Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3137372e3132382e39322e302f32322d3234203d3e20323632383035.roa
File:                     3137372e3132382e39322e302f32322d3234203d3e20323632383035.roa (raw, json)
Hash identifier:          eGjrxWi5d6eaA6ePGj2zNdXDL4xujLCc7tZfNfGa/EY=
Subject key identifier:   01:43:F3:2D:D5:24:70:0E:C3:8F:02:D6:29:A7:19:56:DA:CF:26:DC
Certificate issuer:       /CN=63CBF60AF09501B61AE4A78C985BDCC1DE3E483D
Certificate serial:       73C60BADB2675DBCBDD8F1CC9CEC31EE0203DC41
Authority key identifier: 63:CB:F6:0A:F0:95:01:B6:1A:E4:A7:8C:98:5B:DC:C1:DE:3E:48:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63CBF60AF09501B61AE4A78C985BDCC1DE3E483D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3137372e3132382e39322e302f32322d3234203d3e20323632383035.roa
Signing time:             Tue 18 Feb 2025 10:11:58 +0000
ROA not before:           Tue 18 Feb 2025 10:06:58 +0000
ROA not after:            Tue 17 Feb 2026 10:11:58 +0000
asID:                     262805
IP address blocks:        177.128.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c6:0b:ad:b2:67:5d:bc:bd:d8:f1:cc:9c:ec:31:ee:02:03:dc:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63CBF60AF09501B61AE4A78C985BDCC1DE3E483D
        Validity
            Not Before: Feb 18 10:06:58 2025 GMT
            Not After : Feb 17 10:11:58 2026 GMT
        Subject: CN=0143F32DD524700EC38F02D629A71956DACF26DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0f:a5:3c:cb:d3:d7:58:04:56:07:da:c8:1f:
                    c4:75:9a:cc:b2:6e:d5:32:3d:b5:bd:f9:15:dd:35:
                    78:f7:07:67:5d:b6:81:98:a7:63:14:d4:e1:72:e7:
                    81:07:ba:ef:ed:7c:e7:fb:0e:af:d3:d2:45:c1:55:
                    6d:b4:88:3d:ee:2f:cc:75:02:d3:ed:b3:ec:e4:8e:
                    06:ea:df:6c:3c:4b:92:fa:d3:d8:52:7b:39:c3:92:
                    4b:58:87:c1:b5:30:ba:8a:c6:47:be:17:30:c1:ef:
                    56:b9:62:f5:48:3d:6b:eb:9f:44:7f:66:6b:27:51:
                    e4:03:d3:14:7b:05:2e:56:5c:4e:ed:91:01:e9:07:
                    a0:69:b4:c2:5e:ed:2d:cb:79:56:2b:23:ff:a3:da:
                    73:9e:f9:7b:ef:f8:c1:6a:9b:69:1b:f5:ed:66:d6:
                    8b:a7:41:50:12:94:75:a9:d1:41:de:04:85:14:31:
                    cc:2c:3e:e3:3e:1b:43:fa:85:fe:e6:c8:2a:b7:a9:
                    de:a2:8a:c2:63:9e:72:da:2d:19:28:d0:64:d2:e5:
                    46:f6:90:b6:dd:ab:8c:9a:83:a3:32:43:a6:b8:16:
                    fe:52:ad:24:6b:87:51:b5:96:d6:f1:8f:fa:3d:2c:
                    d3:04:d9:32:cd:0b:b6:0d:70:79:c1:a4:b1:bb:dc:
                    ea:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:43:F3:2D:D5:24:70:0E:C3:8F:02:D6:29:A7:19:56:DA:CF:26:DC
            X509v3 Authority Key Identifier:
                keyid:63:CB:F6:0A:F0:95:01:B6:1A:E4:A7:8C:98:5B:DC:C1:DE:3E:48:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/63CBF60AF09501B61AE4A78C985BDCC1DE3E483D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63CBF60AF09501B61AE4A78C985BDCC1DE3E483D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3137372e3132382e39322e302f32322d3234203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:09:2b:3e:48:38:3b:b2:59:2d:f0:dc:7f:ea:da:48:89:c3:
         54:1e:d8:a6:95:da:a0:ba:6f:a9:6a:84:91:4c:30:3b:da:fd:
         2b:af:be:24:80:36:8c:b3:65:b5:04:86:f0:55:f0:ec:ed:33:
         08:ea:1c:81:84:87:bb:7d:01:88:76:a8:55:1c:9e:59:4e:0b:
         61:dc:33:f4:2c:12:92:52:3d:9c:c5:15:5c:94:a6:b4:8a:5c:
         79:67:92:77:aa:a1:2d:cd:4f:06:2f:b9:8f:72:28:e9:18:50:
         47:cb:a1:13:f5:81:b0:77:71:53:bb:7b:2b:86:04:2e:4d:6e:
         0d:d1:29:a8:ca:70:d0:b8:e6:74:4e:57:cd:2e:b2:cd:19:d0:
         e3:e6:e0:9d:4a:b3:78:d3:5d:1b:11:71:b4:df:7a:2a:d5:77:
         38:1b:c7:7a:67:68:18:5e:b4:a3:41:94:51:a2:57:2f:56:56:
         6c:45:fa:5e:29:79:03:e9:04:18:95:aa:03:bd:9a:3d:c5:42:
         5a:7a:f0:0d:07:1e:ac:dd:0e:5b:56:12:bd:7e:43:64:db:87:
         9e:8d:40:90:31:66:22:5f:12:0d:fa:01:21:55:f2:6d:14:3f:
         7b:d9:cf:aa:88:84:80:da:52:0d:d6:3f:a9:87:3d:22:d4:b4:
         c2:e9:e1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:43:18 2025 by rpki-client