Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fVSp1TdPasD8cqkns8b7rRhT4vk6ZyCuKcxFpvFVYvj/0/3137372e34342e3138382e302f32342d3234203d3e203533313733.roa
File:                     3137372e34342e3138382e302f32342d3234203d3e203533313733.roa (raw, json)
Hash identifier:          7vCeCj5k0cu9tkoQQuCLfSKtI535NoGEXJtTyjjmles=
Subject key identifier:   3F:88:12:1E:33:C4:15:78:F8:05:1D:FA:D8:C0:9F:55:D6:39:41:55
Certificate issuer:       /CN=6DA84A308BB4C2843AD410FF80B4472A4A8E3463
Certificate serial:       7E5E81D1C38D8010FC5C2EC26588F699326C3D9C
Authority key identifier: 6D:A8:4A:30:8B:B4:C2:84:3A:D4:10:FF:80:B4:47:2A:4A:8E:34:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DA84A308BB4C2843AD410FF80B4472A4A8E3463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fVSp1TdPasD8cqkns8b7rRhT4vk6ZyCuKcxFpvFVYvj/0/3137372e34342e3138382e302f32342d3234203d3e203533313733.roa
Signing time:             Mon 21 Nov 2022 12:47:38 +0000
ROA not before:           Mon 21 Nov 2022 12:42:38 +0000
ROA not after:            Mon 20 Nov 2023 12:47:38 +0000
asID:                     53173
IP address blocks:        177.44.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5e:81:d1:c3:8d:80:10:fc:5c:2e:c2:65:88:f6:99:32:6c:3d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA84A308BB4C2843AD410FF80B4472A4A8E3463
        Validity
            Not Before: Nov 21 12:42:38 2022 GMT
            Not After : Nov 20 12:47:38 2023 GMT
        Subject: CN=3F88121E33C41578F8051DFAD8C09F55D6394155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:c8:4b:3c:39:e4:f6:a5:54:3c:a8:b2:55:
                    5f:10:5e:40:6c:06:f1:4a:38:c7:2b:2f:c1:f6:1b:
                    57:90:cf:fa:d5:81:50:7a:4b:e7:b6:2a:36:cf:71:
                    a5:cf:89:76:f9:e3:88:d5:92:83:3f:40:a1:6a:d4:
                    8c:16:ac:66:bd:b1:d0:e1:2f:e6:c5:bb:a1:e4:14:
                    ea:64:a8:c5:db:87:f8:17:6e:b1:7b:e9:bd:64:c3:
                    67:fb:53:a5:c6:5b:07:ab:33:9b:95:59:69:5d:06:
                    86:e5:07:9d:3d:e7:e7:1c:fc:23:27:1e:a3:9d:fa:
                    ba:7b:d5:1e:18:34:c6:93:86:1d:10:dd:7b:50:c8:
                    47:fd:61:a6:82:52:be:61:2e:77:57:40:e9:d5:dd:
                    e2:00:ae:e8:cb:54:10:62:d4:7e:62:91:9a:9e:25:
                    94:4c:f5:25:fd:e3:89:6f:5a:17:6a:b7:3c:f2:2f:
                    84:48:23:0d:45:e3:f6:f4:14:f9:00:a4:db:34:6c:
                    89:77:8a:e2:d5:68:df:03:20:a7:16:44:91:19:46:
                    9b:eb:e0:01:d8:2f:04:86:5c:c7:5f:ac:a0:0f:88:
                    36:a7:32:4d:da:9c:0f:21:c2:67:03:7c:b7:05:da:
                    64:86:54:16:f7:c0:e5:1f:04:36:fb:ce:f4:03:4a:
                    c8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:88:12:1E:33:C4:15:78:F8:05:1D:FA:D8:C0:9F:55:D6:39:41:55
            X509v3 Authority Key Identifier:
                keyid:6D:A8:4A:30:8B:B4:C2:84:3A:D4:10:FF:80:B4:47:2A:4A:8E:34:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fVSp1TdPasD8cqkns8b7rRhT4vk6ZyCuKcxFpvFVYvj/0/6DA84A308BB4C2843AD410FF80B4472A4A8E3463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DA84A308BB4C2843AD410FF80B4472A4A8E3463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fVSp1TdPasD8cqkns8b7rRhT4vk6ZyCuKcxFpvFVYvj/0/3137372e34342e3138382e302f32342d3234203d3e203533313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:9d:93:43:42:1a:6d:43:76:84:87:6a:97:40:be:18:be:9a:
         1d:59:05:a0:2b:9c:a6:36:cc:c5:b5:fa:63:0f:78:10:0a:29:
         48:0c:8f:29:32:81:a3:30:66:0f:85:c5:29:39:b8:00:92:44:
         34:c5:61:dc:93:35:d4:f7:ce:e4:b3:84:5b:97:90:ad:01:3d:
         55:11:8c:d0:ee:eb:d4:36:d7:82:80:68:a9:a9:c4:48:02:b1:
         60:1a:b1:f0:ea:b3:e6:f4:a3:85:d0:41:f4:42:89:ff:e2:4f:
         a5:37:67:fe:fc:eb:24:39:3b:53:5f:ce:ef:e2:45:b7:31:7d:
         d0:55:18:65:ff:c0:0f:7d:a5:b9:7c:20:80:a6:b5:51:6e:68:
         ab:c3:73:ca:d0:91:de:53:92:6c:e1:56:44:a7:22:d2:b3:47:
         3a:1c:73:12:ce:a2:61:c9:fc:96:93:27:ad:ec:96:e0:a1:0f:
         1d:79:e4:d1:e6:21:8f:0f:c6:b9:36:7e:fb:7d:59:b3:fb:ea:
         a4:4d:01:20:0e:ae:34:5b:9c:5a:a8:d3:f7:88:05:0b:d1:50:
         58:a4:d3:21:ae:21:03:36:46:0a:27:6e:62:e1:3f:09:af:4b:
         ff:34:26:82:b7:db:c7:8d:bd:02:f8:9a:36:7f:64:74:28:ae:
         89:01:46:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:46:26 2025 by rpki-client