Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa
File:                     3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa (raw, json)
Hash identifier:          7fwiEuhjbGywbiIdUszGni67G3frQOGGH54RBi4CW7s=
Subject key identifier:   C7:FF:06:C6:88:C6:F8:2D:9E:12:0F:A3:86:CB:F7:23:D5:EE:9F:24
Certificate issuer:       /CN=B53A77B5E460044CB626F7588E1A91702B1AE08E
Certificate serial:       60821B948B8B5B10BC2CEBC52832EE945958EEA1
Authority key identifier: B5:3A:77:B5:E4:60:04:4C:B6:26:F7:58:8E:1A:91:70:2B:1A:E0:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa
Signing time:             Thu 06 Mar 2025 04:33:06 +0000
ROA not before:           Thu 06 Mar 2025 04:28:06 +0000
ROA not after:            Thu 05 Mar 2026 04:33:06 +0000
asID:                     53132
IP address blocks:        177.125.144.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:82:1b:94:8b:8b:5b:10:bc:2c:eb:c5:28:32:ee:94:59:58:ee:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B53A77B5E460044CB626F7588E1A91702B1AE08E
        Validity
            Not Before: Mar  6 04:28:06 2025 GMT
            Not After : Mar  5 04:33:06 2026 GMT
        Subject: CN=C7FF06C688C6F82D9E120FA386CBF723D5EE9F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:48:c3:2b:b9:aa:c2:a8:d7:52:c3:ba:80:
                    ca:c1:a5:17:7b:bb:f4:33:ca:79:67:ff:71:19:38:
                    ef:2c:ad:99:44:7b:70:8e:ce:c5:de:93:65:f3:46:
                    92:62:c8:60:65:72:34:75:43:ff:fc:a3:2d:5b:f6:
                    54:35:71:20:b1:1f:0f:ed:18:3c:3b:1f:a5:a0:59:
                    af:22:f8:b4:0f:be:2a:08:b9:93:79:f5:ff:83:74:
                    df:82:f5:70:26:cb:76:6d:ca:e5:44:23:15:35:bc:
                    21:3f:e7:90:f2:96:d5:f5:ec:2c:c2:89:ad:e9:51:
                    9f:b8:f8:0a:ac:85:d2:15:8b:ce:73:22:de:d5:ff:
                    66:b2:de:85:b8:d2:a0:82:8b:25:33:34:82:2d:37:
                    93:de:3b:ad:9c:57:43:66:1f:a7:37:79:9c:5d:36:
                    c5:e1:ac:50:de:be:ed:d0:9c:24:df:e3:ce:15:e9:
                    41:62:2a:e6:30:6d:db:1d:8d:35:10:a0:df:1d:ad:
                    42:4c:72:4e:af:e4:0e:32:70:d1:8f:90:20:30:85:
                    c2:8e:87:d4:ce:35:d6:61:23:1d:1d:4d:4a:b9:0a:
                    3c:82:6a:78:78:d4:e0:75:92:f7:46:07:af:80:27:
                    f9:db:f2:e6:a4:52:97:3c:34:77:32:d8:de:52:6e:
                    f8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FF:06:C6:88:C6:F8:2D:9E:12:0F:A3:86:CB:F7:23:D5:EE:9F:24
            X509v3 Authority Key Identifier:
                keyid:B5:3A:77:B5:E4:60:04:4C:B6:26:F7:58:8E:1A:91:70:2B:1A:E0:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:dc:f9:a8:e9:8a:39:25:f9:30:3c:17:98:39:ac:a7:63:b5:
         32:04:69:4f:e8:20:23:ad:77:1a:cb:df:d4:7c:40:c0:af:73:
         00:9d:7a:63:60:19:6f:fe:a6:63:2d:48:b8:38:f9:13:9f:91:
         ad:00:ff:4e:fe:b3:45:7a:69:bb:68:e7:04:98:a3:93:13:dc:
         ab:3a:f1:52:2d:79:83:98:9e:c7:26:64:67:0e:4d:3c:9f:56:
         45:1f:71:ae:82:eb:c7:4c:51:33:4e:52:a5:d0:3a:04:7f:2b:
         47:8d:97:fb:2f:57:68:9b:9f:b9:37:79:68:b4:a8:d7:bf:64:
         b1:43:c1:3a:7f:9b:f2:0e:b0:31:4c:21:51:4d:e2:2f:78:c8:
         8d:2a:24:f0:4c:1f:da:67:15:ce:15:57:53:2d:5e:72:8b:58:
         f5:fc:83:d1:1b:19:61:a7:3a:73:91:2e:ce:b7:27:55:62:3a:
         45:3e:9c:92:10:de:67:af:43:cf:87:51:f4:79:cb:d5:0f:49:
         98:5a:96:69:17:bb:d9:ba:a8:1e:2b:9c:4e:4a:4c:d8:e9:51:
         7c:76:4a:72:dc:b7:eb:00:63:a8:90:85:f3:70:fc:3d:2c:3d:
         bd:8d:bc:db:29:0d:33:b5:75:67:17:6a:2a:d5:4c:25:8a:63:
         54:66:c5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:00:33 2025 by rpki-client