Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e33382e32342e302f32322d3234203d3e20323632393038.roa
File:                     3137372e33382e32342e302f32322d3234203d3e20323632393038.roa (raw, json)
Hash identifier:          dGUuPMBAaOXlYlzrmpRc8TAZ4SZ3d8aZsmWcWxA6jcY=
Subject key identifier:   2D:13:9B:F1:30:53:6C:18:F4:29:AD:9A:57:00:53:76:86:95:B0:95
Certificate issuer:       /CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
Certificate serial:       1C540DDC8B75FF6BC84F270FEC4F04FF63215C4A
Authority key identifier: B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e33382e32342e302f32322d3234203d3e20323632393038.roa
Signing time:             Tue 04 Feb 2025 18:25:52 +0000
ROA not before:           Tue 04 Feb 2025 18:20:52 +0000
ROA not after:            Tue 03 Feb 2026 18:25:52 +0000
asID:                     262908
IP address blocks:        177.38.24.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:54:0d:dc:8b:75:ff:6b:c8:4f:27:0f:ec:4f:04:ff:63:21:5c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
        Validity
            Not Before: Feb  4 18:20:52 2025 GMT
            Not After : Feb  3 18:25:52 2026 GMT
        Subject: CN=2D139BF130536C18F429AD9A570053768695B095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:d9:e1:20:d9:09:45:e1:80:60:68:ff:0e:
                    67:e9:04:05:e9:25:37:b2:dd:93:82:5c:f7:b8:25:
                    26:60:dd:3c:a7:5b:a2:08:cf:8e:78:b8:28:ee:49:
                    9c:60:67:82:10:12:e4:fd:e0:de:0d:4e:49:04:b4:
                    57:7a:a3:00:1d:74:7f:35:cc:43:7b:39:bb:d6:20:
                    27:c1:dd:34:21:77:af:f9:ce:d7:ed:4c:03:b2:84:
                    6d:07:49:55:13:b4:79:78:aa:49:8e:7e:ac:25:28:
                    60:ae:2e:69:e5:c9:2c:6e:00:ea:43:0f:74:f7:6d:
                    c8:e8:e3:59:b5:f9:59:7b:d0:2f:2a:df:69:a1:07:
                    56:57:cc:b6:22:31:78:b3:65:77:20:04:58:62:83:
                    19:e4:9e:c0:de:80:18:4d:7f:cc:92:fb:89:2b:fb:
                    23:c9:b5:f4:40:f9:d1:2a:9a:3f:23:c8:bb:7d:51:
                    d4:40:40:f2:9c:50:36:b4:c2:09:09:6f:e5:33:b6:
                    70:49:23:3c:21:37:1e:cd:99:85:8f:6c:cc:cf:c2:
                    d8:fb:a0:f0:7c:b8:ae:7d:da:fa:05:fd:43:20:78:
                    9e:7f:d7:e1:59:5d:fd:6f:92:a3:e7:fc:50:a2:99:
                    c4:76:1f:96:e6:c9:6e:4a:95:0d:18:94:e5:37:55:
                    2c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:13:9B:F1:30:53:6C:18:F4:29:AD:9A:57:00:53:76:86:95:B0:95
            X509v3 Authority Key Identifier:
                keyid:B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e33382e32342e302f32322d3234203d3e20323632393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:6b:67:54:6b:d4:f1:87:77:db:8d:34:52:ec:85:35:d5:77:
         c8:4b:d6:e3:35:b1:f3:a1:7f:ae:ab:a9:2a:50:8a:04:d4:3b:
         10:87:de:f3:d7:fc:77:2e:ce:61:6c:1f:2f:9e:b0:e8:bf:76:
         fd:30:85:8e:e5:05:f7:8e:5b:44:50:16:aa:c3:18:69:78:05:
         7c:10:5a:86:68:36:1f:fe:a7:02:da:67:6a:cd:dd:5a:ad:17:
         4c:a8:cc:44:2a:27:d5:54:4d:02:f3:3e:ba:67:40:ba:58:ef:
         40:54:42:af:1e:64:b5:59:8c:f0:74:94:ad:c1:82:da:73:9c:
         7d:13:0a:5c:bf:a9:a2:7b:e0:0f:5b:b2:ad:db:fd:aa:a0:64:
         b8:84:d5:b3:85:8d:ba:4b:e7:8a:2a:4d:4e:e0:e4:ac:00:21:
         ef:0f:a0:39:de:65:6c:95:f5:02:7a:d4:75:75:9a:fb:7e:5b:
         e3:06:0e:9e:f9:69:a9:3f:3b:3c:75:2a:58:42:02:c3:fd:ef:
         1e:4e:08:36:3f:a5:19:f5:a9:7b:7e:6d:48:dc:5d:a1:e9:8d:
         06:ef:32:8f:75:ff:9c:1e:37:49:3f:75:b2:b8:74:06:07:6c:
         f0:3e:18:b4:5a:c5:0f:7a:c6:ef:29:ed:b2:f6:2e:9c:21:4e:
         e3:41:63:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:23:49 2025 by rpki-client