Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139342e302f32332d3233203d3e20323632383238.roa
File:                     3137372e3135352e3139342e302f32332d3233203d3e20323632383238.roa (raw, json)
Hash identifier:          yJqZ+IP56EsL3142ZnTYgxkWUTXgBsfV3mLCxg+63nA=
Subject key identifier:   D3:FF:C3:3D:8F:B1:0E:73:92:4C:7C:CB:B9:A9:80:2D:F2:D4:6A:23
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       53616CB153D49E44746B2C73B47E440484F410AE
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139342e302f32332d3233203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 17:58:22 +0000
ROA not before:           Tue 11 Mar 2025 17:53:22 +0000
ROA not after:            Tue 10 Mar 2026 17:58:22 +0000
asID:                     262828
IP address blocks:        177.155.194.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:61:6c:b1:53:d4:9e:44:74:6b:2c:73:b4:7e:44:04:84:f4:10:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:53:22 2025 GMT
            Not After : Mar 10 17:58:22 2026 GMT
        Subject: CN=D3FFC33D8FB10E73924C7CCBB9A9802DF2D46A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:65:cb:9f:cb:e1:f4:59:2e:67:8b:b8:e5:
                    31:e3:7b:73:b5:a9:7f:6b:76:0a:aa:07:09:74:01:
                    25:63:e4:eb:06:84:be:3a:c2:2f:98:09:1a:44:6d:
                    02:67:99:c2:94:46:ef:2b:32:1c:cb:08:a7:9f:97:
                    23:5a:3d:4d:a3:8b:35:28:58:91:55:e6:8a:83:41:
                    0d:02:10:b7:60:34:46:69:e2:f7:45:67:40:7c:18:
                    9f:74:78:ef:05:2d:2a:08:4d:ee:82:05:8f:25:d0:
                    5a:c1:f4:37:27:2d:6d:5c:4f:40:6f:fa:31:4f:97:
                    cf:37:2f:8e:68:5b:ae:a4:74:92:dc:c5:cd:21:7d:
                    bc:ea:15:83:17:fe:c4:cd:df:d4:ed:5f:b5:00:3a:
                    51:cb:4b:13:e7:fb:17:d1:99:c8:03:cf:13:a9:f9:
                    9c:a9:b6:13:57:69:a3:69:d8:f9:d1:27:36:9f:95:
                    b5:7d:98:91:84:a9:3f:3d:b0:c8:8b:3b:c6:70:e5:
                    23:13:3f:39:94:df:d6:2a:71:65:fb:52:5b:bf:9c:
                    46:ea:1e:94:f3:55:9b:a3:72:4f:9a:34:be:ce:6b:
                    12:b0:e6:34:31:92:3a:ea:45:6c:3a:99:ca:20:45:
                    20:ea:5d:75:82:3b:32:f6:15:d7:6b:7c:ca:cb:57:
                    2c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FF:C3:3D:8F:B1:0E:73:92:4C:7C:CB:B9:A9:80:2D:F2:D4:6A:23
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139342e302f32332d3233203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:95:30:04:3e:db:5e:9c:bc:a7:56:6e:07:d1:fc:97:03:f9:
         a6:af:af:78:f4:d4:32:2f:e2:e8:66:52:3c:a5:10:8c:c1:64:
         a6:dc:26:ad:97:98:89:92:57:51:22:ff:94:1c:25:38:eb:5a:
         6d:ea:4e:03:ea:55:fb:89:6f:61:d2:90:c2:16:b9:32:87:ec:
         1e:23:ff:cb:e5:8b:a2:30:8a:7d:5a:2f:df:89:49:b2:c9:8c:
         95:3c:43:95:17:5f:9f:f3:ed:04:99:4c:d0:e2:1b:e3:06:79:
         6a:81:4c:37:26:9e:43:bd:20:75:ac:2e:34:38:5a:98:e1:c7:
         ad:38:2d:68:46:f9:08:84:e4:a2:ad:2e:d1:7e:d1:cd:8a:a9:
         1e:d6:ac:c9:41:97:df:7d:34:f9:87:fe:26:db:48:78:9a:ef:
         84:b3:71:84:1f:5a:bc:11:da:03:2c:19:0b:ca:00:33:02:15:
         d1:f1:58:b0:63:1e:1f:2e:31:a0:94:49:3c:78:68:fa:66:d7:
         36:26:d2:0d:6a:21:d4:95:c6:78:3d:35:9d:94:98:40:bf:fe:
         b9:1b:de:be:0e:2a:c5:62:0b:0f:06:01:cb:3b:d7:08:0e:6e:
         6c:2a:19:b4:85:69:d4:4f:6a:02:a8:c6:c1:93:eb:31:d3:ba:
         a8:c1:45:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:35:02 2025 by rpki-client