Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91j5J95979s5xU8jP4R7TnpdWCVDGQCGp2LsmRctd3Wm/0/3137372e3132392e3133332e302f32342d3234203d3e203532383734.roa
File:                     3137372e3132392e3133332e302f32342d3234203d3e203532383734.roa (raw, json)
Hash identifier:          i2OynnxAZ2so+EE97xk7lYqzVMC56LB4GrRreQxqesY=
Subject key identifier:   BE:A9:68:D5:A2:39:41:E3:8B:85:7C:68:F4:9B:3F:CB:00:04:8A:54
Certificate issuer:       /CN=C0E4B86669A9223FD6ED3FEC0E2DE5905F97C324
Certificate serial:       53D69DE246AD4251BFE734F7B0442B2C9D0C85A3
Authority key identifier: C0:E4:B8:66:69:A9:22:3F:D6:ED:3F:EC:0E:2D:E5:90:5F:97:C3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0E4B86669A9223FD6ED3FEC0E2DE5905F97C324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91j5J95979s5xU8jP4R7TnpdWCVDGQCGp2LsmRctd3Wm/0/3137372e3132392e3133332e302f32342d3234203d3e203532383734.roa
Signing time:             Mon 12 Sep 2022 21:08:16 +0000
ROA not before:           Mon 12 Sep 2022 21:03:16 +0000
ROA not after:            Mon 11 Sep 2023 21:08:16 +0000
asID:                     52874
IP address blocks:        177.129.133.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d6:9d:e2:46:ad:42:51:bf:e7:34:f7:b0:44:2b:2c:9d:0c:85:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0E4B86669A9223FD6ED3FEC0E2DE5905F97C324
        Validity
            Not Before: Sep 12 21:03:16 2022 GMT
            Not After : Sep 11 21:08:16 2023 GMT
        Subject: CN=BEA968D5A23941E38B857C68F49B3FCB00048A54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:65:70:66:c3:d6:2b:e8:f1:6d:4d:8d:2a:
                    9c:13:af:0f:bb:97:58:da:c0:1c:d8:e0:35:41:0d:
                    09:76:12:34:c1:29:4c:07:26:13:07:39:30:cf:76:
                    a5:39:b2:0e:74:78:8b:72:5b:eb:e1:76:48:03:15:
                    f8:f6:7e:25:6c:5e:77:4e:b2:fa:f2:b5:f5:fe:45:
                    11:17:97:d9:35:e6:3d:39:29:1b:d1:0c:67:7d:a8:
                    57:c0:88:72:c1:7f:f2:ee:97:23:e4:6a:4c:ab:40:
                    ab:9c:6c:aa:6c:59:74:be:6c:3f:7f:4b:41:ca:7d:
                    0d:0d:90:1f:f6:19:42:8a:c1:94:e8:d6:85:60:56:
                    bf:8f:bb:ab:4a:70:9a:e3:1f:14:b3:19:6e:b3:6c:
                    71:f1:35:5e:22:41:24:56:53:7d:c7:a2:bd:25:44:
                    ee:c5:2b:30:43:a2:d2:8d:b0:e6:da:a8:fa:ab:45:
                    e4:0e:29:53:be:45:f7:60:f7:45:26:b2:47:4a:91:
                    6b:ee:9c:96:a8:ce:bc:af:01:95:1f:28:ac:f4:78:
                    3d:8e:aa:ef:2e:b0:09:ee:84:29:da:0c:a1:18:a9:
                    b6:9f:bc:35:ce:c5:72:e6:23:ed:7e:0b:ac:4f:cf:
                    4a:86:aa:d6:15:c0:e0:1e:53:73:29:78:c1:bf:92:
                    ec:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A9:68:D5:A2:39:41:E3:8B:85:7C:68:F4:9B:3F:CB:00:04:8A:54
            X509v3 Authority Key Identifier:
                keyid:C0:E4:B8:66:69:A9:22:3F:D6:ED:3F:EC:0E:2D:E5:90:5F:97:C3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91j5J95979s5xU8jP4R7TnpdWCVDGQCGp2LsmRctd3Wm/0/C0E4B86669A9223FD6ED3FEC0E2DE5905F97C324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0E4B86669A9223FD6ED3FEC0E2DE5905F97C324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91j5J95979s5xU8jP4R7TnpdWCVDGQCGp2LsmRctd3Wm/0/3137372e3132392e3133332e302f32342d3234203d3e203532383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:b7:2c:4e:db:31:ea:11:bb:61:65:c4:6b:0c:dc:f8:01:92:
         71:c1:03:82:ed:5c:71:70:e6:a3:3c:1d:ab:b2:7f:1e:90:33:
         53:55:0b:ed:83:db:ac:22:d6:09:70:6b:c5:6a:6e:ec:4c:30:
         48:e9:fa:03:c3:55:38:a9:ba:a9:c5:58:7e:8a:2f:24:91:70:
         e9:8b:21:5f:29:bc:55:cd:fa:af:1f:16:39:99:32:6a:84:b2:
         44:a1:b3:2c:41:60:47:7d:25:72:f4:6a:6a:0b:f8:0d:97:82:
         78:3d:61:81:b0:58:01:e2:cd:a5:0e:4b:06:84:e7:a0:43:d5:
         f4:b4:31:b7:a2:87:dd:99:83:32:72:63:d4:70:48:8c:a9:57:
         36:71:d7:d9:e5:f1:f3:29:fd:8d:11:2a:cc:ba:98:4a:fd:bc:
         6d:2f:62:ab:99:20:f6:1a:77:c7:a9:27:54:b1:02:9b:4a:18:
         ec:de:81:bd:dc:12:31:cd:8c:ed:25:5b:69:e5:98:a5:b9:53:
         88:f6:03:c7:fe:0c:bc:a1:92:7c:9d:04:f1:ce:db:7c:db:6f:
         20:e3:e0:84:ce:e8:87:e4:25:f9:f2:ba:bb:ba:c1:cf:6a:4e:
         26:44:36:1d:2f:50:00:37:bc:c3:b5:40:78:ca:e7:16:5f:4f:
         10:e6:2e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:26:20 2025 by rpki-client