Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32342d3332203d3e203532363331.roa
File:                     3137372e3132382e33302e302f32342d3332203d3e203532363331.roa (raw, json)
Hash identifier:          IpVxHRp9WRlCDVnbZmYUMyB+XsqNTQkR0X9rRwOMXOU=
Subject key identifier:   FE:87:F2:D4:4C:C3:5B:04:23:4C:CA:18:39:55:10:0C:2B:8A:25:C7
Certificate issuer:       /CN=E6EF5920C76E8B99B73F59D02E32581843FD5D00
Certificate serial:       67888B43F2F82289E7438FE92C55477EF1EE971E
Authority key identifier: E6:EF:59:20:C7:6E:8B:99:B7:3F:59:D0:2E:32:58:18:43:FD:5D:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6EF5920C76E8B99B73F59D02E32581843FD5D00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32342d3332203d3e203532363331.roa
Signing time:             Tue 31 Oct 2023 17:32:21 +0000
ROA not before:           Tue 31 Oct 2023 17:27:21 +0000
ROA not after:            Tue 29 Oct 2024 17:32:21 +0000
asID:                     52631
IP address blocks:        177.128.30.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:88:8b:43:f2:f8:22:89:e7:43:8f:e9:2c:55:47:7e:f1:ee:97:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EF5920C76E8B99B73F59D02E32581843FD5D00
        Validity
            Not Before: Oct 31 17:27:21 2023 GMT
            Not After : Oct 29 17:32:21 2024 GMT
        Subject: CN=FE87F2D44CC35B04234CCA183955100C2B8A25C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:13:09:0e:3d:c4:7e:72:4e:ac:99:c8:92:
                    f8:fd:34:41:fe:7b:24:fe:84:fe:1e:89:c9:82:45:
                    02:47:9c:de:48:5c:7a:d9:2f:a6:dd:60:58:56:eb:
                    e3:ea:b5:0d:3c:3d:8f:eb:2d:92:3d:c6:a3:35:87:
                    64:df:de:11:9c:ce:5c:83:6c:d0:41:dd:89:44:89:
                    0d:87:fe:db:3d:3e:96:c7:59:20:83:a0:e4:77:37:
                    6c:e4:6e:d1:9f:40:5c:80:1b:34:e2:20:97:24:be:
                    e1:36:85:7e:0a:53:ac:2c:2c:0f:be:bf:a9:30:ad:
                    29:ee:a1:d3:46:df:5e:6d:20:65:f8:da:f9:22:40:
                    3d:27:6a:24:60:85:95:3d:00:c4:79:49:40:5b:a7:
                    bb:05:c3:12:8b:2b:e1:f9:61:24:af:9d:18:87:0b:
                    84:f0:76:09:4a:bd:14:8d:ba:2b:26:14:f2:79:87:
                    94:a8:c1:37:03:8c:26:6e:aa:57:4f:17:6f:75:41:
                    83:7b:af:42:8f:c7:2e:10:f1:d8:6b:73:b7:45:9b:
                    6b:e2:ed:7a:fd:78:02:b0:7b:03:a0:9b:ea:97:b4:
                    bd:ec:a5:3b:2f:f0:49:58:18:d4:d9:b6:ab:5f:a1:
                    5f:e2:bf:27:22:1c:84:0d:42:76:37:6b:5f:90:13:
                    9a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:87:F2:D4:4C:C3:5B:04:23:4C:CA:18:39:55:10:0C:2B:8A:25:C7
            X509v3 Authority Key Identifier:
                keyid:E6:EF:59:20:C7:6E:8B:99:B7:3F:59:D0:2E:32:58:18:43:FD:5D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/E6EF5920C76E8B99B73F59D02E32581843FD5D00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6EF5920C76E8B99B73F59D02E32581843FD5D00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32342d3332203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:10:2f:c6:fb:74:4e:74:96:71:1d:cc:8e:e6:2d:3a:cf:0e:
         16:5a:52:cb:df:6b:f3:9a:0a:c2:29:b9:a4:8b:a5:13:1b:62:
         f7:86:19:ef:8c:72:1f:00:97:b3:83:e0:57:39:c7:8e:b3:e1:
         e1:77:e2:c9:1f:89:a3:b4:db:27:ca:70:da:9f:9b:21:d8:ac:
         e9:84:f4:ce:1f:90:30:80:ff:f0:e9:39:84:90:6d:80:c6:e3:
         01:c6:70:3e:ce:cf:e1:95:22:79:27:e9:84:41:73:aa:a9:65:
         b3:a2:bc:3a:3e:dd:1d:3e:3d:37:7a:8b:73:5c:9c:fc:8d:bf:
         83:a3:82:f9:c5:db:0a:0c:f8:97:41:8d:f7:be:f8:0a:0f:88:
         78:48:1c:5d:11:46:c3:d2:04:d4:50:fa:1a:e1:65:dd:85:03:
         b3:22:59:c3:bc:fe:9b:96:f5:3b:99:4a:cd:f7:0f:43:2e:a8:
         cb:96:72:bf:94:b8:f2:72:31:22:09:2a:f6:32:5b:a6:df:55:
         e4:33:13:2c:c1:0f:fb:09:f0:59:bd:07:90:b7:e0:b2:f0:0e:
         dd:04:78:86:b2:5c:cf:da:e7:38:4c:38:e5:60:d4:47:e7:a5:
         6a:0e:d9:ce:51:48:7a:91:ea:65:d3:4e:93:f2:d2:c5:37:14:
         bf:16:f9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:38:06 2025 by rpki-client