Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32312d3234203d3e20323632383238.roa
File:                     3137372e3135352e3139322e302f32312d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          OWht9P7Z+58YsKTmvcrK3hubkf1QbPpioqNjdpPDivk=
Subject key identifier:   3D:23:63:42:09:C1:53:36:7F:D4:95:22:DA:2F:06:D7:59:F5:FE:46
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       49C358ECCF867326EC9FD3FBE15E0A068DD5611C
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32312d3234203d3e20323632383238.roa
Signing time:             Wed 12 Mar 2025 13:08:50 +0000
ROA not before:           Wed 12 Mar 2025 13:03:50 +0000
ROA not after:            Wed 11 Mar 2026 13:08:50 +0000
asID:                     262828
IP address blocks:        177.155.192.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c3:58:ec:cf:86:73:26:ec:9f:d3:fb:e1:5e:0a:06:8d:d5:61:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 12 13:03:50 2025 GMT
            Not After : Mar 11 13:08:50 2026 GMT
        Subject: CN=3D23634209C153367FD49522DA2F06D759F5FE46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:92:53:0f:bc:d2:88:16:f1:1f:4b:0f:9f:
                    ac:c3:f4:25:b5:bf:ff:be:e0:be:e8:6d:e3:c8:0b:
                    fe:92:3b:a8:2f:e6:85:53:1a:6e:f1:56:39:59:08:
                    86:b2:6d:73:dc:c1:aa:e5:4d:28:72:6d:ec:b9:aa:
                    d5:1d:25:cf:72:ec:4c:57:0d:65:9d:ec:d6:72:bc:
                    8e:41:c5:11:33:44:c8:b0:3e:dc:c2:a0:ea:6f:cc:
                    12:09:52:09:a7:d3:d6:7e:52:a5:78:48:01:b0:0b:
                    f5:d6:b7:a7:01:74:1a:34:a5:12:7d:34:96:e1:57:
                    8e:0e:52:62:2b:ed:0e:fc:73:16:9f:a0:f4:31:a4:
                    5a:e5:8a:65:ea:e1:15:02:25:ef:05:7d:8f:1a:18:
                    19:79:7f:9d:39:20:7f:60:05:f4:e6:2b:e7:c7:bc:
                    02:c7:ab:69:ff:8c:72:9b:b4:c0:cb:f2:40:d5:18:
                    d3:80:e9:e6:14:4b:dd:7d:53:eb:0f:b6:b7:08:3d:
                    af:a6:1c:f6:7f:ac:a3:31:c5:8c:da:67:50:a7:bc:
                    11:77:03:89:e9:6d:b7:a0:46:50:1d:10:ba:50:eb:
                    92:8a:8c:d3:9e:a3:e1:49:ef:29:cd:4f:e2:ce:6b:
                    f6:75:37:05:91:d6:96:d9:8e:9b:00:3d:11:73:2f:
                    b2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:23:63:42:09:C1:53:36:7F:D4:95:22:DA:2F:06:D7:59:F5:FE:46
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32312d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:64:b1:c1:57:24:8b:22:b0:63:cf:3a:53:37:8e:96:a6:4b:
         d1:dd:c8:d3:8d:ba:16:97:70:fe:3a:7b:a2:d2:34:8d:d2:80:
         00:3c:e3:0f:78:fd:4a:9b:fc:fe:77:5d:8d:2d:5e:1b:47:43:
         71:19:a3:a5:17:2a:8c:0c:24:0a:45:94:75:53:04:9c:12:d7:
         e6:5e:0f:9b:77:21:cc:79:1c:48:46:19:a6:44:b9:fe:41:50:
         09:5a:9d:29:c9:8b:f6:75:03:f8:91:ca:6e:b8:8b:b0:60:c7:
         df:b7:2d:de:54:68:4b:e2:ab:c6:a9:a3:24:16:90:9a:b0:ac:
         da:7e:32:32:8f:86:be:f7:0f:af:80:41:4d:63:d9:d4:a3:0f:
         da:8f:d6:4f:68:cd:6a:d2:07:99:04:33:9b:6b:05:28:dc:bf:
         0c:6b:20:7a:08:59:04:df:aa:7a:89:4c:0b:aa:a8:67:f3:b8:
         21:95:cb:3c:f9:75:5b:97:a9:ae:ba:0c:10:58:b6:73:91:40:
         cb:90:de:7b:05:b9:fd:04:78:63:6d:a7:16:93:28:b4:a2:1f:
         0d:d6:ec:58:b9:3f:a7:5e:07:8d:83:96:3e:08:ea:67:6e:ee:
         2b:ee:a3:fd:90:1a:d1:d1:fa:0d:15:f0:30:eb:0c:d5:3b:6e:
         99:2f:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:31:05 2025 by rpki-client