Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa
File:                     3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa (raw, json)
Hash identifier:          vYPGfQ71xlVYQuztFUq87FfrmLwi6eBol3dRLs6Alkw=
Subject key identifier:   FC:6B:53:B4:9C:B7:B2:77:7B:15:B8:11:3A:7D:4A:67:BF:FD:83:3B
Certificate issuer:       /CN=71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0
Certificate serial:       77E1B9A4F7824102F8704324CA5FB25E14C0C708
Authority key identifier: 71:AF:85:1F:A1:AB:7F:3F:8F:F5:9D:7E:8C:21:2F:57:81:89:CF:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa
Signing time:             Wed 25 Oct 2023 19:47:46 +0000
ROA not before:           Wed 25 Oct 2023 19:42:46 +0000
ROA not after:            Wed 23 Oct 2024 19:47:46 +0000
asID:                     53132
IP address blocks:        177.125.144.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e1:b9:a4:f7:82:41:02:f8:70:43:24:ca:5f:b2:5e:14:c0:c7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0
        Validity
            Not Before: Oct 25 19:42:46 2023 GMT
            Not After : Oct 23 19:47:46 2024 GMT
        Subject: CN=FC6B53B49CB7B2777B15B8113A7D4A67BFFD833B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c3:b0:b1:6e:76:62:9f:82:95:51:40:3d:01:
                    5b:5f:38:2c:72:e5:9a:67:b5:c0:31:8e:3d:84:5f:
                    9d:5c:d5:10:15:29:24:e3:d8:1d:41:86:a1:b8:a2:
                    a5:92:4a:ba:50:3d:eb:ac:c0:d2:6a:14:38:6f:3b:
                    fe:40:01:ab:cd:e2:d2:ed:9e:c2:7c:70:ee:d0:da:
                    48:f6:97:b9:18:08:46:8f:40:45:d4:a3:49:13:66:
                    b9:f3:c5:6f:6e:35:f4:07:1b:c6:ab:fc:24:6e:44:
                    dd:6b:ae:d1:f9:f8:89:37:8f:c7:0f:5f:26:d3:4d:
                    cd:54:fc:30:19:b2:b3:2a:64:cf:72:e5:b1:0b:7c:
                    73:1c:b1:89:3b:78:94:d5:83:e3:4a:98:89:23:dd:
                    9d:72:8a:92:a6:64:36:42:42:9a:a7:15:22:6b:c2:
                    f7:6d:ff:ca:9d:ca:b2:e9:f0:e7:84:86:d7:5d:ba:
                    29:bf:50:22:35:03:40:03:99:13:8a:2a:3c:2b:c3:
                    26:ef:07:80:70:5a:6f:e0:16:93:fd:14:f4:4a:d9:
                    e7:c9:f4:eb:53:28:c1:f7:ba:bf:92:e6:69:95:ef:
                    b6:10:1f:fe:57:10:23:74:bb:3f:03:47:06:1d:f8:
                    d2:ac:c9:9f:4a:2c:40:db:fa:23:d2:45:3b:ef:fd:
                    65:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6B:53:B4:9C:B7:B2:77:7B:15:B8:11:3A:7D:4A:67:BF:FD:83:3B
            X509v3 Authority Key Identifier:
                keyid:71:AF:85:1F:A1:AB:7F:3F:8F:F5:9D:7E:8C:21:2F:57:81:89:CF:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71AF851FA1AB7F3F8FF59D7E8C212F578189CFB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/0/3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:8c:9b:e0:1f:13:5f:22:d7:f7:e3:ae:b1:e1:b8:05:69:1c:
         8f:44:23:c7:91:1f:82:0f:83:18:30:99:c0:05:4a:25:c7:9c:
         45:7a:2b:18:2d:b9:3c:e0:9a:36:6b:1f:34:11:ed:30:47:b8:
         be:45:d3:05:66:dd:da:12:89:ad:51:9c:00:50:ef:38:8b:67:
         fe:e2:70:5d:ee:d2:7b:b6:10:e2:18:cd:5f:be:d4:da:d0:a2:
         70:f3:42:e6:d7:94:7e:43:46:d9:d9:30:c6:90:a0:89:3d:e2:
         49:02:f4:e3:c6:d1:42:40:b9:25:ca:38:fe:1a:e4:1c:e6:a9:
         bb:e5:5a:ce:96:d7:85:95:f9:4a:fa:37:09:fc:8b:cb:aa:20:
         2f:15:31:7a:d3:0f:f1:9c:a3:0e:70:fa:39:0f:8f:b4:ae:1b:
         38:c2:f1:e2:b6:49:42:99:d8:94:b7:9a:ee:6f:21:f9:27:49:
         b3:78:2b:cf:5b:f5:22:99:61:f4:3f:2e:bc:25:56:85:2e:f2:
         2e:f8:2b:c1:c8:56:32:51:4f:b2:65:96:97:86:ae:48:e8:90:
         5e:b2:b5:eb:b9:fc:d4:62:b4:2f:6f:12:de:87:9f:3a:a1:94:
         ff:b6:a4:d3:84:b5:c4:b5:57:de:d8:52:c2:2e:81:a3:d4:22:
         89:32:14:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:02 2025 by rpki-client