Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37342e302f32342d3234203d3e20323634343936.roa
File:                     3137372e35352e37342e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier:          KtDdMh3jZQDrjN6y8LqLHR9TR+knmXTcP/v8+Cvqgd4=
Subject key identifier:   7F:32:18:78:A3:C8:9B:E7:F5:53:C3:84:DB:59:C3:70:6B:6D:35:13
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       0CFDA15CD4FEE2AF1840977E3CB587791CA79B66
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37342e302f32342d3234203d3e20323634343936.roa
Signing time:             Wed 26 Feb 2025 16:41:13 +0000
ROA not before:           Wed 26 Feb 2025 16:36:13 +0000
ROA not after:            Wed 25 Feb 2026 16:41:13 +0000
asID:                     264496
IP address blocks:        177.55.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fd:a1:5c:d4:fe:e2:af:18:40:97:7e:3c:b5:87:79:1c:a7:9b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Feb 26 16:36:13 2025 GMT
            Not After : Feb 25 16:41:13 2026 GMT
        Subject: CN=7F321878A3C89BE7F553C384DB59C3706B6D3513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:8d:e7:c3:0c:c6:30:41:e7:43:9b:b3:4e:
                    9a:5a:63:b0:12:00:f7:e3:05:c5:79:0b:24:aa:c3:
                    6c:09:26:95:51:df:db:c2:e1:5c:13:1a:8b:74:51:
                    b4:4c:91:c0:49:4a:98:32:85:31:83:ae:2e:c1:70:
                    f6:27:e8:d4:b8:6e:87:8f:b4:60:1e:58:b5:ac:ad:
                    22:16:d0:6a:a8:71:55:c7:0b:34:98:54:d3:8d:e2:
                    21:19:c0:c4:84:d6:dd:85:c6:c8:62:3f:21:91:00:
                    0e:92:7a:2c:ef:fa:fd:7d:e9:8c:d5:8e:00:c3:fa:
                    20:bf:9a:52:8a:98:5e:fe:3e:b2:ff:af:75:7c:80:
                    df:ca:3f:63:c9:c5:20:79:aa:6e:b6:e2:41:f2:c7:
                    1b:ae:fe:ed:ae:4e:26:e8:41:f3:05:ca:46:08:5e:
                    58:11:22:cb:75:83:6b:5a:46:2d:6d:ab:b8:2b:a9:
                    44:52:56:cd:33:a1:78:5b:cd:e9:98:bc:47:43:53:
                    e2:b1:e9:80:a7:65:fc:40:0a:42:d0:ab:ed:86:98:
                    c5:8a:50:f6:09:8f:fa:92:d4:b2:b7:f6:24:b1:1c:
                    bc:ea:08:d4:2e:b9:f6:0e:4d:29:17:81:38:5a:27:
                    ae:43:8a:44:00:66:4f:2c:2b:e5:e8:3c:6a:0f:fd:
                    50:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:32:18:78:A3:C8:9B:E7:F5:53:C3:84:DB:59:C3:70:6B:6D:35:13
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37342e302f32342d3234203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:24:06:38:26:6d:c3:7c:fe:6e:ff:45:8a:2e:9f:a0:5d:b8:
         9f:01:67:b0:1e:c1:78:1d:30:dc:ec:db:5b:5f:ce:b5:03:53:
         1a:78:04:17:1b:ce:60:ff:6c:f6:d7:34:5b:d5:93:da:c5:bb:
         e8:7e:cd:36:4e:3b:70:64:7a:39:e7:32:bd:4f:75:07:b4:40:
         87:31:fa:dd:6a:08:a0:11:50:3b:58:9a:6b:e5:d2:d9:76:dc:
         a4:f9:41:a1:4f:32:ba:3a:2e:71:1f:90:e6:05:58:c0:b8:ae:
         d1:65:2d:cf:a7:e9:69:88:ba:dc:d0:c4:59:eb:ea:7e:9a:a8:
         a4:b9:86:0e:97:96:81:89:2a:8a:ec:e2:39:99:60:e9:ba:ee:
         70:7c:9e:41:44:8a:7f:3c:b4:a4:d6:71:aa:b2:00:76:09:c0:
         0c:8b:c4:cb:bb:2a:e3:31:0e:05:f3:2e:ba:05:b7:ef:fb:ec:
         7f:1a:6c:02:23:46:c1:45:c6:d8:b1:4c:9f:96:30:ef:16:ba:
         35:43:8e:b9:15:3f:04:92:8c:48:61:9a:98:36:29:ac:11:85:
         30:12:72:3f:72:5f:dc:32:07:26:60:95:d3:20:de:58:fa:a8:
         25:6e:ab:3b:72:29:28:7b:f3:0d:15:79:2c:9a:dc:e9:6c:27:
         7e:9a:34:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:34 2025 by rpki-client