Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3232362e302f32342d3234203d3e20323632353035.roa
File:                     3137372e36362e3232362e302f32342d3234203d3e20323632353035.roa (raw, json)
Hash identifier:          VrQVgzOSloq72AQ7f53Z4iIZRZKBJXxxsRuBtnuH9xY=
Subject key identifier:   1B:3C:D3:DD:B6:2F:BA:21:B9:3C:AD:16:80:30:33:4C:0C:71:2B:7B
Certificate issuer:       /CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
Certificate serial:       57CCDC54E21253C1D70F3348D59DCA0050BCDA81
Authority key identifier: 2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3232362e302f32342d3234203d3e20323632353035.roa
Signing time:             Mon 12 Feb 2024 13:14:30 +0000
ROA not before:           Mon 12 Feb 2024 13:09:30 +0000
ROA not after:            Mon 10 Feb 2025 13:14:30 +0000
asID:                     262505
IP address blocks:        177.66.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:cc:dc:54:e2:12:53:c1:d7:0f:33:48:d5:9d:ca:00:50:bc:da:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
        Validity
            Not Before: Feb 12 13:09:30 2024 GMT
            Not After : Feb 10 13:14:30 2025 GMT
        Subject: CN=1B3CD3DDB62FBA21B93CAD168030334C0C712B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:5a:29:55:ed:73:25:30:7b:a1:d2:ee:dc:
                    14:37:74:66:b5:b9:e2:79:3a:79:85:6b:1b:7d:ad:
                    a6:ce:94:53:6b:85:9b:e0:27:ed:10:f6:25:bc:20:
                    20:c7:17:5d:b9:8f:ec:39:2d:8f:76:07:e0:bd:72:
                    c7:d7:f3:48:7e:74:0a:35:02:9d:af:43:76:97:51:
                    71:2a:48:c8:6d:f8:e3:cc:f4:58:66:84:54:da:c4:
                    8b:96:9f:6e:83:c4:0e:fb:70:77:ef:d2:69:b3:21:
                    c9:49:4d:e6:6d:1c:ff:d3:20:0a:f6:67:d2:b7:65:
                    5a:5c:5d:c7:4d:de:66:79:c2:51:ea:7b:7b:97:98:
                    12:3b:ed:3b:37:db:ec:7b:f2:3c:4e:15:50:4c:5f:
                    df:f5:05:55:02:a7:77:40:ce:fe:45:00:e6:66:14:
                    56:e2:f0:d6:0e:81:dd:b7:11:e1:b3:d3:30:30:54:
                    f1:ef:f4:3f:6a:75:75:5c:64:b0:25:d2:e5:85:b6:
                    d1:f9:8f:37:45:a2:44:e1:40:43:56:b3:43:ad:6f:
                    6c:06:bb:69:07:08:55:dd:eb:96:d2:e7:32:c8:57:
                    fe:9e:dd:c3:3f:bc:6e:a5:bb:86:a5:c2:81:a1:cd:
                    6a:b5:a2:d1:6f:88:f2:da:82:93:74:f4:f9:b0:0b:
                    46:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3C:D3:DD:B6:2F:BA:21:B9:3C:AD:16:80:30:33:4C:0C:71:2B:7B
            X509v3 Authority Key Identifier:
                keyid:2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3232362e302f32342d3234203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:3e:46:a6:f6:b0:43:fa:dd:04:69:24:66:de:0e:4c:6d:69:
         a4:28:d2:f7:26:f8:fb:1a:b2:c3:25:e1:6a:46:10:8f:ce:92:
         b7:21:ad:b8:7c:7a:4c:9f:b2:42:0f:c8:e9:f8:11:ab:5c:48:
         b4:73:18:dd:50:8f:74:8e:e1:e4:6c:91:01:3c:ca:f3:5a:a1:
         8f:ec:2c:b8:86:2f:9c:84:8d:db:f0:ef:13:65:bc:58:de:92:
         28:62:14:3b:3b:79:4d:cf:e0:02:31:04:d4:ba:e8:38:5d:13:
         6c:2a:c8:5a:72:38:22:34:93:dc:a0:58:a9:da:2b:74:1a:8e:
         55:94:5b:d7:47:e8:48:1e:de:16:8c:f1:48:9a:bc:16:8e:cd:
         b3:3b:d5:b1:98:b6:48:35:85:33:c0:0b:fe:48:28:08:b7:d1:
         fb:29:3c:c0:86:4a:0f:de:1b:1e:e5:32:29:cd:c6:c7:a6:c8:
         f8:5d:2e:c3:e9:02:7b:5e:03:4a:5f:dc:e6:7e:61:25:e1:f8:
         30:17:27:1a:9e:8d:9f:c3:a4:fe:48:1a:14:de:a0:19:7a:8d:
         f4:89:eb:1c:f7:28:0d:b9:6c:fb:a1:34:ae:d8:fb:cb:18:aa:
         cd:e2:e9:46:ab:e4:cf:c3:92:a3:63:06:8e:17:bf:57:a5:80:
         f6:45:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:25 2025 by rpki-client