Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e36372e3137332e302f32342d3234203d3e203532393137.roa
File:                     3137372e36372e3137332e302f32342d3234203d3e203532393137.roa (raw, json)
Hash identifier:          qXyzhBww2A4IKQy2fo0l5Jrizr7OV9NrQwswviCFYf8=
Subject key identifier:   99:42:3E:F5:4C:A5:B7:22:A9:08:E9:0D:7D:AD:3F:8A:FF:EA:92:D9
Certificate issuer:       /CN=B7A705195705FFE3E5D81D77F8400BE2AF3809EE
Certificate serial:       2F431D2BBB1700684C088D29A3A67E99969A259A
Authority key identifier: B7:A7:05:19:57:05:FF:E3:E5:D8:1D:77:F8:40:0B:E2:AF:38:09:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e36372e3137332e302f32342d3234203d3e203532393137.roa
Signing time:             Fri 10 Mar 2023 13:20:43 +0000
ROA not before:           Fri 10 Mar 2023 13:15:43 +0000
ROA not after:            Fri 08 Mar 2024 13:20:43 +0000
asID:                     52917
IP address blocks:        177.67.173.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:43:1d:2b:bb:17:00:68:4c:08:8d:29:a3:a6:7e:99:96:9a:25:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A705195705FFE3E5D81D77F8400BE2AF3809EE
        Validity
            Not Before: Mar 10 13:15:43 2023 GMT
            Not After : Mar  8 13:20:43 2024 GMT
        Subject: CN=99423EF54CA5B722A908E90D7DAD3F8AFFEA92D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:e3:e7:0f:db:b3:f9:34:03:bb:69:91:79:
                    86:9b:3f:6c:e7:50:87:de:d5:f3:5f:e1:70:a9:88:
                    b3:a4:ee:f3:82:7c:f3:d3:d5:63:73:3f:12:e6:52:
                    2d:4d:6b:29:6a:b5:ee:21:cc:92:75:6c:b6:fd:1f:
                    62:e5:e5:6a:8b:35:85:13:e7:4e:7a:cf:f2:a6:df:
                    94:a7:61:7f:c4:63:8b:3f:bf:68:df:1f:61:56:4a:
                    11:94:ed:34:e6:56:81:3a:51:bf:27:8c:5c:ef:4f:
                    3d:c1:83:7f:df:84:0b:62:71:16:bd:03:18:89:d6:
                    32:dc:b9:d4:ca:de:88:eb:12:bc:98:5f:50:00:5a:
                    1e:4e:c7:ba:50:7d:46:5f:fd:fe:96:e1:9e:be:71:
                    38:aa:9c:3f:f8:c8:8a:d4:c4:bf:4c:9e:90:8c:aa:
                    05:5e:6c:7d:d9:39:f4:fb:1d:d2:71:e0:02:0c:8e:
                    1e:43:74:0e:69:4a:75:be:ed:f6:ec:fb:80:78:3a:
                    8d:a5:31:d5:9c:16:f3:c7:7e:c7:88:35:88:dd:16:
                    37:4c:0e:6f:9c:1b:78:3b:a9:bc:5d:74:f0:a3:6a:
                    2f:07:24:bd:da:61:d8:a0:2f:21:46:1b:af:5b:4c:
                    d7:26:f7:ff:aa:11:3b:c6:44:92:54:55:99:c1:e7:
                    b1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:42:3E:F5:4C:A5:B7:22:A9:08:E9:0D:7D:AD:3F:8A:FF:EA:92:D9
            X509v3 Authority Key Identifier:
                keyid:B7:A7:05:19:57:05:FF:E3:E5:D8:1D:77:F8:40:0B:E2:AF:38:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e36372e3137332e302f32342d3234203d3e203532393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:4b:5c:34:8f:6c:3a:81:7c:10:cb:6f:35:49:a2:ea:3a:51:
         ed:f0:24:12:31:e7:96:ab:8c:0b:4f:df:f6:22:e2:c6:bd:e3:
         96:2d:d8:e0:a6:14:8f:8c:fd:7d:d2:19:bc:b7:79:48:4e:1e:
         ff:6d:68:f2:b1:30:2a:35:64:11:63:72:36:ad:01:c1:d8:97:
         82:fb:f2:8c:2c:b9:20:3a:9f:5a:ac:0f:09:3e:c2:b1:84:78:
         e9:fa:7b:93:46:13:8e:ae:db:b5:f8:42:38:a1:43:50:b3:26:
         2d:ff:83:29:d7:fe:bb:4b:2f:78:03:c4:f9:c8:c7:c1:2f:4a:
         44:be:d1:d6:32:97:e3:ca:1c:6f:dc:77:14:d4:fc:9e:11:f6:
         48:f1:ec:d4:bc:1d:51:db:a2:eb:e1:2c:13:d0:3a:ab:c6:ae:
         ae:9e:68:a1:2a:4b:90:b5:ef:0f:ce:6b:e1:a7:82:d0:4f:4d:
         c3:3a:3b:54:15:fb:e4:88:04:49:46:31:94:22:d6:e1:00:1b:
         ae:4a:18:88:fb:d9:75:32:fa:60:e8:fc:6f:f1:24:0e:bb:4a:
         b1:cc:05:c8:80:b1:e6:d8:24:df:18:25:a3:d2:48:1f:14:0a:
         39:b4:2b:67:9b:80:14:8b:a4:4b:7d:c2:26:31:e4:8b:e8:88:
         51:ca:ea:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:38 2025 by rpki-client