Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137362e302f32312d3332203d3e20323633303335.roa
File:                     3137372e32302e3137362e302f32312d3332203d3e20323633303335.roa (raw, json)
Hash identifier:          CQq54uRWk8thIOQqwEr/glsvFIlqQWq2eEufbiC4nTE=
Subject key identifier:   71:55:7A:4A:D4:D1:0D:F0:E5:1C:B7:FE:6A:BE:EF:95:0E:79:19:73
Certificate issuer:       /CN=19A733DE5B44DD36F1A86E3C044DC5036BAD7D00
Certificate serial:       1F6CB307EE43CA12B228C0E75B22EB3748A59D1D
Authority key identifier: 19:A7:33:DE:5B:44:DD:36:F1:A8:6E:3C:04:4D:C5:03:6B:AD:7D:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19A733DE5B44DD36F1A86E3C044DC5036BAD7D00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137362e302f32312d3332203d3e20323633303335.roa
Signing time:             Sat 04 Jan 2025 19:52:15 +0000
ROA not before:           Sat 04 Jan 2025 19:47:15 +0000
ROA not after:            Sat 03 Jan 2026 19:52:15 +0000
asID:                     263035
IP address blocks:        177.20.176.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6c:b3:07:ee:43:ca:12:b2:28:c0:e7:5b:22:eb:37:48:a5:9d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19A733DE5B44DD36F1A86E3C044DC5036BAD7D00
        Validity
            Not Before: Jan  4 19:47:15 2025 GMT
            Not After : Jan  3 19:52:15 2026 GMT
        Subject: CN=71557A4AD4D10DF0E51CB7FE6ABEEF950E791973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:14:4d:78:c9:c9:0c:75:78:96:b0:d1:8e:
                    e8:5d:b4:14:bb:a6:f4:8a:1a:a2:65:5c:b0:8c:d5:
                    0c:de:c0:7c:51:fb:df:2b:fb:70:15:86:11:b2:23:
                    08:52:78:6a:ed:63:ea:3d:56:e7:90:56:f6:b8:c8:
                    c9:b5:80:ae:c8:60:37:d2:e4:86:1a:4c:98:aa:df:
                    38:95:91:15:a5:cd:32:75:fe:7e:b2:05:c2:32:4f:
                    0b:fa:00:59:bf:20:7a:7b:8f:04:a9:f7:fe:6b:e1:
                    38:87:11:46:44:dc:1e:f1:d6:94:8e:c7:b7:5b:1b:
                    d5:51:b9:d3:7b:cf:e1:4f:62:b9:7d:02:09:d9:96:
                    0a:09:96:60:a5:34:a6:e2:30:a7:8a:09:c3:d6:37:
                    b6:8f:71:11:24:88:fe:e6:84:d5:df:2f:14:ad:a1:
                    d6:21:1c:9f:9e:74:db:b0:e0:2c:90:08:67:c3:a6:
                    bd:29:c6:75:d7:40:25:00:70:a5:01:60:05:10:f1:
                    16:da:f6:a6:37:f4:ed:4e:38:bc:8a:19:d0:30:f9:
                    64:8f:b7:a2:84:ee:7e:92:8a:e6:95:57:3d:8b:40:
                    cf:9d:c2:2b:48:c7:05:0b:26:f3:c5:13:89:98:58:
                    90:20:51:0a:b9:e9:b4:b8:69:54:ff:a4:f2:31:8e:
                    bc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:55:7A:4A:D4:D1:0D:F0:E5:1C:B7:FE:6A:BE:EF:95:0E:79:19:73
            X509v3 Authority Key Identifier:
                keyid:19:A7:33:DE:5B:44:DD:36:F1:A8:6E:3C:04:4D:C5:03:6B:AD:7D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/19A733DE5B44DD36F1A86E3C044DC5036BAD7D00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19A733DE5B44DD36F1A86E3C044DC5036BAD7D00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137362e302f32312d3332203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:a3:d6:04:27:be:cb:77:41:86:c8:78:8f:67:f3:a6:69:70:
         dc:5f:a2:74:51:5d:6c:25:63:ee:da:d3:f3:dc:dd:74:11:d5:
         da:f6:b5:f9:d7:57:b5:7b:4f:c8:d0:72:9e:64:d9:df:92:7a:
         0b:25:9c:1b:4e:0c:d2:5b:a5:3e:dd:cf:49:14:87:e7:91:a2:
         fb:d1:cd:ee:fe:40:12:f2:bc:67:3e:d9:7d:ce:1e:a4:18:5d:
         dc:81:fa:01:6a:09:55:e5:e8:d5:a6:10:ee:df:96:63:7b:6e:
         4c:f8:b7:3d:45:94:27:88:5f:85:d1:60:02:ba:ba:bb:6b:c9:
         ee:96:b4:be:03:d9:b9:47:99:8a:9b:3c:ba:f0:e9:7c:6b:35:
         85:42:60:67:f1:1b:f6:f8:a8:c5:58:33:8e:5d:bc:3e:74:7b:
         77:f7:d1:1a:74:fd:67:f2:a5:8d:3e:88:52:e5:9f:75:69:1a:
         70:cf:b1:fb:65:f7:06:2f:79:81:61:46:91:a5:f8:7d:ed:cf:
         05:2e:f5:6b:25:a3:dc:15:01:07:03:88:3a:55:dc:33:5e:cb:
         c0:fb:99:bb:3f:b1:50:f4:55:94:f4:eb:18:2d:78:2a:08:b9:
         f7:bb:c3:43:e6:09:f9:c3:47:f3:ac:1c:17:97:de:79:b4:89:
         79:7b:8f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:06 2025 by rpki-client