Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3233332e302f32342d3234203d3e20323632353035.roa
File:                     3137372e36362e3233332e302f32342d3234203d3e20323632353035.roa (raw, json)
Hash identifier:          GqbCVn/fCEv/3yBqfZGZg30jkFtykbTsjTqK03m8e4E=
Subject key identifier:   31:DC:29:BF:3F:EF:E8:C9:C0:B8:76:9F:97:B8:56:DF:C8:29:AE:E3
Certificate issuer:       /CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
Certificate serial:       2B7ACCD664CD283709F983AAF5CB5A0DFCC18ED0
Authority key identifier: 2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3233332e302f32342d3234203d3e20323632353035.roa
Signing time:             Mon 12 Feb 2024 13:14:31 +0000
ROA not before:           Mon 12 Feb 2024 13:09:31 +0000
ROA not after:            Mon 10 Feb 2025 13:14:31 +0000
asID:                     262505
IP address blocks:        177.66.233.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7a:cc:d6:64:cd:28:37:09:f9:83:aa:f5:cb:5a:0d:fc:c1:8e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
        Validity
            Not Before: Feb 12 13:09:31 2024 GMT
            Not After : Feb 10 13:14:31 2025 GMT
        Subject: CN=31DC29BF3FEFE8C9C0B8769F97B856DFC829AEE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:0a:b4:bd:09:5e:8e:a1:52:de:60:b9:9d:
                    ab:3c:ad:26:ad:12:4c:b5:7f:b2:f8:dd:a3:f5:5a:
                    47:34:91:57:a1:6b:33:7e:29:78:04:d5:75:f1:76:
                    4c:fd:dc:62:1d:8e:65:c0:e7:ca:04:28:c8:e8:46:
                    61:43:cb:aa:ee:38:4f:7d:01:72:5b:19:12:36:2e:
                    b3:a3:36:2e:b1:58:ed:34:a6:00:12:40:46:0d:6c:
                    08:d8:4c:bc:e8:3c:25:ce:e6:7c:a9:2b:a8:a5:60:
                    ef:59:7c:c3:5d:27:57:59:1e:fd:3f:36:14:ae:15:
                    32:3f:31:41:53:8f:81:09:ce:08:a3:15:08:eb:32:
                    8c:6a:42:6d:6a:14:7a:16:29:c5:56:f5:29:52:f7:
                    f0:f1:ba:a5:93:0e:56:6e:ce:34:cd:71:c7:5f:9f:
                    17:da:72:ea:4e:91:cc:15:42:25:f7:c7:c5:d8:8d:
                    9e:0d:18:9f:1a:a8:fb:d4:d5:07:c2:5a:d0:e5:9b:
                    e1:45:8f:a1:a6:bb:d3:f6:0b:e8:4d:8f:6b:30:5d:
                    c4:06:92:50:44:e2:91:53:00:8a:77:8f:cc:54:f3:
                    1f:4f:8c:55:1e:ac:bb:c4:97:14:ab:44:3a:78:7b:
                    44:d7:3f:17:9d:37:5d:8e:71:ac:b8:64:76:10:c3:
                    63:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DC:29:BF:3F:EF:E8:C9:C0:B8:76:9F:97:B8:56:DF:C8:29:AE:E3
            X509v3 Authority Key Identifier:
                keyid:2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e36362e3233332e302f32342d3234203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:96:ba:fd:79:c7:dc:83:48:c4:5a:61:2d:84:c7:ed:b4:fc:
         14:34:a2:4c:bc:02:1a:16:66:f5:de:44:fd:77:67:c7:2d:10:
         7e:12:8b:25:c9:65:be:b4:7d:dd:30:8b:d9:aa:34:df:52:e8:
         a8:2d:fc:1a:81:fd:6a:a8:e4:29:aa:fc:5c:93:f4:b3:98:d6:
         a0:6a:02:ac:83:19:ef:69:37:b7:33:ef:6e:11:88:16:51:2a:
         b7:89:ab:61:f2:fc:ca:09:d7:32:31:fe:aa:ce:02:47:8b:f6:
         65:9e:77:db:0e:58:c3:8e:66:90:85:84:0d:d6:e4:0d:db:29:
         45:ac:be:04:85:7f:f4:a5:1a:fc:61:a4:b8:3c:af:34:60:3c:
         95:ee:8a:74:5e:96:9e:64:6e:5e:e3:c2:87:e5:e8:63:6d:af:
         4e:6c:af:1f:09:13:5c:40:6d:2b:31:17:13:5f:91:e6:6c:0d:
         36:3b:43:25:23:28:1c:af:0f:8d:a4:45:c4:7d:2f:8a:69:6f:
         22:0a:eb:f7:66:4f:01:4e:65:af:47:95:84:01:2d:50:7b:e3:
         07:a2:bd:4e:a3:c4:77:29:9f:4e:79:14:9f:1f:6c:26:c6:45:
         74:b1:a6:02:e7:aa:52:13:ba:17:94:92:92:09:7b:ab:cb:16:
         85:39:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:44 2025 by rpki-client