Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3137372e3132342e3132302e302f32322d3234203d3e203532363034.roa
File:                     3137372e3132342e3132302e302f32322d3234203d3e203532363034.roa (raw, json)
Hash identifier:          bRNVOZwBRYHeRLOC9VFJrTZW20aV4eMBJ0UbBc7OJL4=
Subject key identifier:   59:F1:EB:18:72:E9:16:71:6D:C6:20:8C:B2:A1:97:54:4A:BA:E0:1A
Certificate issuer:       /CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
Certificate serial:       089AEB0BF111C42E49061C90596288690FCE01D4
Authority key identifier: 7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3137372e3132342e3132302e302f32322d3234203d3e203532363034.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     52604
IP address blocks:        177.124.120.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9a:eb:0b:f1:11:c4:2e:49:06:1c:90:59:62:88:69:0f:ce:01:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=59F1EB1872E916716DC6208CB2A197544ABAE01A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:e3:56:03:94:04:c7:59:dd:09:03:76:b3:
                    7e:95:70:52:7f:8a:a2:a4:43:45:b1:68:4b:20:71:
                    48:95:8a:19:64:b6:70:a3:b2:0e:f7:e9:6b:f6:fe:
                    2c:57:c6:ba:6c:3f:74:43:0a:18:5b:3b:25:6d:54:
                    80:12:f8:cd:e2:a9:6f:3f:82:09:1c:25:a6:70:f4:
                    d7:6f:d8:8f:42:10:75:75:b3:26:7c:6c:32:b5:8a:
                    89:8c:39:3b:37:f5:63:cd:c4:f4:69:fe:96:a4:89:
                    26:94:b0:5a:69:6e:b8:2e:dd:13:1a:02:46:44:14:
                    8e:68:2a:5b:63:3c:4a:fc:6e:18:44:75:9a:46:3d:
                    aa:f5:35:c9:da:ad:c1:7f:c9:28:b0:e8:78:23:b0:
                    76:5a:52:ed:1d:ba:11:83:e9:90:5c:83:cb:dc:dd:
                    c0:f2:31:24:7b:fe:0c:dc:73:20:63:9c:fa:94:ab:
                    83:f7:ba:8f:ad:d6:71:f2:b7:5e:1e:57:5d:bf:65:
                    69:8c:9f:c3:d8:fc:51:23:5f:bf:f1:f6:e2:09:fd:
                    a5:e7:bc:81:45:dc:b8:1b:69:9c:df:a7:ad:8b:0f:
                    08:c6:54:fd:2e:2c:b2:41:e4:6e:dd:1d:fc:52:2d:
                    5d:1e:d5:73:1e:3b:91:39:99:3c:18:f4:7e:bb:06:
                    7f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F1:EB:18:72:E9:16:71:6D:C6:20:8C:B2:A1:97:54:4A:BA:E0:1A
            X509v3 Authority Key Identifier:
                keyid:7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3137372e3132342e3132302e302f32322d3234203d3e203532363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:9d:af:b4:ba:7f:0d:58:cb:82:b5:d2:08:94:8c:f9:29:1f:
         35:7f:ea:5b:dc:d7:52:bc:68:78:5a:e4:47:25:7c:83:49:da:
         21:11:4e:76:51:b4:92:56:bc:b5:36:ac:27:5e:ab:90:10:29:
         76:dc:1f:6a:6d:20:82:00:42:e8:6b:72:04:96:43:35:ed:17:
         9d:07:be:71:06:86:85:f1:14:6d:f8:0e:50:42:d6:01:a1:b8:
         f1:43:e6:76:fd:30:be:0e:db:9d:98:ba:2e:4e:3f:4e:ae:9e:
         81:7a:65:7f:54:6a:0d:d5:a2:97:8c:82:c0:bd:04:c8:c0:f8:
         7a:0f:df:2f:87:90:6b:cc:08:29:a2:2b:c0:68:ce:4e:cb:b2:
         01:d4:9d:d8:de:16:6c:1c:cf:4a:d2:b3:18:de:41:ad:06:fa:
         55:ff:86:09:0c:08:87:57:12:92:f2:36:cd:8a:ac:5a:1a:d9:
         52:0b:e2:a0:84:b4:5a:69:26:ca:e2:96:68:0f:54:59:ab:5b:
         50:47:01:9b:c4:f3:30:1b:0c:49:a8:7b:47:ac:eb:92:fa:1a:
         83:4b:76:e8:79:45:cc:6c:44:bf:b1:33:3a:83:83:2b:dd:8b:
         6b:41:15:7f:f8:ea:5d:08:44:b6:26:19:e4:2d:a0:78:9d:1f:
         52:16:5a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:42 2025 by rpki-client