Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e31302e302f32342d3234203d3e20323632363137.roa
File:                     3137372e38372e31302e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          b5+vB5rfdUx8h6CNhnRQooT8LqJIjk9kEuNcWaTWGRs=
Subject key identifier:   DE:18:80:EE:93:C6:FB:82:37:F2:8D:0B:98:DA:1D:61:6D:9C:03:CB
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       37902D708357F34B324236FCCD4F0083D98EE50C
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e31302e302f32342d3234203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:36:00 +0000
ROA not before:           Wed 05 Mar 2025 20:31:00 +0000
ROA not after:            Wed 04 Mar 2026 20:36:00 +0000
asID:                     262617
IP address blocks:        177.87.10.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:90:2d:70:83:57:f3:4b:32:42:36:fc:cd:4f:00:83:d9:8e:e5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:31:00 2025 GMT
            Not After : Mar  4 20:36:00 2026 GMT
        Subject: CN=DE1880EE93C6FB8237F28D0B98DA1D616D9C03CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:59:5a:5c:ec:09:20:d1:db:05:fe:49:62:
                    b5:7e:ae:08:d2:d3:66:6c:0a:f1:c8:ec:e7:7e:67:
                    95:23:4d:e1:3b:fc:7e:8d:d2:55:07:fb:da:8c:a7:
                    34:06:82:35:36:41:ae:e2:0f:2c:32:e0:75:f0:c9:
                    b5:25:15:af:11:cb:04:08:41:0b:c0:2d:49:0b:fd:
                    4f:ce:a4:0d:89:d1:36:dc:25:f6:6d:47:c8:95:a5:
                    f9:13:43:87:56:6c:54:07:29:b1:cb:4e:7c:fc:33:
                    97:8a:98:94:aa:28:90:30:c2:77:78:0c:ac:04:d6:
                    8a:3c:5c:78:47:0a:b1:a3:25:02:32:7f:f2:39:b9:
                    ab:79:c1:96:28:51:d2:e9:b6:30:25:8f:5d:11:57:
                    86:c9:3b:85:27:f3:94:be:7c:54:93:aa:64:00:81:
                    6e:08:39:37:0b:5e:b2:e0:66:46:c3:c8:bc:ad:a3:
                    fe:07:86:2e:ef:48:2a:ff:ae:5a:d6:72:04:4d:ab:
                    45:2c:22:70:f9:cf:95:f5:1e:cf:eb:58:da:c6:be:
                    79:0d:15:4a:fd:3a:52:e5:9a:c3:a3:66:9c:3b:04:
                    fa:16:f7:b1:d7:85:9d:6f:57:de:1d:e1:55:05:8e:
                    3f:71:c0:3d:2e:5e:98:50:1d:14:28:2c:57:16:8a:
                    d1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:18:80:EE:93:C6:FB:82:37:F2:8D:0B:98:DA:1D:61:6D:9C:03:CB
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e31302e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:95:fb:d1:51:95:e9:99:38:76:8e:b0:dc:e1:f9:ed:d1:e4:
         56:7c:79:79:b8:ae:4b:15:13:0c:1e:a4:63:62:f1:2d:7a:96:
         84:4e:4b:90:54:9e:19:52:e8:45:9f:25:11:7f:29:5c:f1:6f:
         05:b6:39:84:d0:41:7d:1c:f2:e5:a9:b2:96:a7:62:5c:c7:f0:
         d5:fb:20:97:f8:47:bf:70:24:05:a3:d4:f0:35:e0:10:1a:24:
         fd:b2:b3:65:47:f9:9a:93:15:68:f9:83:3f:a3:aa:c2:68:3f:
         9c:8a:00:25:d5:42:cb:14:92:9c:9d:ba:07:c9:00:dc:5b:58:
         a3:87:7f:21:5a:ee:cb:03:1f:cc:6f:57:03:89:47:14:12:1b:
         2c:f2:13:96:03:26:e4:d9:01:59:b2:e2:c3:6f:92:6f:a3:ca:
         8f:5d:c7:de:7c:a7:b3:a3:65:cc:61:24:f8:28:18:62:67:b1:
         df:cf:bc:ec:f1:07:70:07:4d:6d:42:6c:25:80:1e:5d:c4:0f:
         03:70:7d:3d:b2:b7:07:db:7b:1a:93:84:cd:3b:58:18:76:f3:
         ea:eb:4a:97:2b:d0:dd:8b:c9:40:71:64:c0:43:ac:19:b6:0a:
         19:67:7a:b9:29:0c:d9:df:b6:75:86:f6:6a:61:a6:1d:c0:50:
         d4:eb:37:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:36 2025 by rpki-client