Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e38382e302f32332d3233203d3e203238323737.roa
File:                     3137372e3133362e38382e302f32332d3233203d3e203238323737.roa (raw, json)
Hash identifier:          NbGMi/uJ0wTIKYmNTiZOdTA4IC2clfU2CFDnB9UFfI8=
Subject key identifier:   1F:D5:81:59:5F:CF:84:B3:5A:2A:9F:83:D4:72:F4:B9:E3:76:FC:DB
Certificate issuer:       /CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
Certificate serial:       42DD0576077406E28AF9C8350747A4AF792E64C7
Authority key identifier: 37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e38382e302f32332d3233203d3e203238323737.roa
Signing time:             Thu 04 Aug 2022 13:00:01 +0000
ROA not before:           Thu 04 Aug 2022 12:55:01 +0000
ROA not after:            Fri 04 Aug 2023 13:00:01 +0000
asID:                     28277
IP address blocks:        177.136.88.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:dd:05:76:07:74:06:e2:8a:f9:c8:35:07:47:a4:af:79:2e:64:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379516A7E8D4121902E3A7ED5868A1C4FE525D3F
        Validity
            Not Before: Aug  4 12:55:01 2022 GMT
            Not After : Aug  4 13:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d7:04:7b:c2:60:47:98:06:48:19:21:3a:47:
                    93:3f:a6:e7:d9:f7:de:48:8a:e8:54:19:ca:1a:4d:
                    dc:56:0e:8e:f3:36:30:29:27:43:29:8f:bc:9e:64:
                    ec:f1:01:9f:12:93:97:c3:7e:74:16:bd:83:4b:a4:
                    92:ff:61:f1:53:5f:7f:6b:67:1f:16:94:fb:58:be:
                    07:f4:d0:f3:4c:37:6d:7b:b6:65:c5:36:b6:49:32:
                    66:13:86:51:9b:4c:92:88:d6:e4:c9:f9:65:2a:34:
                    35:dd:aa:77:d1:6b:2b:f7:78:5e:85:17:20:4f:db:
                    0e:40:7b:a2:1f:51:8e:fe:7f:63:de:74:6c:58:de:
                    65:fb:ad:c3:f3:14:e4:28:e1:8f:6b:10:19:3f:32:
                    58:3f:9c:50:9c:9c:a6:85:58:a2:a7:b7:cd:83:a2:
                    f2:a9:7f:e4:f2:7a:84:27:92:68:f2:2b:75:a7:ff:
                    30:8d:3e:a9:c0:5a:cd:59:57:20:1b:01:0e:9b:16:
                    16:d5:00:ba:1e:ed:a1:85:ad:54:0b:44:63:c6:2b:
                    53:34:e8:49:83:8b:c3:0d:e6:b7:f6:7e:c6:9e:8c:
                    b1:ee:83:07:34:07:97:21:0a:96:84:54:9f:8b:d5:
                    37:1a:2b:45:e3:0d:ba:8c:6c:38:b5:e9:d8:8a:40:
                    e7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D5:81:59:5F:CF:84:B3:5A:2A:9F:83:D4:72:F4:B9:E3:76:FC:DB
            X509v3 Authority Key Identifier:
                keyid:37:95:16:A7:E8:D4:12:19:02:E3:A7:ED:58:68:A1:C4:FE:52:5D:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/379516A7E8D4121902E3A7ED5868A1C4FE525D3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e38382e302f32332d3233203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:3e:d4:0e:a9:16:b3:82:ba:5b:7d:02:e0:c3:b4:6e:f3:9e:
         d2:6f:0f:7e:47:1c:3a:01:13:85:37:c6:81:48:41:d0:39:c4:
         b8:d0:e7:fd:ef:f1:73:f8:9e:5d:f0:98:7a:b0:8f:ee:df:e5:
         2f:f1:e6:38:e8:7a:ba:b5:79:ae:03:c5:6b:d1:9a:b0:b9:31:
         5b:22:36:f9:ca:c5:02:0d:22:3a:ef:f5:5c:46:89:7b:71:59:
         02:8f:ea:7d:53:44:36:a9:c9:15:e3:d3:ba:df:f9:79:e2:6a:
         ac:36:23:91:0f:79:a0:d6:ce:c6:30:ae:79:12:3a:28:83:56:
         51:c2:9f:e4:e8:0a:c2:e4:d8:7c:e4:3c:73:35:cf:1f:e2:d8:
         a8:ac:6b:97:99:4d:d2:5a:42:31:38:7f:7a:60:1c:c6:7e:d5:
         19:7e:b3:a8:6c:13:ed:18:ab:ca:5a:3e:81:f3:27:30:da:f1:
         ae:0f:08:61:ad:85:76:5c:42:aa:17:cb:85:42:02:74:a1:e1:
         fc:26:0d:47:b3:dd:8e:6b:0b:34:66:db:06:3d:0b:3d:69:f2:
         8a:43:e9:02:72:0c:19:d9:e8:cf:f0:8d:88:5a:5c:ae:3e:df:
         bd:ba:e9:ca:e6:2a:c0:de:de:05:3d:36:08:f3:aa:07:43:09:
         bc:3f:d8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:36:15 2025 by rpki-client