Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3131302e302f32342d3234203d3e20323730353935.roa
File:                     3137372e3135322e3131302e302f32342d3234203d3e20323730353935.roa (raw, json)
Hash identifier:          vUAKk3ShyoryDunnLoOtiYxgQL9av7RSfiUcQRZUQyU=
Subject key identifier:   3A:1B:4D:93:0E:AE:86:0A:70:35:8E:35:25:3C:72:79:9D:F6:C6:25
Certificate issuer:       /CN=416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A
Certificate serial:       24B73864B90B761496814E1A157BAB01A540B5FC
Authority key identifier: 41:6A:B0:E5:05:A9:B0:27:9E:F3:7F:FA:78:6A:4B:BD:F8:BB:FD:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3131302e302f32342d3234203d3e20323730353935.roa
Signing time:             Mon 09 Dec 2024 17:31:38 +0000
ROA not before:           Mon 09 Dec 2024 17:26:38 +0000
ROA not after:            Mon 08 Dec 2025 17:31:38 +0000
asID:                     270595
IP address blocks:        177.152.110.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b7:38:64:b9:0b:76:14:96:81:4e:1a:15:7b:ab:01:a5:40:b5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A
        Validity
            Not Before: Dec  9 17:26:38 2024 GMT
            Not After : Dec  8 17:31:38 2025 GMT
        Subject: CN=3A1B4D930EAE860A70358E35253C72799DF6C625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:d0:6e:37:e0:ab:54:78:49:39:4e:76:fd:
                    91:c4:62:e7:b7:93:b7:54:e0:f2:f0:02:cd:ee:c3:
                    a0:7d:e9:84:1e:28:e3:9b:cc:9e:da:64:8d:ad:0a:
                    3c:2e:46:07:11:66:24:db:ad:b4:85:8f:69:0b:e2:
                    70:d6:a6:ac:39:9c:4c:63:ff:02:0f:16:ad:fd:ef:
                    50:2b:ff:2c:55:65:36:f6:c4:89:f6:24:26:6f:83:
                    3b:cb:42:7d:27:23:03:e8:f7:40:c0:fe:44:ad:57:
                    7d:62:28:9a:3b:9a:55:85:0b:25:f3:f4:ec:c8:67:
                    02:f1:cb:30:d9:2c:66:90:9f:6b:b1:da:11:8d:b3:
                    46:b2:ff:09:d0:9b:09:9a:1a:47:da:ae:5b:26:e7:
                    c8:f2:58:5b:95:33:82:3a:0b:85:e8:89:17:32:7c:
                    d9:8e:a0:b0:d6:d0:cf:4d:52:91:62:87:c3:69:e8:
                    a2:46:46:5d:8c:1d:e0:82:94:0d:85:9b:42:8c:b8:
                    2c:af:77:5f:69:af:a0:59:c5:4b:11:87:67:27:1f:
                    ab:c4:86:59:11:60:be:07:68:47:60:22:23:c9:3f:
                    4f:69:28:45:54:3b:65:5d:7b:d6:cf:4b:3a:9e:52:
                    ce:2e:89:6f:7a:9a:b2:c5:bc:01:08:c4:fb:87:25:
                    7a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1B:4D:93:0E:AE:86:0A:70:35:8E:35:25:3C:72:79:9D:F6:C6:25
            X509v3 Authority Key Identifier:
                keyid:41:6A:B0:E5:05:A9:B0:27:9E:F3:7F:FA:78:6A:4B:BD:F8:BB:FD:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3131302e302f32342d3234203d3e20323730353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:d9:b4:65:d6:d7:66:1d:f8:f9:51:3d:a0:e3:4b:97:b8:28:
         40:11:4f:3a:7c:38:d2:f0:b2:8a:38:70:ea:8c:7e:a6:3b:ec:
         96:22:47:ca:56:d0:19:04:c6:dd:1b:ec:d5:60:cb:9c:af:fa:
         e8:c6:e3:ff:90:b8:f0:57:ce:a1:2d:55:82:da:41:b0:52:02:
         aa:cf:1a:a2:5f:17:b0:53:d4:bd:df:bb:89:4d:bd:a5:76:7b:
         72:e0:05:e1:e6:49:b0:54:7a:ea:e2:1f:b5:df:67:45:79:7a:
         4b:59:4a:18:49:d3:01:c4:d6:56:e4:09:17:0f:1d:0d:61:8b:
         a4:b0:eb:e0:4e:d8:40:1e:42:e1:c3:f4:0d:db:6f:68:5d:26:
         bb:b0:5a:45:85:2c:d7:01:2c:5f:66:50:e5:86:65:d1:c1:1d:
         95:d6:da:59:8b:c8:29:6a:d8:2b:d2:ef:fe:e3:5d:f7:b3:4d:
         73:42:de:57:7c:88:a4:9a:38:ed:8a:fb:11:95:ba:c1:ca:82:
         3f:02:fd:3b:b0:5d:92:88:17:04:5c:07:24:ce:19:53:9d:e2:
         6a:47:23:c9:6e:29:b1:7e:43:3e:6a:37:ea:b6:4d:40:05:a4:
         7a:ac:77:17:df:b1:7b:fe:c8:56:cb:a1:1b:7a:32:63:45:55:
         f1:e2:fd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:01:26 2025 by rpki-client