Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e37362e302f32322d3232203d3e20323632333338.roa
File:                     3137372e3132362e37362e302f32322d3232203d3e20323632333338.roa (raw, json)
Hash identifier:          iXK8iDEDyruQe11wuZaXH44tBYiGXd2JXpLpfhDkQWQ=
Subject key identifier:   61:89:31:84:18:75:E4:F6:5C:B6:E7:8C:B0:D3:57:61:25:A8:16:77
Certificate issuer:       /CN=2F2EEA78F2A61B130D9274580167C650F0352C20
Certificate serial:       15A5F089CA5C1473DCF42F95BE4657E808343803
Authority key identifier: 2F:2E:EA:78:F2:A6:1B:13:0D:92:74:58:01:67:C6:50:F0:35:2C:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F2EEA78F2A61B130D9274580167C650F0352C20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e37362e302f32322d3232203d3e20323632333338.roa
Signing time:             Tue 16 Apr 2024 12:20:11 +0000
ROA not before:           Tue 16 Apr 2024 12:15:11 +0000
ROA not after:            Tue 15 Apr 2025 12:20:11 +0000
asID:                     262338
IP address blocks:        177.126.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a5:f0:89:ca:5c:14:73:dc:f4:2f:95:be:46:57:e8:08:34:38:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2EEA78F2A61B130D9274580167C650F0352C20
        Validity
            Not Before: Apr 16 12:15:11 2024 GMT
            Not After : Apr 15 12:20:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f7:96:e4:90:09:a9:8f:36:bd:ce:97:78:68:
                    44:c2:a8:7a:ef:9d:06:fc:0f:3a:e1:28:21:22:c8:
                    f9:87:82:a1:68:8a:f6:b7:a5:3b:9b:f6:2e:10:55:
                    5a:d9:54:b7:c2:f1:67:63:da:de:08:47:38:63:29:
                    6c:c7:75:7f:7c:84:7a:7e:8d:d5:c7:46:e3:30:c3:
                    13:de:b9:db:38:2b:a6:f5:ab:02:f3:86:06:27:2f:
                    61:b6:a5:c4:9d:3b:fa:76:a3:13:a0:c0:5c:b2:d0:
                    cd:22:3c:21:00:1b:de:12:1b:a9:48:e5:f7:34:9b:
                    6c:d9:ff:6b:28:ed:46:94:f2:68:ad:8e:15:a9:c7:
                    ab:30:20:bc:03:ce:8e:c9:78:47:3a:c2:1c:53:e9:
                    bc:cc:95:24:59:64:cb:44:d7:16:29:65:82:0a:13:
                    94:c0:23:93:f1:50:85:ad:a5:e0:76:7c:ab:35:8f:
                    fe:95:1b:59:8a:19:22:7b:0d:c5:2b:a0:d2:9b:79:
                    86:00:01:de:cc:54:18:27:0a:ab:c2:e2:43:6c:8a:
                    49:4b:7f:cf:31:55:cd:35:c1:78:8b:97:19:00:36:
                    9a:03:ed:af:6a:2b:09:98:2c:17:de:27:cf:eb:c9:
                    67:78:65:78:b3:ed:de:50:78:cd:92:3c:f6:b5:57:
                    9a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:89:31:84:18:75:E4:F6:5C:B6:E7:8C:B0:D3:57:61:25:A8:16:77
            X509v3 Authority Key Identifier:
                keyid:2F:2E:EA:78:F2:A6:1B:13:0D:92:74:58:01:67:C6:50:F0:35:2C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/2F2EEA78F2A61B130D9274580167C650F0352C20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F2EEA78F2A61B130D9274580167C650F0352C20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e37362e302f32322d3232203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:36:20:0d:29:a5:9d:79:80:25:7c:b0:27:91:4f:af:1b:6f:
         6d:5a:b1:77:38:54:43:ec:b0:fc:4e:bb:5e:66:eb:8c:94:8f:
         6c:8c:f2:a3:2d:a1:ce:b6:af:23:6e:62:fd:08:72:c9:f7:1a:
         04:d9:18:93:ac:9a:0d:a3:77:c7:d1:c7:d3:05:0f:53:da:7e:
         81:b1:f4:87:d8:8d:52:32:05:da:8b:e1:4b:9e:fb:c9:a5:83:
         c8:de:3c:32:fc:d4:10:33:ee:50:bc:39:00:81:8c:82:0c:9e:
         2e:d6:49:6d:bb:d0:c0:99:c0:94:ae:4e:d8:da:e6:00:d3:3d:
         c5:25:4e:c1:6f:31:50:0f:0b:e6:df:ff:24:31:ba:ec:f9:b8:
         b9:03:57:e5:48:2d:35:0a:43:93:10:12:4a:23:6c:ff:db:1d:
         55:8c:62:15:ca:a4:78:63:32:55:f8:06:3c:9c:b4:7f:b5:6e:
         b6:0f:84:36:ba:04:f3:4f:4b:50:b0:21:fe:46:dc:ce:36:1d:
         11:c6:db:1d:b5:9b:d6:61:7b:3b:7d:24:5b:39:32:f5:f2:2f:
         dd:ec:bd:87:89:3d:73:49:2b:ec:87:05:82:b0:af:b0:7e:c6:
         ee:d1:5e:91:61:e6:8a:ba:16:4f:f8:0c:de:c3:3a:4b:6e:37:
         46:d5:9b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:41:30 2025 by rpki-client