Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137372e31312e312e302f32342d3234203d3e203532393632.roa
File:                     3137372e31312e312e302f32342d3234203d3e203532393632.roa (raw, json)
Hash identifier:          jWvLAi0nfZf5G0jPK55b4myKJz98qD0Ayc81fO44qwY=
Subject key identifier:   CB:C2:28:42:E5:33:88:79:91:2E:53:49:D9:00:00:C5:AA:A2:A3:DD
Certificate issuer:       /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial:       7DEB4EFBAE5E743248CF97E5F856FD6A9EA0FA3A
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137372e31312e312e302f32342d3234203d3e203532393632.roa
Signing time:             Thu 27 Mar 2025 20:36:42 +0000
ROA not before:           Thu 27 Mar 2025 20:31:42 +0000
ROA not after:            Thu 26 Mar 2026 20:36:42 +0000
asID:                     52962
IP address blocks:        177.11.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:eb:4e:fb:ae:5e:74:32:48:cf:97:e5:f8:56:fd:6a:9e:a0:fa:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
        Validity
            Not Before: Mar 27 20:31:42 2025 GMT
            Not After : Mar 26 20:36:42 2026 GMT
        Subject: CN=CBC22842E5338879912E5349D90000C5AAA2A3DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:36:f2:ac:cc:f4:9c:2e:e1:46:f5:b4:56:84:
                    ac:3c:b3:ef:43:ca:c4:7c:85:04:ac:7f:e1:05:49:
                    96:eb:6c:4e:c8:24:5a:ba:27:e7:3b:65:b8:61:3c:
                    9d:2a:fe:2f:6b:2c:8b:86:53:3d:43:9a:46:c9:99:
                    a4:74:5a:8c:ca:57:e2:1b:a5:8a:6c:ad:ae:84:26:
                    ff:25:ca:10:20:fe:81:5e:59:c1:55:42:bb:5e:67:
                    db:77:a1:34:9f:f7:35:ef:fd:37:9c:16:80:c2:2d:
                    22:d7:04:af:c7:3c:bc:4f:55:8f:12:2b:c7:6a:6e:
                    ca:2e:7c:62:da:c8:87:06:4f:90:68:2b:6b:82:a0:
                    20:98:3f:90:c8:1a:5b:ac:42:7c:d7:95:78:fb:40:
                    3c:f7:58:66:83:67:95:86:87:c3:cd:fe:f9:50:57:
                    98:ac:56:32:bc:d9:41:14:de:78:8d:05:48:b3:bb:
                    cf:0b:1f:3d:ed:38:55:a6:05:a0:76:96:bd:b2:31:
                    1c:d7:20:4b:48:02:3a:6b:6d:f5:df:62:7a:cf:09:
                    ee:dd:c4:6f:c0:33:cd:4c:19:5b:2a:a7:21:b8:8b:
                    9c:1c:a3:dc:c5:8e:d9:f8:2d:ec:65:c5:3d:cf:bd:
                    eb:83:f9:7f:45:3f:2a:96:22:1a:4c:e0:ca:3f:a7:
                    c5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C2:28:42:E5:33:88:79:91:2E:53:49:D9:00:00:C5:AA:A2:A3:DD
            X509v3 Authority Key Identifier:
                keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137372e31312e312e302f32342d3234203d3e203532393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:f9:59:4e:25:3d:4f:3a:be:36:f5:4e:5e:1a:ff:49:1a:29:
         5f:62:63:d0:52:fa:48:61:61:7e:d3:6f:96:33:a4:f7:1d:d5:
         da:74:d5:f3:a3:9d:13:e4:95:b1:2a:3d:d9:39:b2:24:8c:42:
         30:df:b7:98:70:f0:c7:c0:3c:1e:56:2c:80:f0:58:98:bd:4e:
         b4:f7:e1:10:1f:c1:22:a4:9d:f1:b2:08:f1:93:4e:2d:09:ef:
         ca:d9:fd:10:62:87:cc:df:eb:74:99:72:d6:eb:11:83:0b:90:
         ca:b3:cc:38:09:35:00:fa:c0:37:8e:bb:1b:94:90:f6:79:e2:
         bd:7a:49:17:85:90:5a:a8:bf:8d:80:e6:ef:dd:a8:bb:94:7c:
         df:b7:b8:d3:4c:c3:7a:ce:36:a2:7d:49:54:39:c3:26:fc:50:
         ac:4c:7b:08:87:3d:28:b1:ea:eb:e1:56:28:0e:15:dd:fb:3c:
         85:11:4e:e5:0e:cb:ab:2f:2d:b7:66:4d:42:39:56:c2:2f:59:
         d4:10:e3:42:b5:50:8d:a4:64:f0:31:94:0c:96:4f:9f:fa:04:
         07:c9:68:10:1c:a0:0a:da:46:69:c6:94:80:d3:fb:2b:20:bf:
         65:9b:50:29:c6:7f:19:a9:bb:43:ca:f8:ee:2f:65:4a:ab:b2:
         8b:48:8a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:13:21 2025 by rpki-client