Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e342e302f32332d3332203d3e203232333831.roa
File:                     3137372e3132362e342e302f32332d3332203d3e203232333831.roa (raw, json)
Hash identifier:          S0hNmOHYsl/05mCYcJyq+S8uX+yHEWqnLiSzaV3SX0w=
Subject key identifier:   E0:96:F4:1F:53:E9:27:20:22:74:DB:EF:35:35:4C:25:F5:66:63:60
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       72ED4C30E6F766A08BA69C4237D5D348C7F971E2
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e342e302f32332d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:09:36 +0000
ROA not before:           Fri 07 Mar 2025 19:04:36 +0000
ROA not after:            Fri 06 Mar 2026 19:09:36 +0000
asID:                     22381
IP address blocks:        177.126.4.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ed:4c:30:e6:f7:66:a0:8b:a6:9c:42:37:d5:d3:48:c7:f9:71:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:04:36 2025 GMT
            Not After : Mar  6 19:09:36 2026 GMT
        Subject: CN=E096F41F53E927202274DBEF35354C25F5666360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:5c:55:7f:d3:51:bc:b6:e3:a2:b3:af:b8:
                    f7:54:27:5a:8e:a1:4a:ff:df:41:cc:3d:f3:d5:c0:
                    18:de:45:f2:61:fb:28:e6:73:d0:68:1e:c5:fc:47:
                    c1:4d:bd:68:34:6d:3a:1c:ae:a9:33:2b:40:48:93:
                    44:a4:d1:45:c4:5b:a7:3f:29:a4:3e:9e:4c:39:34:
                    26:74:83:a2:6f:16:53:a2:c3:19:8b:0c:8b:c0:d0:
                    ca:63:c8:c0:bc:06:83:67:8a:04:b3:35:64:a5:58:
                    63:77:dc:b4:c4:33:35:f2:85:f1:d8:fa:26:f1:39:
                    b5:06:19:c0:8c:e2:45:7b:1a:fd:48:62:f8:48:d7:
                    f0:a2:6d:5a:e1:05:e0:c4:9d:f9:d9:1f:ad:fd:e5:
                    6a:bf:7c:e3:1b:4c:e8:68:1e:58:47:2a:33:d4:c4:
                    ba:50:eb:7e:46:b3:93:51:e7:22:60:ab:7f:8c:d8:
                    7a:90:82:f6:80:4b:4a:b6:58:21:a9:5a:e7:da:2f:
                    c9:18:f5:a2:c9:94:91:d1:c0:f0:b0:af:3a:e0:28:
                    1a:59:00:2d:e3:45:3d:f2:9a:3c:c6:8c:0d:52:38:
                    9d:ea:3a:64:96:72:b8:17:b2:55:23:79:38:c3:1f:
                    c6:c9:78:20:bd:f4:56:6c:87:4a:6d:c0:14:49:a7:
                    1f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:96:F4:1F:53:E9:27:20:22:74:DB:EF:35:35:4C:25:F5:66:63:60
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e342e302f32332d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e1:66:78:9a:23:4e:fb:29:d7:23:90:92:bb:d5:02:c5:d3:1e:
         5c:45:85:af:a4:bf:86:74:7c:43:6f:08:7b:53:41:dc:a4:d7:
         3e:09:79:59:38:ca:a3:81:01:47:a2:24:34:3a:c2:be:8f:84:
         e0:dd:8e:85:fa:c5:7d:75:95:c4:55:c9:ea:5a:c8:a0:6c:4a:
         47:58:23:1d:b2:0b:2e:d9:db:86:9a:69:40:17:69:9d:ec:44:
         c7:9e:db:3d:7a:ba:22:60:5c:20:08:49:51:bd:a2:f8:58:ef:
         12:1d:d3:92:93:ad:fa:16:fd:a3:89:40:88:77:e8:eb:af:4c:
         0b:ac:e2:4c:54:79:53:58:44:b9:c6:7d:52:6a:dd:6e:94:ed:
         fb:ed:79:18:73:02:46:db:36:5a:30:37:b3:4d:5e:a5:af:a6:
         a7:85:9e:fc:0e:8d:28:c0:4c:63:06:d7:1b:66:e1:51:4c:fb:
         37:55:33:6c:fd:bf:16:19:36:0c:78:40:55:0c:df:dd:07:be:
         25:0c:19:06:0e:ff:7e:04:e3:a2:c5:6a:85:51:90:c6:70:fc:
         9e:4a:00:c8:f6:e7:bd:42:71:fa:d1:77:46:8d:d5:a9:e2:83:
         f6:4c:2e:5f:21:e9:03:58:ed:a4:35:4b:e5:92:6a:e5:db:2f:
         25:8c:ec:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:20:33 2025 by rpki-client