Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa
File:                     3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa (raw, json)
Hash identifier:          O4tyjqB7M8QnV5PfkYSGtS8mrP5EcX29xJIxR064xaE=
Subject key identifier:   A7:C7:AB:D2:46:6C:01:55:E9:6A:E8:5B:07:5B:63:47:E8:76:27:38
Certificate issuer:       /CN=6BD10BD7311C36E4427262C587B0519198C93849
Certificate serial:       2765CD5BFA0F6C3F9CD2758DF02F92960F1510FA
Authority key identifier: 6B:D1:0B:D7:31:1C:36:E4:42:72:62:C5:87:B0:51:91:98:C9:38:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD10BD7311C36E4427262C587B0519198C93849.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa
Signing time:             Tue 11 Feb 2025 17:58:16 +0000
ROA not before:           Tue 11 Feb 2025 17:53:16 +0000
ROA not after:            Tue 10 Feb 2026 17:58:16 +0000
asID:                     271624
IP address blocks:        177.73.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:65:cd:5b:fa:0f:6c:3f:9c:d2:75:8d:f0:2f:92:96:0f:15:10:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD10BD7311C36E4427262C587B0519198C93849
        Validity
            Not Before: Feb 11 17:53:16 2025 GMT
            Not After : Feb 10 17:58:16 2026 GMT
        Subject: CN=A7C7ABD2466C0155E96AE85B075B6347E8762738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:09:43:e0:46:9c:fc:97:11:bb:7b:e7:80:
                    a7:6a:7d:0d:11:b9:d0:18:c9:1e:46:be:48:14:9c:
                    09:53:1e:af:e4:3e:7d:f2:3a:c2:24:b7:6f:bb:aa:
                    f2:71:be:c2:81:e8:19:de:9c:7a:b5:53:9c:e3:99:
                    b8:5e:4e:18:98:f9:62:db:65:48:7a:8e:f5:e1:93:
                    72:74:be:fa:28:16:5c:b3:58:3b:4c:9c:2b:45:fa:
                    80:88:d5:11:01:b9:70:a5:83:72:66:f9:de:c7:0f:
                    b4:8b:5c:74:2c:96:25:66:e4:a0:fb:10:74:bb:37:
                    b2:79:e4:c7:55:68:22:42:80:e5:2d:cd:4c:5c:fe:
                    63:22:64:dd:4e:77:68:87:40:29:98:7f:1b:35:0a:
                    b3:71:9e:02:c8:3e:2d:84:a4:22:cf:2a:cd:01:7d:
                    6a:d6:14:a5:c5:47:e8:89:7c:25:59:a7:cd:34:e5:
                    6e:97:9a:12:d1:56:74:bf:4d:dd:d3:ea:40:a8:6b:
                    7c:0a:d3:c1:ad:bb:ca:c5:86:d5:3d:ae:b2:28:eb:
                    26:3a:e5:b9:86:04:9b:53:10:07:fd:c2:a8:03:19:
                    45:f4:89:fe:04:27:39:61:a3:c7:41:96:05:93:04:
                    ff:d3:be:2c:86:76:d0:88:dd:0f:78:de:22:c7:b1:
                    a8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C7:AB:D2:46:6C:01:55:E9:6A:E8:5B:07:5B:63:47:E8:76:27:38
            X509v3 Authority Key Identifier:
                keyid:6B:D1:0B:D7:31:1C:36:E4:42:72:62:C5:87:B0:51:91:98:C9:38:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/6BD10BD7311C36E4427262C587B0519198C93849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD10BD7311C36E4427262C587B0519198C93849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:3a:54:03:27:79:34:13:79:b4:d0:07:52:d1:ad:99:67:59:
         cc:7d:c9:9f:28:c4:11:6f:9b:55:0b:3a:a9:da:19:73:1e:3c:
         06:d8:a9:44:df:4c:51:72:55:5f:44:a4:d5:a1:83:e9:5e:af:
         b6:62:73:ba:49:5b:02:c5:a6:a9:e1:11:1a:76:c2:b4:57:a5:
         ff:72:79:28:a7:a7:f0:bc:8f:99:f8:8a:d1:cd:fe:e1:3f:61:
         a4:ff:39:67:4b:e6:f4:ea:f7:c1:7e:7f:69:0c:03:59:70:c7:
         55:da:ec:85:5a:8e:7e:69:15:97:d4:4c:dc:08:68:05:7b:03:
         8e:bf:90:7b:75:49:92:2c:d6:d3:6e:ee:f7:c4:00:bc:8e:e5:
         e0:9e:ad:4c:57:0c:22:d3:28:0e:6f:63:e9:85:f4:ee:74:7d:
         d1:fe:53:85:8a:f8:25:1d:39:10:76:4c:8a:43:03:71:cb:2a:
         77:35:88:52:2e:e1:0a:df:9d:4e:80:f0:bb:50:54:80:4b:12:
         3e:52:b0:c8:a6:28:d0:77:d7:6b:27:2c:34:70:a0:47:05:68:
         11:b1:03:2f:73:55:ca:54:6a:32:1e:5c:5b:eb:46:86:c5:92:
         78:9f:0b:36:5d:fb:99:bc:70:a3:03:6b:55:2e:64:43:79:f9:
         e9:cd:05:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:47:19 2025 by rpki-client