Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/3137372e3132342e31392e302f32342d3234203d3e20323632333132.roa
File:                     3137372e3132342e31392e302f32342d3234203d3e20323632333132.roa (raw, json)
Hash identifier:          LmmYFXkqczckMkDj8kGaOTqR5yD+EknZkwvPGIkWBsI=
Subject key identifier:   DA:C2:2F:F3:14:AA:76:A8:63:2C:91:56:BA:19:DC:D2:29:50:F6:05
Certificate issuer:       /CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
Certificate serial:       3F96E8AFE954A9C883745F293C680A7F998FE7E7
Authority key identifier: 2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/3137372e3132342e31392e302f32342d3234203d3e20323632333132.roa
Signing time:             Fri 16 Aug 2024 16:26:32 +0000
ROA not before:           Fri 16 Aug 2024 16:21:32 +0000
ROA not after:            Fri 15 Aug 2025 16:26:32 +0000
asID:                     262312
IP address blocks:        177.124.19.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:96:e8:af:e9:54:a9:c8:83:74:5f:29:3c:68:0a:7f:99:8f:e7:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
        Validity
            Not Before: Aug 16 16:21:32 2024 GMT
            Not After : Aug 15 16:26:32 2025 GMT
        Subject: CN=DAC22FF314AA76A8632C9156BA19DCD22950F605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:2a:af:13:25:b3:e3:37:05:2f:18:b9:b2:
                    1e:87:c3:58:82:cf:7e:36:5a:24:6f:79:19:84:6d:
                    4f:50:a5:6e:a8:3a:1c:72:d2:31:04:b3:af:61:fd:
                    ab:30:22:93:ef:1a:9c:9e:ad:40:a0:35:43:53:ba:
                    30:e1:fa:bd:1c:ec:d6:0e:6c:91:c4:78:e5:84:5a:
                    8a:e6:b5:aa:88:19:a7:4b:30:d1:de:f8:67:41:c3:
                    c0:fd:a8:e3:11:d2:52:e4:39:ae:1e:74:73:bf:51:
                    67:3c:ef:99:64:45:26:2c:89:eb:5e:b5:39:53:00:
                    bb:5e:15:14:34:60:2b:e6:10:69:8f:bd:a1:b2:f8:
                    96:41:c1:f3:41:c6:ab:e6:f2:fe:39:54:1d:67:0a:
                    3d:35:f3:4d:b9:4d:b5:6b:bc:65:35:8c:b0:3b:11:
                    ab:13:08:f4:64:9e:7e:4a:fa:1a:fa:ca:d1:3d:29:
                    76:20:12:fa:11:8f:d4:25:a9:25:c6:84:33:66:53:
                    7d:eb:db:3f:02:2c:b7:cc:02:79:34:09:c6:97:92:
                    24:36:91:b6:20:c7:03:39:4e:84:d5:36:b4:d5:9a:
                    45:ed:f1:cd:8c:9b:a2:ec:ed:7c:e1:52:5c:b8:d0:
                    75:59:35:1d:0f:f3:f7:f8:76:ef:d5:78:cf:fd:c7:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C2:2F:F3:14:AA:76:A8:63:2C:91:56:BA:19:DC:D2:29:50:F6:05
            X509v3 Authority Key Identifier:
                keyid:2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/2D960C563AE2AE7815A5AFF54826A703C1669FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/3137372e3132342e31392e302f32342d3234203d3e20323632333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:3e:2f:86:ed:ef:15:7e:e0:25:5e:0f:c2:f5:a9:9a:60:56:
         b8:b3:47:3b:e5:30:4e:7a:2f:52:e6:a3:47:28:89:53:57:29:
         48:3b:73:30:48:b3:de:72:95:0a:73:eb:56:b6:2e:c7:97:06:
         54:fe:de:8a:c7:69:b2:c5:4d:7d:38:e6:fb:32:a5:a3:06:e6:
         56:2c:ff:f5:d8:2d:08:b9:c1:e9:e8:64:16:21:ec:1d:c9:35:
         05:1d:44:3b:2c:9a:a2:85:16:87:75:31:d0:a2:19:bf:fe:3c:
         a7:de:df:71:80:2f:a6:f5:11:c3:ca:a2:90:22:47:c9:2e:8e:
         5c:95:30:55:f9:a0:19:a0:78:3a:bc:a0:34:42:20:fe:49:05:
         6e:60:42:7c:41:05:eb:41:13:ad:69:f2:a0:c3:33:4c:51:a7:
         42:8d:1b:13:66:48:e1:9e:48:55:6a:a4:c3:ee:db:3d:51:55:
         f8:80:e7:c2:3b:7b:1d:c7:04:fe:50:c8:98:a6:ae:7e:6d:63:
         a1:32:9a:80:1e:38:d2:4c:94:39:fa:e3:1a:af:a8:8c:bf:35:
         b5:66:76:9a:5b:7b:ef:a1:a0:8e:e2:fe:f3:42:a8:67:50:ae:
         50:9f:7d:31:d7:fc:b8:b6:2a:f2:fc:88:25:08:9a:06:d7:7f:
         42:5f:84:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:37:59 2025 by rpki-client