Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3232352e302f32342d3234203d3e20323632353035.roa
File:                     3137372e36362e3232352e302f32342d3234203d3e20323632353035.roa (raw, json)
Hash identifier:          GP2R29ouTLL4XDrmye9ig83kQvvnUQ2vMeKow8x/HkA=
Subject key identifier:   C5:37:28:7A:CA:10:A9:64:93:01:4F:4B:75:BD:28:F3:C2:5B:E3:9F
Certificate issuer:       /CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
Certificate serial:       25A6D095E316C53D158E9F4CCE33A77BF5A0513B
Authority key identifier: 2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3232352e302f32342d3234203d3e20323632353035.roa
Signing time:             Mon 12 Feb 2024 13:14:30 +0000
ROA not before:           Mon 12 Feb 2024 13:09:30 +0000
ROA not after:            Mon 10 Feb 2025 13:14:30 +0000
asID:                     262505
IP address blocks:        177.66.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a6:d0:95:e3:16:c5:3d:15:8e:9f:4c:ce:33:a7:7b:f5:a0:51:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
        Validity
            Not Before: Feb 12 13:09:30 2024 GMT
            Not After : Feb 10 13:14:30 2025 GMT
        Subject: CN=C537287ACA10A96493014F4B75BD28F3C25BE39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:da:73:c3:40:eb:33:0a:11:4f:94:19:95:
                    07:04:7a:86:91:5b:bf:32:f8:cf:c3:1e:18:ab:8e:
                    0a:28:fb:a0:c5:e9:4d:5d:2c:11:e3:3b:67:6c:40:
                    b1:d1:d0:97:d3:fd:3b:81:9e:da:9e:05:5e:5c:72:
                    10:df:e2:50:da:1e:70:b3:6c:e9:93:63:75:1b:f5:
                    cf:13:d7:9d:a3:d8:ec:7c:72:de:68:88:5f:be:98:
                    ed:67:5e:67:23:d1:f4:8f:48:af:db:9f:e8:dc:51:
                    08:be:8e:77:1c:ae:a8:75:f5:47:73:1c:e8:b1:ac:
                    d7:76:31:e3:d8:e6:a2:09:57:c4:9e:2c:fa:b1:04:
                    67:7d:0d:e2:07:bc:d6:19:f9:f8:d0:e3:cd:22:84:
                    de:9b:2c:d5:47:f9:08:04:65:36:39:ef:ed:b8:7b:
                    53:7d:b9:a8:20:e9:a4:be:b7:44:41:b3:37:e3:fc:
                    0a:70:c2:4d:25:bb:3c:2c:83:88:34:2d:1e:96:6a:
                    f4:cc:8d:e1:18:19:3e:b8:9e:9c:df:43:b2:cc:65:
                    ed:5f:6c:3e:e7:35:c5:9a:f6:1f:06:5c:95:65:a0:
                    41:75:cc:6b:33:4e:90:9e:23:e4:e0:22:c0:a2:a3:
                    56:ea:fc:f6:4e:7c:ae:04:6a:ca:0b:1e:61:40:57:
                    9c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:37:28:7A:CA:10:A9:64:93:01:4F:4B:75:BD:28:F3:C2:5B:E3:9F
            X509v3 Authority Key Identifier:
                keyid:2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3232352e302f32342d3234203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:aa:c8:c1:9a:d6:62:b4:c6:ac:c5:91:f7:91:44:ea:d0:84:
         8e:5d:f4:e9:76:43:63:1d:7b:3f:db:49:f8:33:ba:9a:ae:5b:
         03:66:45:d4:cf:17:ca:f1:81:93:4e:73:e8:bf:da:2f:17:93:
         93:a6:fc:6b:ac:17:d7:45:5d:c5:cf:88:10:d3:7c:92:d7:78:
         b8:89:11:01:3a:0b:dc:d2:56:ae:4e:79:24:f6:95:32:3a:83:
         b5:e9:9c:f0:19:34:1e:1b:89:47:52:30:1e:99:29:62:3f:74:
         92:6b:f1:cc:96:14:e3:88:d6:e9:ef:a5:39:16:a8:d5:93:49:
         3d:84:6b:eb:33:27:c1:a3:e2:91:cb:86:e9:b7:0a:f9:08:81:
         d8:ff:d1:f3:d8:1a:9d:8d:b5:80:86:61:2a:6e:38:82:9a:e9:
         8e:f1:9a:c6:d8:41:2c:05:f9:5b:b7:b6:82:50:69:69:fc:31:
         9c:9d:ae:d7:80:d4:6f:ff:da:20:f6:15:18:b6:35:fa:6c:f5:
         2d:e6:f1:39:e1:e7:99:91:10:5f:ed:7f:2b:64:44:31:c9:e1:
         17:45:ac:0c:54:c7:0c:a2:e6:5a:a2:ea:da:3f:72:83:17:83:
         f2:80:24:1f:ca:03:e4:3c:ea:4d:91:fa:6e:42:23:31:f9:12:
         72:0c:4c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:38:00 2025 by rpki-client