Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230342e302f32332d3233203d3e203533303836.roa
File:                     3138372e33332e3230342e302f32332d3233203d3e203533303836.roa (raw, json)
Hash identifier:          avqzdnAEckfz308iRlTEiyPxE6BX0Y+/pFkIo2WDKeA=
Subject key identifier:   57:07:10:C0:42:D4:3F:20:5A:64:66:8B:94:2E:8E:87:33:55:10:35
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       3EC0679E7370C000BA14450265CDDA3736032347
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230342e302f32332d3233203d3e203533303836.roa
Signing time:             Thu 06 Mar 2025 08:45:20 +0000
ROA not before:           Thu 06 Mar 2025 08:40:20 +0000
ROA not after:            Thu 05 Mar 2026 08:45:20 +0000
asID:                     53086
IP address blocks:        187.33.204.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c0:67:9e:73:70:c0:00:ba:14:45:02:65:cd:da:37:36:03:23:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Mar  6 08:40:20 2025 GMT
            Not After : Mar  5 08:45:20 2026 GMT
        Subject: CN=570710C042D43F205A64668B942E8E8733551035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:0e:7d:66:11:8f:90:a7:77:a0:ee:3f:df:
                    53:53:f2:da:ab:5c:16:a6:03:be:9f:bd:14:76:41:
                    54:fd:19:65:45:ff:04:7f:d9:e0:f5:d4:64:96:86:
                    2c:9a:9a:21:05:cd:e7:8a:fc:23:db:80:62:1a:6c:
                    db:78:99:7d:12:be:77:96:78:c3:07:01:62:f4:9f:
                    7e:c7:05:60:8d:9e:b9:ae:37:12:04:aa:c8:fb:00:
                    e3:a8:20:ae:d3:e3:46:c4:7b:11:53:fa:1b:77:35:
                    0c:c9:ac:d5:55:a1:6d:d5:93:c7:25:fd:75:bd:64:
                    ab:46:85:b4:2c:9b:2c:4f:84:f0:e9:c0:22:b3:3b:
                    e6:39:e2:f9:2d:95:f7:ed:27:fc:fd:f9:72:0d:cb:
                    a3:70:7a:9e:02:df:33:06:3c:c8:47:15:37:fb:1f:
                    8f:ec:ac:1e:62:d5:8e:79:5b:8e:9b:27:1a:de:9e:
                    33:8e:06:d5:92:73:82:0f:07:65:d4:51:22:8b:55:
                    0e:a5:89:4c:25:dd:5d:d7:95:35:90:c9:c5:88:39:
                    bc:9b:cd:8a:7e:a1:6d:9c:bf:9e:fd:73:f2:44:db:
                    12:a7:93:cf:bc:48:96:80:fc:2a:33:43:d7:eb:8a:
                    1e:b1:c8:31:f9:bc:02:8e:fb:93:45:18:f3:69:17:
                    8e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:07:10:C0:42:D4:3F:20:5A:64:66:8B:94:2E:8E:87:33:55:10:35
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230342e302f32332d3233203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:62:51:ff:68:dc:de:d7:be:30:45:dd:1f:ab:5a:d5:44:a4:
         59:88:73:0e:48:69:64:a5:da:08:23:67:f6:63:ba:b6:12:e9:
         fb:7d:28:3a:cb:cb:5d:b2:fe:ca:0f:b4:7c:86:5f:9f:50:18:
         3e:5f:42:d2:66:b2:95:cd:78:75:81:32:5c:ef:12:85:78:da:
         8f:70:a8:4d:15:62:ff:55:0a:95:7f:32:0b:2d:9f:59:3e:60:
         4e:63:6e:03:aa:47:dc:a9:61:e5:fd:93:20:ca:40:e2:8b:54:
         3b:94:4b:e2:c6:7f:50:29:7e:f1:bb:0c:8c:30:00:73:7a:21:
         d8:40:10:e6:2b:54:2d:b3:de:ff:da:e2:1e:7d:62:ba:66:8e:
         46:d1:96:ff:3a:6a:e0:4c:f7:6c:c1:db:5c:5d:a3:12:0d:78:
         df:e8:92:07:a8:1a:d8:b0:61:8e:2f:76:bd:54:12:0c:6b:4a:
         cf:4d:fb:0c:fe:b9:45:f5:e7:1e:8c:65:2d:4d:86:69:94:9f:
         74:e9:2d:ad:a2:c7:36:34:6d:f7:11:72:28:16:02:68:62:f9:
         90:76:78:5f:18:86:d1:b3:70:0e:2c:ae:ad:66:96:e3:c1:0b:
         13:91:e3:79:a6:9b:04:c5:bc:28:ee:6a:7a:a7:79:eb:28:8d:
         35:15:85:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:27:11 2025 by rpki-client