:ff:af:ef:dd:d0:80:44:5d:e8:e2:fb:01:51:51:1b:fe:
         7b:96:6d:04:c6:ff:53:23:27:bd:53:42:54:9e:0a:97:8e:73:
         a9:f4:72:34:fd:b7:9a:56:36:bb:7f:ec:87:48:b0:20:31:1c:
         20:a5:fa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:28 2025 by rpki-client