Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/1/3137372e38372e3131302e302f32342d3234203d3e203532353934.roa
File:                     3137372e38372e3131302e302f32342d3234203d3e203532353934.roa (raw, json)
Hash identifier:          uRYPNy3+Yyb/ijY+A9c15jPrTIrcahLltx+32xUNHZY=
Subject key identifier:   DA:DD:A8:7C:A5:7B:B4:15:BF:DE:33:30:89:F9:A2:FF:E0:1F:AC:B7
Certificate issuer:       /CN=DB517D31556AB7DAB8C3C0FD082EDB0CC82B18B2
Certificate serial:       2568670A912AD57B057443EF4714E499C5A9DE5F
Authority key identifier: DB:51:7D:31:55:6A:B7:DA:B8:C3:C0:FD:08:2E:DB:0C:C8:2B:18:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB517D31556AB7DAB8C3C0FD082EDB0CC82B18B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/1/3137372e38372e3131302e302f32342d3234203d3e203532353934.roa
Signing time:             Thu 06 Mar 2025 12:05:35 +0000
ROA not before:           Thu 06 Mar 2025 12:00:35 +0000
ROA not after:            Thu 05 Mar 2026 12:05:35 +0000
asID:                     52594
IP address blocks:        177.87.110.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:68:67:0a:91:2a:d5:7b:05:74:43:ef:47:14:e4:99:c5:a9:de:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB517D31556AB7DAB8C3C0FD082EDB0CC82B18B2
        Validity
            Not Before: Mar  6 12:00:35 2025 GMT
            Not After : Mar  5 12:05:35 2026 GMT
        Subject: CN=DADDA87CA57BB415BFDE333089F9A2FFE01FACB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:9e:b8:1b:18:36:a1:f8:e9:8e:9d:fd:e0:
                    39:a2:73:95:9d:72:f1:02:0f:6f:dc:7e:ff:2f:5b:
                    4e:38:fe:e4:70:13:ef:c3:4c:f4:8c:02:09:02:19:
                    25:54:85:a5:de:0c:4d:8a:cc:25:90:6c:24:37:3e:
                    c2:58:b5:e3:e8:c4:60:73:7d:90:7e:6a:0e:dc:c4:
                    60:fa:da:0c:d5:ff:a2:49:d6:27:6c:96:cf:e5:52:
                    67:a4:cd:68:4b:cc:59:0c:37:f6:ca:74:7e:26:58:
                    b3:ce:83:f1:7f:57:61:e1:0a:94:a9:ef:6e:94:f6:
                    61:27:e9:4e:2f:6c:a6:10:97:9d:4e:7d:18:7e:6a:
                    3a:57:29:65:d1:af:44:6a:e8:b8:53:d5:7a:1b:ff:
                    56:9a:ea:a8:15:48:9e:ab:e3:90:69:4a:e2:99:b9:
                    5f:7d:12:ee:57:a3:59:ab:b1:03:bf:49:f4:6f:d9:
                    79:0d:b9:fa:a8:a0:66:e5:e2:ae:e8:9c:f6:a6:58:
                    80:51:68:40:8e:75:97:15:18:31:01:4f:1c:ef:43:
                    8a:dd:9d:d6:95:de:1e:e1:e2:6e:9a:02:7b:6c:40:
                    1f:14:cc:2e:2f:ed:6a:32:3f:36:a2:8a:ee:1c:ec:
                    71:1e:35:94:37:4b:92:8d:63:ec:f1:1c:86:50:01:
                    5d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DD:A8:7C:A5:7B:B4:15:BF:DE:33:30:89:F9:A2:FF:E0:1F:AC:B7
            X509v3 Authority Key Identifier:
                keyid:DB:51:7D:31:55:6A:B7:DA:B8:C3:C0:FD:08:2E:DB:0C:C8:2B:18:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/1/DB517D31556AB7DAB8C3C0FD082EDB0CC82B18B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB517D31556AB7DAB8C3C0FD082EDB0CC82B18B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/1/3137372e38372e3131302e302f32342d3234203d3e203532353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:70:58:6a:19:c6:8e:a9:52:9b:e0:1d:af:02:91:6b:3f:48:
         34:7f:09:8b:7d:4c:6a:3a:fb:33:fc:b5:83:57:80:6d:c6:04:
         d6:fb:49:ca:3e:9e:d2:dc:f8:10:44:69:e9:73:e9:9a:05:9b:
         94:e4:8b:fa:ce:5c:da:59:03:8e:91:9c:af:0d:a4:55:03:a9:
         48:d7:d4:48:cf:70:4c:1f:f8:36:74:d6:34:a3:4a:1f:90:fa:
         37:dd:e8:97:e6:77:d8:df:4d:62:a7:7f:03:e1:ee:d8:8d:76:
         fc:37:45:89:14:fd:1e:7b:a3:f8:d0:20:af:95:3a:1d:45:30:
         17:70:d8:7f:5c:a8:5f:1f:ac:92:b8:46:c1:49:c0:8d:46:64:
         c1:7d:bc:18:91:63:58:39:98:c0:7e:4b:d9:76:a2:ad:c2:99:
         ff:5d:18:f4:58:fd:ac:88:2e:e4:f2:87:91:c5:1b:27:d4:73:
         00:68:98:4c:5e:64:15:8f:9f:f7:39:59:5b:28:e1:e5:05:f7:
         c4:41:14:03:3c:61:f9:6b:93:c3:f4:03:1b:76:e0:2f:f3:09:
         7e:f2:67:20:e7:fe:05:e9:7d:f3:93:7b:f0:3d:82:be:27:c0:
         a5:6b:15:88:5b:a1:91:cd:7e:93:87:1b:15:5f:09:67:0f:9f:
         02:2e:0b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:01:30 2025 by rpki-client