Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3137372e382e3232342e302f32302d3234203d3e203238313836.roa
File:                     3137372e382e3232342e302f32302d3234203d3e203238313836.roa (raw, json)
Hash identifier:          YJOeUHqgkSpKSiyodD56dutt4Z7xa3LHCOqvbKN10Oc=
Subject key identifier:   3F:10:C4:92:6A:6C:86:30:FD:F3:2F:E0:9F:A5:B7:97:2F:2A:87:87
Certificate issuer:       /CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
Certificate serial:       314388A64DA5B1364910214D9EAFF6085F63F5D7
Authority key identifier: 2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3137372e382e3232342e302f32302d3234203d3e203238313836.roa
Signing time:             Wed 05 Mar 2025 23:13:26 +0000
ROA not before:           Wed 05 Mar 2025 23:08:26 +0000
ROA not after:            Wed 04 Mar 2026 23:13:26 +0000
asID:                     28186
IP address blocks:        177.8.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:43:88:a6:4d:a5:b1:36:49:10:21:4d:9e:af:f6:08:5f:63:f5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
        Validity
            Not Before: Mar  5 23:08:26 2025 GMT
            Not After : Mar  4 23:13:26 2026 GMT
        Subject: CN=3F10C4926A6C8630FDF32FE09FA5B7972F2A8787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:8d:c6:52:9f:15:0e:6b:6b:7d:c6:01:43:
                    82:64:5f:7b:ad:b4:ef:99:3a:63:0c:24:45:4f:c1:
                    5f:7b:bb:8c:d5:d3:25:a0:6b:6f:f2:45:4c:ef:4d:
                    df:12:47:8f:41:f1:25:4d:ea:79:ba:df:4a:a5:bc:
                    d4:aa:57:c8:97:23:84:b9:ed:cf:5a:39:02:73:2d:
                    7e:d4:56:a7:7c:a3:18:52:97:be:56:fe:e4:6c:86:
                    db:b1:c9:4f:e3:b8:a7:ed:ae:a5:bc:b0:7a:5b:59:
                    fb:91:ec:c1:ee:5a:f9:24:61:60:5e:ba:de:26:16:
                    4d:ce:6b:49:20:31:fe:43:8f:67:58:93:6b:ef:b0:
                    22:ac:64:79:af:bc:07:75:f9:ee:1d:07:33:d1:4e:
                    6f:d3:8e:d0:15:03:0b:ea:28:66:c3:0e:95:7f:5a:
                    0d:ef:25:61:d8:cc:f6:04:f9:4d:4d:5f:c1:42:5d:
                    1d:74:c5:58:a2:1d:ab:cb:de:fb:a1:64:d6:72:f2:
                    bd:d9:f7:e6:a1:1d:29:a4:28:de:f4:d2:15:7a:dd:
                    91:f6:fc:2d:0a:62:1c:49:15:a7:64:25:ae:c4:21:
                    7c:4f:d7:64:70:68:90:a8:93:19:16:7e:f6:c8:00:
                    87:3c:06:f3:d2:60:14:d5:06:9a:ce:50:64:88:17:
                    70:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:10:C4:92:6A:6C:86:30:FD:F3:2F:E0:9F:A5:B7:97:2F:2A:87:87
            X509v3 Authority Key Identifier:
                keyid:2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3137372e382e3232342e302f32302d3234203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c8:ed:c0:aa:8f:14:33:57:ac:31:d6:63:a2:2c:0c:7a:07:a1:
         f6:48:1d:a0:c8:49:df:ee:fe:85:76:1e:3f:23:20:1f:05:41:
         c9:55:43:10:86:d2:e7:54:b9:e0:5d:dd:f2:29:ca:ee:91:4c:
         3f:fb:5f:0c:ec:75:63:2f:5b:4f:02:5b:6f:7f:ae:0d:37:75:
         37:f9:58:39:04:2b:73:40:a9:4c:e1:03:39:fc:1e:54:d0:b3:
         86:74:56:2f:30:98:49:98:04:b9:de:16:36:79:3e:89:3b:df:
         ad:ea:1b:7e:c3:cd:c4:29:35:f1:3d:9c:04:8e:d4:a6:de:c2:
         6e:64:09:f9:f4:0f:cc:cf:73:c2:1c:fb:60:91:19:e6:da:7d:
         7a:f3:84:57:b3:9e:a0:ae:64:da:5b:c9:4b:30:43:df:83:27:
         9a:01:c9:8f:9c:b9:6e:01:ec:27:cf:7c:7c:e0:b4:fd:7b:12:
         3a:e8:ad:c5:22:fc:20:89:98:e9:55:a1:f7:61:f3:2e:33:ed:
         43:02:51:ae:20:99:a3:17:ea:d9:8f:5f:78:3d:81:6b:0b:5e:
         a3:3b:d6:bb:f1:5d:f7:3d:a7:ae:b4:95:34:08:79:95:28:6a:
         ba:0f:92:45:ec:d8:c2:14:47:91:45:a9:a7:59:7c:12:50:a2:
         14:61:c5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:27:39 2025 by rpki-client