Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138392e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3138392e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          Osi1WF2jdwT5WD9anQJ4k0ggB8DWwynlAPx4WMAZ3Tw=
Subject key identifier:   4C:17:01:03:91:A9:CE:0D:4A:C5:02:6F:9A:66:70:5B:E0:93:9E:90
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       60CC2C7BD378A275E596FD0283676DA329FD2A62
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138392e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 02 Dec 2024 04:42:35 +0000
ROA not before:           Mon 02 Dec 2024 04:37:35 +0000
ROA not after:            Mon 01 Dec 2025 04:42:35 +0000
asID:                     53038
IP address blocks:        177.154.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:cc:2c:7b:d3:78:a2:75:e5:96:fd:02:83:67:6d:a3:29:fd:2a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Dec  2 04:37:35 2024 GMT
            Not After : Dec  1 04:42:35 2025 GMT
        Subject: CN=4C17010391A9CE0D4AC5026F9A66705BE0939E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:9b:1f:a5:f8:13:3c:59:9e:8a:8f:f5:34:
                    51:c3:53:49:37:a4:d1:f5:4a:50:93:f0:d8:db:36:
                    49:91:93:9b:81:51:7a:bf:6a:1c:ac:6a:d3:a0:26:
                    82:9f:56:d8:50:85:77:46:9c:fb:8a:bd:09:51:de:
                    0c:dc:57:40:8e:a9:d4:a9:1e:08:af:49:b0:d9:66:
                    de:4e:0a:39:14:be:e2:dd:21:76:64:7d:79:62:5a:
                    1e:d9:8e:3b:b6:6e:e5:df:e8:68:63:69:fc:c5:21:
                    74:60:a6:e4:e9:00:90:45:a6:57:93:9c:09:d9:5e:
                    81:94:1a:67:82:fc:ac:d0:64:3d:7d:21:c4:fa:11:
                    4b:27:b4:9f:53:1b:19:ef:80:82:e0:1b:47:f9:6c:
                    7c:fb:b3:e6:d1:35:2d:fd:7f:2d:eb:58:f1:34:b1:
                    f7:08:85:65:45:0a:49:bd:5e:30:32:29:17:14:ad:
                    a9:45:40:05:aa:9f:b2:e2:4a:d9:46:a7:88:d0:ee:
                    cf:b5:43:95:8b:16:11:5a:24:b7:18:ea:18:6a:a5:
                    59:3e:c9:c6:92:01:89:59:62:79:cc:7a:a6:fd:fe:
                    5f:a6:96:38:f6:0a:4b:65:59:fb:65:d9:f5:ec:0d:
                    1e:c2:6d:0e:2b:e5:28:0e:1e:fc:ce:69:15:fc:d1:
                    1b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:17:01:03:91:A9:CE:0D:4A:C5:02:6F:9A:66:70:5B:E0:93:9E:90
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138392e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:e2:e4:a1:d4:d9:23:27:2c:5f:33:9c:0a:74:a2:70:85:17:
         d7:41:e4:19:5f:fa:a9:92:00:9b:ef:f0:b2:87:5e:0a:c0:81:
         49:94:38:ae:60:3d:30:aa:77:89:d0:78:77:69:05:0c:68:9c:
         67:92:ff:18:16:7f:cb:b8:2a:a2:d2:63:11:ca:65:17:ca:6a:
         77:4c:a8:dc:bd:45:0a:c2:05:78:6e:3c:f3:13:24:9f:e1:a9:
         63:1c:95:f8:b6:14:1a:fe:7f:12:64:30:d6:0d:fa:d0:9c:3b:
         fa:7f:c0:41:d0:05:0e:84:2b:78:85:e0:3b:7e:f5:61:fa:b9:
         16:86:29:d6:48:86:5f:cd:19:4c:74:35:3b:d0:91:c7:19:db:
         37:28:5e:50:c7:e1:08:53:04:67:e5:49:c3:ff:33:b6:cf:ab:
         55:31:44:55:ce:f0:8e:9e:5f:e6:15:ca:75:76:64:c3:db:b0:
         b7:97:08:3e:2a:3e:c6:32:c9:9c:7f:0e:b8:51:e7:03:38:e7:
         ab:52:50:4d:8e:3e:a9:a4:c0:64:12:24:82:6a:9d:09:38:2d:
         21:e0:55:67:86:6e:13:9e:dc:f2:08:81:8e:f3:1e:87:72:06:
         82:26:ae:66:32:3d:97:69:9c:2f:07:d5:14:d0:80:b4:07:87:
         09:71:c7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:16:15 2025 by rpki-client