Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e37302e3139322e302f32302d3234203d3e203238333539.roa
File:                     3137372e37302e3139322e302f32302d3234203d3e203238333539.roa (raw, json)
Hash identifier:          ZSKkeS4N9za1P4mVLTJWbOZg1ecCn0Ecs+5bRdnaLFI=
Subject key identifier:   40:2F:BF:8E:96:6F:7C:90:3E:DD:15:B4:96:06:8C:3E:B7:90:38:8F
Certificate issuer:       /CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
Certificate serial:       5FDA68110D283CA843AC7FF70BE479017006B444
Authority key identifier: 7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e37302e3139322e302f32302d3234203d3e203238333539.roa
Signing time:             Fri 09 Aug 2024 17:19:41 +0000
ROA not before:           Fri 09 Aug 2024 17:14:41 +0000
ROA not after:            Fri 08 Aug 2025 17:19:41 +0000
asID:                     28359
IP address blocks:        177.70.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:da:68:11:0d:28:3c:a8:43:ac:7f:f7:0b:e4:79:01:70:06:b4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Validity
            Not Before: Aug  9 17:14:41 2024 GMT
            Not After : Aug  8 17:19:41 2025 GMT
        Subject: CN=402FBF8E966F7C903EDD15B496068C3EB790388F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:80:b7:96:7c:35:98:a3:80:1e:6b:d8:68:
                    25:8a:e0:14:71:95:2e:46:c2:a7:6a:75:fe:e5:9e:
                    ae:d6:71:68:4e:2b:1f:f6:fc:ec:64:4f:df:1f:06:
                    be:3e:73:3a:ad:74:30:3e:c1:5a:23:2d:ba:a1:19:
                    f2:08:47:8a:95:43:2f:db:0b:81:88:de:8d:08:4c:
                    4b:3f:f4:9c:7f:8a:6a:08:29:6a:8d:2b:0d:20:aa:
                    d6:24:73:2a:2d:ce:29:8b:81:be:ea:12:3d:89:f3:
                    a2:83:91:10:ea:be:55:11:ba:71:a2:9d:bf:63:1b:
                    5f:99:f7:2d:d1:0c:4d:71:cd:5a:52:7d:10:db:15:
                    86:1d:d6:b8:a7:60:e1:fc:4f:36:9b:96:08:b9:40:
                    c7:16:38:46:dc:73:79:ff:b8:21:f2:d9:6d:92:52:
                    af:9a:00:84:29:a0:59:a8:48:90:63:55:c5:d5:c9:
                    19:52:71:13:ff:64:5b:06:c1:d8:1f:27:31:9a:8b:
                    70:b6:40:90:f6:2b:bc:32:56:01:50:17:b9:ef:cb:
                    72:b7:57:5e:6b:1f:bb:9d:ce:ab:23:95:cc:be:d6:
                    d0:8d:2b:e0:33:2f:5b:03:e2:34:37:aa:14:17:c4:
                    79:7b:a2:08:65:3f:fb:5f:21:20:21:fe:e7:03:5d:
                    0a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2F:BF:8E:96:6F:7C:90:3E:DD:15:B4:96:06:8C:3E:B7:90:38:8F
            X509v3 Authority Key Identifier:
                keyid:7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e37302e3139322e302f32302d3234203d3e203238333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:4c:94:3d:03:f7:df:e5:f6:05:9b:70:c2:7d:cb:af:60:3c:
         86:a5:a2:6e:0e:ec:08:a7:48:98:79:9b:5a:88:37:0c:a3:a2:
         d6:2d:c2:8f:4f:c4:51:07:08:6a:64:aa:0b:65:d2:fa:fa:73:
         1e:15:57:f0:54:2b:fb:5b:80:5f:f0:c5:7c:66:d0:e6:4a:5e:
         a5:d3:ea:9f:ee:46:83:98:17:44:ec:3d:f5:fb:a5:69:0d:52:
         48:53:6a:84:9c:d8:a3:4e:c0:c7:f5:96:7a:16:b0:86:36:88:
         b6:a6:6c:90:ee:19:ee:b8:fc:d3:d2:da:a6:4a:b3:62:53:4c:
         f2:d6:fc:d8:f3:35:b3:82:ef:8f:e1:ac:3d:51:f8:81:9b:ae:
         94:41:1d:d1:30:87:da:f6:b3:66:d0:df:fe:44:a6:4c:9b:ac:
         e5:7f:18:44:d1:b6:f2:2d:b8:53:09:9d:f4:df:43:69:2a:85:
         65:4e:ee:0f:98:4b:35:91:2f:88:57:ec:c0:a8:88:9c:f3:91:
         52:5f:94:53:54:87:5c:cd:3f:5b:13:d8:03:d2:68:de:1c:bd:
         49:09:5b:a0:6c:61:c5:9b:09:d5:bb:1b:1a:e6:42:d9:f8:f5:
         53:7e:63:88:f9:32:3d:23:ae:83:70:05:cb:23:d7:44:f5:1e:
         7c:71:52:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:30 2025 by rpki-client