Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/3137372e38352e38302e302f32312d3234203d3e20323636313630.roa
File:                     3137372e38352e38302e302f32312d3234203d3e20323636313630.roa (raw, json)
Hash identifier:          8uk6Un72d3qSAxEdgqGX9BcB8rgKUERXCiN7YL8ozY0=
Subject key identifier:   EC:C4:4F:8D:4B:AA:EF:78:BE:8B:1C:E4:BB:E4:26:28:79:A9:14:8E
Certificate issuer:       /CN=199EA49ADE0A6B3DEA97BB5F6F6F91016332317F
Certificate serial:       38E21F1D157E6DFFCCB8CCF4944ECC435C7B703D
Authority key identifier: 19:9E:A4:9A:DE:0A:6B:3D:EA:97:BB:5F:6F:6F:91:01:63:32:31:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199EA49ADE0A6B3DEA97BB5F6F6F91016332317F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/3137372e38352e38302e302f32312d3234203d3e20323636313630.roa
Signing time:             Tue 03 Dec 2024 18:48:56 +0000
ROA not before:           Tue 03 Dec 2024 18:43:56 +0000
ROA not after:            Tue 02 Dec 2025 18:48:56 +0000
asID:                     266160
IP address blocks:        177.85.80.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e2:1f:1d:15:7e:6d:ff:cc:b8:cc:f4:94:4e:cc:43:5c:7b:70:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199EA49ADE0A6B3DEA97BB5F6F6F91016332317F
        Validity
            Not Before: Dec  3 18:43:56 2024 GMT
            Not After : Dec  2 18:48:56 2025 GMT
        Subject: CN=ECC44F8D4BAAEF78BE8B1CE4BBE4262879A9148E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:76:ba:0d:d7:5f:bd:b1:fc:70:e2:0e:4d:7a:
                    9a:85:cc:ea:04:f1:92:98:a8:3c:eb:8c:7d:cd:ca:
                    9a:83:87:cf:03:aa:0a:e1:f0:76:17:ee:87:fd:30:
                    2a:a3:45:5d:b0:0a:f1:56:ca:62:c7:6a:6d:0c:2b:
                    52:54:e4:d3:79:fd:0c:f5:b9:b4:8f:08:01:27:62:
                    65:0e:3f:4d:76:50:4f:bf:e0:8d:5d:34:99:13:37:
                    63:9e:56:15:c6:9a:4e:8e:18:3d:b2:75:2f:19:c0:
                    78:31:0d:be:72:ed:bd:af:92:4c:6d:c8:d7:a5:63:
                    52:72:ba:bb:0c:5d:b6:45:5b:67:8a:93:ac:43:31:
                    d1:d2:d2:1d:ff:fe:0e:db:ec:5e:88:58:5c:3c:c8:
                    92:f4:9b:a1:db:19:60:3e:f1:69:09:70:15:95:43:
                    83:a3:f9:16:5b:e7:93:9a:47:01:4f:13:20:8c:94:
                    8e:71:9c:3c:c5:e1:b1:d4:af:8c:0a:4c:b4:71:49:
                    5a:38:82:7c:36:f6:e8:42:08:22:9f:d2:56:9e:40:
                    9e:27:6a:4f:bb:ee:55:38:d0:94:3b:fa:0a:b1:c3:
                    64:24:96:8c:c5:91:0f:0c:8f:2b:44:95:56:d7:c8:
                    c4:71:ed:e4:36:4a:6a:b9:96:0a:2a:ac:c0:86:f1:
                    e7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C4:4F:8D:4B:AA:EF:78:BE:8B:1C:E4:BB:E4:26:28:79:A9:14:8E
            X509v3 Authority Key Identifier:
                keyid:19:9E:A4:9A:DE:0A:6B:3D:EA:97:BB:5F:6F:6F:91:01:63:32:31:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/199EA49ADE0A6B3DEA97BB5F6F6F91016332317F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199EA49ADE0A6B3DEA97BB5F6F6F91016332317F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/3137372e38352e38302e302f32312d3234203d3e20323636313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:62:9a:4c:3c:18:10:84:e6:6f:ca:f3:5e:ec:c0:6e:8c:10:
         f2:e6:58:45:8a:93:5d:2f:18:1f:2a:ce:d3:a2:1a:84:51:be:
         14:c8:df:1c:ec:9b:29:59:a2:27:c9:88:03:d5:d4:a4:fc:87:
         97:b3:84:7c:f5:cf:f9:67:6d:e8:a0:02:46:37:e4:16:df:c7:
         4b:ac:38:b0:a0:af:ae:be:31:e7:0c:1a:46:e6:8c:fd:2f:31:
         29:a1:5e:fe:b3:88:38:b2:ab:21:b4:65:15:d2:c3:3d:4b:b4:
         76:03:da:e3:38:ca:53:53:f0:4a:11:54:de:f7:14:eb:25:1b:
         ea:da:cf:0f:25:6f:c5:97:8f:ce:eb:95:bb:fa:93:e6:03:9a:
         f7:54:10:f6:e6:2a:55:f1:0f:1c:50:e3:83:da:f2:ce:fc:17:
         5b:bf:22:3c:77:e8:43:4d:6c:f2:67:be:68:71:76:8c:cf:e0:
         a0:42:5c:df:35:53:a0:ed:87:5b:ea:ff:21:4f:09:36:7b:9e:
         f6:35:cc:28:eb:14:cd:4a:96:a1:bc:44:6b:e4:98:56:e2:aa:
         ae:82:43:02:28:1b:ab:99:c9:cc:10:ab:e6:1f:49:f3:21:26:
         d6:e8:12:59:46:1e:28:4a:6c:8c:6b:36:eb:6c:48:1b:64:64:
         44:ef:6a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:06:42 2025 by rpki-client