Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/3137372e31312e38382e302f32342d3234203d3e20323632383734.roa
File:                     3137372e31312e38382e302f32342d3234203d3e20323632383734.roa (raw, json)
Hash identifier:          5kwWCHnwJIEt3Z+eF8AYlPnpaPhMvG2hsCQ6Tb9wXvM=
Subject key identifier:   8C:DE:33:A1:9C:0D:B3:94:C8:2E:48:4F:99:CE:90:21:07:38:CC:68
Certificate issuer:       /CN=1AA6ABECEF4F2FBDF50146B425D07A77D01EA852
Certificate serial:       570B245F642BD013FDB15D9451E518DF1B1EE0B8
Authority key identifier: 1A:A6:AB:EC:EF:4F:2F:BD:F5:01:46:B4:25:D0:7A:77:D0:1E:A8:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/3137372e31312e38382e302f32342d3234203d3e20323632383734.roa
Signing time:             Wed 04 Jan 2023 13:23:42 +0000
ROA not before:           Wed 04 Jan 2023 13:18:42 +0000
ROA not after:            Wed 03 Jan 2024 13:23:42 +0000
asID:                     262874
IP address blocks:        177.11.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:0b:24:5f:64:2b:d0:13:fd:b1:5d:94:51:e5:18:df:1b:1e:e0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA6ABECEF4F2FBDF50146B425D07A77D01EA852
        Validity
            Not Before: Jan  4 13:18:42 2023 GMT
            Not After : Jan  3 13:23:42 2024 GMT
        Subject: CN=8CDE33A19C0DB394C82E484F99CE90210738CC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ef:87:30:95:ff:d7:bf:d9:fe:f2:8c:b9:eb:
                    8d:f2:5f:be:65:d0:05:a9:41:fe:d8:d6:42:4a:b8:
                    1c:41:25:80:14:99:10:71:05:0c:10:e5:4d:39:a7:
                    86:3e:d3:8f:11:cd:dd:51:8e:1d:68:b2:8a:9b:1c:
                    c6:61:38:cf:f3:27:b8:ba:e8:51:cb:08:6c:f8:0c:
                    03:b3:9a:22:92:e5:6d:75:c4:b0:81:f5:da:61:df:
                    e6:8b:2a:bd:34:89:4a:43:39:c6:cb:60:40:24:99:
                    08:3f:50:a3:73:8c:14:a4:6a:4d:f9:da:f5:a7:60:
                    89:c9:19:75:74:c4:78:59:7b:aa:f9:db:ef:5f:14:
                    b2:80:92:2d:f5:72:aa:16:88:17:e2:ff:ea:a3:5d:
                    18:3a:03:d9:bb:b2:eb:24:a7:13:31:a3:bc:df:20:
                    94:75:0a:94:ea:f6:35:82:59:c8:ae:fc:f3:29:fe:
                    07:34:97:7f:b7:ab:c8:c2:33:28:b7:97:d8:dc:9c:
                    dd:73:e3:0f:81:40:5b:26:45:43:97:f9:9d:6f:e1:
                    26:96:a5:f2:93:aa:06:7d:13:7b:8a:b2:0b:b5:63:
                    d8:35:a1:5b:0e:a6:6b:3b:ab:84:cf:6a:6c:cc:88:
                    28:ac:be:2a:77:92:64:fc:b3:58:c2:2c:16:1f:de:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DE:33:A1:9C:0D:B3:94:C8:2E:48:4F:99:CE:90:21:07:38:CC:68
            X509v3 Authority Key Identifier:
                keyid:1A:A6:AB:EC:EF:4F:2F:BD:F5:01:46:B4:25:D0:7A:77:D0:1E:A8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AA6ABECEF4F2FBDF50146B425D07A77D01EA852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/3137372e31312e38382e302f32342d3234203d3e20323632383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:b3:8e:2a:19:ea:0b:7d:5b:b5:c7:83:6c:27:fc:79:e3:8e:
         fb:09:0f:09:df:bc:27:35:42:c9:99:61:09:77:f5:3c:fa:24:
         da:61:9f:ed:ed:8e:ce:08:d2:7d:e3:f8:e2:1f:28:2d:62:36:
         5a:6b:be:c8:f9:1c:eb:3f:b8:97:1d:58:66:d7:a2:6d:96:27:
         88:32:74:f8:c0:92:d4:a7:3e:26:70:80:19:2e:86:80:87:b3:
         3a:76:65:56:3f:11:db:e9:ab:8a:15:f0:47:a7:72:7b:66:35:
         74:75:e6:91:c9:d8:25:fb:a8:55:7f:7e:21:e9:91:68:b0:28:
         2c:00:d5:c8:42:72:16:9f:dd:c7:a2:65:1b:75:2e:16:cf:fb:
         7a:cb:11:b0:4d:f1:de:87:24:9d:5d:58:9d:83:8f:37:78:f1:
         a2:7e:97:a0:62:62:97:4b:d3:30:91:ab:7c:dc:10:c0:36:6a:
         f3:5c:35:25:54:ff:68:de:60:d9:69:43:fb:7f:5c:7f:5d:a3:
         0e:19:0f:d9:5c:8f:dc:21:0d:1e:0e:49:65:6e:e4:39:46:80:
         ac:78:89:bf:86:9a:50:9c:4f:15:ec:0f:c8:5d:bd:bb:07:48:
         ca:e8:c3:25:ef:ce:c3:93:b3:5a:c6:bb:05:cc:5a:a8:fc:9a:
         0a:43:77:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:31:56 2025 by rpki-client