Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37362e302f32342d3234203d3e20323634343936.roa
File:                     3137372e35352e37362e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier:          LhfsIyZOv0xIm+4t0N/JGKYjixv8GhwvAiXiLY9nLFA=
Subject key identifier:   0E:30:38:13:50:26:55:9B:FF:DB:28:42:46:CA:95:16:FD:8A:6E:15
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       06B96A063E8CF43B911B7262E0D174FA557EB030
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37362e302f32342d3234203d3e20323634343936.roa
Signing time:             Wed 26 Feb 2025 16:41:23 +0000
ROA not before:           Wed 26 Feb 2025 16:36:23 +0000
ROA not after:            Wed 25 Feb 2026 16:41:23 +0000
asID:                     264496
IP address blocks:        177.55.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b9:6a:06:3e:8c:f4:3b:91:1b:72:62:e0:d1:74:fa:55:7e:b0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Feb 26 16:36:23 2025 GMT
            Not After : Feb 25 16:41:23 2026 GMT
        Subject: CN=0E3038135026559BFFDB284246CA9516FD8A6E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:04:05:3c:41:ab:7e:f4:5b:be:14:47:c8:
                    33:6e:00:7d:b8:1f:ec:06:1c:2a:73:d9:bb:80:12:
                    97:44:a3:0d:1f:6f:e1:1b:a2:b4:11:f7:46:95:aa:
                    b6:72:0d:2f:7d:6b:f6:ac:80:f7:85:92:6b:c9:e1:
                    3b:88:78:81:fc:c0:c1:f7:b1:e6:7f:eb:15:fc:a6:
                    b3:20:37:07:9c:da:a3:08:c9:d0:35:bb:e4:38:e9:
                    ba:9e:ab:92:8f:85:1a:10:16:34:26:04:f3:f7:b6:
                    f9:21:fb:28:4c:60:3b:53:a0:d1:22:79:cc:66:8d:
                    63:d4:e7:ff:b4:78:25:18:68:5f:69:78:99:b3:2e:
                    9b:9e:63:bb:2f:cd:bd:db:a8:8d:f6:01:30:eb:a9:
                    15:d8:2a:06:d4:57:5a:05:d6:0b:14:38:0d:93:27:
                    ee:05:42:8f:b2:b2:3c:ff:ee:b2:21:95:58:f7:5a:
                    0b:5f:aa:b2:f3:7e:8e:d2:6c:3f:f2:b4:65:10:1f:
                    23:b1:d3:62:af:7f:cf:6f:c4:f5:2e:31:e9:48:ba:
                    6f:cd:7b:52:43:d9:6b:af:04:df:f0:32:a8:be:03:
                    bf:ec:08:cd:6d:e6:37:9e:38:71:69:d0:ba:2c:ee:
                    18:15:00:45:0e:45:89:c7:ff:fa:86:db:fb:94:ef:
                    2e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:30:38:13:50:26:55:9B:FF:DB:28:42:46:CA:95:16:FD:8A:6E:15
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37362e302f32342d3234203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:db:bc:ee:f9:a9:cd:69:97:7c:fb:e8:0c:1f:ed:ba:64:09:
         e3:50:17:84:9e:dd:1c:3d:37:2c:80:96:73:08:2e:26:7e:48:
         16:44:6a:a4:1f:5e:ad:76:fb:98:ed:f5:0a:a0:08:a2:85:af:
         ba:0d:c5:6d:aa:9d:d8:1d:46:e6:ad:bb:25:50:0e:1c:77:36:
         1c:bb:a9:a8:ef:9d:c8:3c:a8:2a:a7:27:c4:76:37:d8:89:02:
         9d:6f:38:2a:0d:8d:73:97:af:9a:6f:23:c7:48:df:b2:f5:f5:
         a1:b2:9f:d3:70:af:49:c1:d9:2c:e0:38:ff:37:2d:c7:c3:c8:
         4f:46:6b:19:8e:5a:99:cc:4a:c4:9c:c0:26:49:d3:2c:56:5e:
         f6:32:e4:09:04:ce:9d:26:ff:e2:83:09:9f:df:9c:11:90:79:
         ad:c1:7e:3f:86:c1:77:8a:9e:5c:f6:3c:db:06:b6:28:05:9f:
         e6:68:fc:cd:2b:37:e0:67:a3:48:53:a3:32:05:97:cc:5d:da:
         7e:0d:1b:bc:1f:b1:59:8b:d2:95:07:74:3c:8e:db:c3:66:14:
         c5:95:9e:7c:29:06:e9:e4:ba:30:ac:52:56:ee:05:20:a9:af:
         9a:2e:b9:03:8f:72:29:99:32:d8:1b:02:41:0d:c1:be:77:ff:
         8a:42:6d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:04 2025 by rpki-client