Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3137372e31322e3132322e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3132322e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          FPOIK0HoDwaAUy65NC3MdxlbC9Je6s9SlFjedqzplPg=
Subject key identifier:   19:A7:A3:8E:84:30:49:65:16:C5:EB:26:CB:B9:5F:BB:02:6E:66:95
Certificate issuer:       /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
Certificate serial:       1C4D23F40108DC0B2332A6878CAD02D082945D92
Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3137372e31322e3132322e302f32342d3234203d3e203533313138.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     53118
IP address blocks:        177.12.122.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4d:23:f4:01:08:dc:0b:23:32:a6:87:8c:ad:02:d0:82:94:5d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject: CN=19A7A38E8430496516C5EB26CBB95FBB026E6695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:5f:10:6e:71:00:1d:96:d8:61:88:42:c9:
                    2d:73:ed:19:c4:2b:6b:f9:41:bb:8b:dc:e0:b4:f7:
                    95:95:ab:81:d0:83:3c:f0:58:a8:fd:57:6a:29:8d:
                    7f:71:fb:11:ac:00:8f:81:01:78:21:ae:c6:99:7e:
                    36:3e:7b:17:02:ad:20:62:f7:48:11:22:e3:88:2a:
                    10:6f:02:67:f9:bd:8b:bc:a9:f9:1e:ec:c5:02:a8:
                    e3:1f:02:a9:06:dd:3c:7e:18:e8:8c:69:f9:ae:21:
                    62:f9:de:fd:16:19:db:d5:23:26:b7:2e:3a:e6:ef:
                    2c:0a:7a:a3:da:cc:80:d7:5d:97:79:e0:f3:87:a1:
                    b7:a2:98:ae:10:d4:7d:1f:50:b6:3b:79:b4:17:49:
                    b7:8a:6a:09:69:1a:ba:ca:12:81:23:69:ca:6c:eb:
                    96:d7:09:1a:2a:49:39:cc:69:55:28:04:d8:93:72:
                    b0:cf:e4:a9:23:a2:79:9d:66:9b:b1:04:84:55:f0:
                    65:c0:b9:45:bc:f8:ec:75:3b:d4:bd:57:bd:17:cd:
                    be:b3:55:3a:93:b6:b2:65:02:96:23:42:4e:95:bc:
                    10:2a:7d:09:02:00:5e:71:1a:75:a1:7d:3e:42:7f:
                    e2:bf:de:17:61:2c:8f:49:f3:a8:5c:35:01:9f:c4:
                    80:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A7:A3:8E:84:30:49:65:16:C5:EB:26:CB:B9:5F:BB:02:6E:66:95
            X509v3 Authority Key Identifier:
                keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3137372e31322e3132322e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c7:dc:8c:84:30:52:5e:02:8f:82:45:37:d3:b3:e4:10:ba:
         4a:80:45:a5:15:6e:dd:9b:37:bb:96:9f:e3:6f:59:32:b0:5b:
         d6:dc:97:2a:5f:ae:87:16:1f:e1:c1:33:c9:6f:75:a6:60:38:
         81:34:b9:4d:1c:27:2f:6f:df:05:f1:9a:34:fd:ec:ad:08:1e:
         43:eb:42:94:a3:1b:7c:be:81:13:32:90:2e:ee:87:32:2b:be:
         5a:af:59:4f:4f:fb:0f:88:11:7b:64:43:47:79:05:60:3a:0f:
         12:66:3d:f7:47:d3:14:91:71:a3:1c:d8:69:a3:ec:6f:50:1e:
         f2:1d:cc:ba:ca:15:51:72:b1:5f:7b:69:67:e9:21:b9:58:17:
         63:9b:31:84:b1:99:c0:60:93:16:70:1c:98:2d:51:ec:1c:aa:
         2e:de:46:43:85:32:4c:65:45:85:ca:f2:69:cf:fd:c5:de:de:
         70:01:3a:45:91:5d:ed:b6:b6:da:9e:d2:1a:bc:3b:51:ba:8b:
         d6:43:47:7b:93:63:87:0f:07:6a:8c:2d:17:d6:e4:d5:bf:d6:
         cb:f0:34:b8:dc:f8:b9:71:3f:28:f1:31:b8:5d:66:5f:a3:d2:
         13:e3:7f:60:ee:ad:34:47:2c:fa:2d:a5:36:ce:c8:33:c7:89:
         bc:67:ce:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:29:29 2025 by rpki-client