Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32352e302f32342d3234203d3e20323632393435.roa
File:                     3137372e3135342e32352e302f32342d3234203d3e20323632393435.roa (raw, json)
Hash identifier:          manvCyjIR3EA+3q8ehMvQ2iFxULK4S3votfqkYDfji0=
Subject key identifier:   8B:C5:DE:92:AD:DC:F0:AC:73:11:C8:30:6F:F2:87:49:A2:1C:33:E3
Certificate issuer:       /CN=F5053681E4FFFE993EC674A211C8BBC7FB338987
Certificate serial:       04DEC23D43660D6DBE475B9354C9DE4AF3697F21
Authority key identifier: F5:05:36:81:E4:FF:FE:99:3E:C6:74:A2:11:C8:BB:C7:FB:33:89:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32352e302f32342d3234203d3e20323632393435.roa
Signing time:             Wed 05 Mar 2025 19:00:28 +0000
ROA not before:           Wed 05 Mar 2025 18:55:28 +0000
ROA not after:            Wed 04 Mar 2026 19:00:28 +0000
asID:                     262945
IP address blocks:        177.154.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:de:c2:3d:43:66:0d:6d:be:47:5b:93:54:c9:de:4a:f3:69:7f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5053681E4FFFE993EC674A211C8BBC7FB338987
        Validity
            Not Before: Mar  5 18:55:28 2025 GMT
            Not After : Mar  4 19:00:28 2026 GMT
        Subject: CN=8BC5DE92ADDCF0AC7311C8306FF28749A21C33E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:07:21:be:c6:b1:43:c7:4b:be:82:46:6f:39:
                    9d:95:8b:83:9c:9d:8a:ca:39:98:c1:76:31:f9:b9:
                    f6:0b:1e:64:53:3f:ee:fd:c0:cd:90:2f:12:a6:94:
                    4e:65:f1:6f:b1:42:de:0d:f5:18:55:d5:d2:e2:5e:
                    89:5d:23:bc:47:a2:be:20:d2:75:c2:7b:b0:5c:63:
                    b8:ed:45:ad:02:8f:a2:ec:d7:6e:67:2d:29:e6:26:
                    e7:e1:68:9e:cd:88:55:4b:5a:cf:c6:d3:bd:0d:3c:
                    00:8d:c5:7d:0d:39:b2:8a:22:e5:24:87:4c:f9:1b:
                    24:45:24:d3:a7:84:43:64:62:a8:63:1f:65:e0:0e:
                    05:e0:75:33:2d:1b:d2:24:a6:08:e9:7c:7a:48:53:
                    f1:c3:02:71:2f:46:1e:65:ab:61:31:3b:9b:87:6b:
                    81:28:44:e9:86:5f:67:9c:1a:41:78:af:a0:b7:cd:
                    0f:bd:75:01:3b:a1:aa:ad:f8:18:34:38:8c:b8:81:
                    ee:0e:69:ab:b2:81:2d:38:3d:91:54:5f:a7:f8:a4:
                    bd:5a:a7:69:6c:a2:bc:fc:be:64:5b:69:88:39:c0:
                    a0:8e:c2:6f:f6:40:92:9b:fe:83:35:7b:01:a5:78:
                    5b:5e:04:b3:9d:4c:d1:88:59:a9:0e:e5:8a:5d:1b:
                    28:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C5:DE:92:AD:DC:F0:AC:73:11:C8:30:6F:F2:87:49:A2:1C:33:E3
            X509v3 Authority Key Identifier:
                keyid:F5:05:36:81:E4:FF:FE:99:3E:C6:74:A2:11:C8:BB:C7:FB:33:89:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32352e302f32342d3234203d3e20323632393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:8b:e5:2a:13:fb:14:dc:d3:e0:15:51:10:1a:10:9d:71:b7:
         0b:f2:26:32:e6:ba:bf:53:aa:7b:07:4e:96:5d:2f:6b:e9:75:
         21:a0:2a:91:14:66:37:bd:7b:95:8b:8a:76:63:19:f9:df:ad:
         8b:1f:d4:aa:7d:75:ef:f0:9e:cd:9a:82:09:a6:8a:86:d5:f7:
         99:92:ab:b1:72:59:2b:d9:8b:58:e7:55:66:e7:09:d9:aa:1a:
         64:5a:b1:57:9a:fd:a4:81:33:c7:1c:cf:ec:79:77:47:13:32:
         e3:da:f6:b6:7f:b2:e6:8a:5e:b9:ab:8a:a5:13:7d:72:82:5d:
         af:7e:ae:99:59:dd:f7:90:08:a2:d3:b9:8b:3e:5a:3a:b9:1b:
         8a:d7:0d:b5:e9:01:76:43:cb:1d:1f:b7:24:c9:08:e0:8d:c6:
         80:67:44:08:6e:03:92:d7:3e:a4:3c:3b:87:e1:2e:fe:d4:41:
         db:b1:fb:a9:18:14:d7:95:3d:5a:ba:73:df:33:94:52:a4:b5:
         e5:be:e0:3f:48:6e:de:a6:3c:71:01:83:6e:eb:b9:61:3d:b0:
         f5:03:5b:58:87:83:ae:49:76:23:e8:ac:31:c7:3a:04:b7:6f:
         02:de:8f:c3:fc:26:57:b7:c3:e3:15:f6:73:5f:ef:d3:4b:db:
         41:e2:93:4f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBN7CPUNmDW2+R1uTVMneSvNpfyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUwNTM2ODFFNEZGRkU5OTNFQzY3NEEyMTFDOEJCQzdG
QjMzODk4NzAeFw0yNTAzMDUxODU1MjhaFw0yNjAzMDQxOTAwMjhaMDMxMTAvBgNV
BAMTKDhCQzVERTkyQUREQ0YwQUM3MzExQzgzMDZGRjI4NzQ5QTIxQzMzRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeByG+xrFDx0u+gkZvOZ2Vi4Oc
nYrKOZjBdjH5ufYLHmRTP+79wM2QLxKmlE5l8W+xQt4N9RhV1dLiXoldI7xHor4g
0nXCe7BcY7jtRa0Cj6Ls125nLSnmJufhaJ7NiFVLWs/G070NPACNxX0NObKKIuUk
h0z5GyRFJNOnhENkYqhjH2XgDgXgdTMtG9IkpgjpfHpIU/HDAnEvRh5lq2ExO5uH
a4EoROmGX2ecGkF4r6C3zQ+9dQE7oaqt+Bg0OIy4ge4OaauygS04PZFUX6f4pL1a
p2lsorz8vmRbaYg5wKCOwm/2QJKb/oM1ewGleFteBLOdTNGIWakO5YpdGyi1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUi8Xekq3c8KxzEcgwb/KHSaIcM+MwHwYDVR0j
BBgwFoAU9QU2geT//pk+xnSiEci7x/sziYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFBXTVQ3clByS25pUkUxQm84eXVZRjhrbXdVSktlenZ6RzY4Q2JWcVdD
UGovMS9GNTA1MzY4MUU0RkZGRTk5M0VDNjc0QTIxMUM4QkJDN0ZCMzM4OTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1MDUzNjgxRTRGRkZFOTkz
RUM2NzRBMjExQzhCQkM3RkIzMzg5ODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hQV01UN3JQcktuaVJFMUJvOHl1WUY4a213VUpLZXp2ekc2OENiVnFXQ1BqLzEv
MzEzNzM3MmUzMTM1MzQyZTMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzOTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxmhkwDQYJKoZIhvcNAQELBQADggEBAIiL5SoT
+xTc0+AVURAaEJ1xtwvyJjLmur9TqnsHTpZdL2vpdSGgKpEUZje9e5WLinZjGfnf
rYsf1Kp9de/wns2aggmmiobV95mSq7FyWSvZi1jnVWbnCdmqGmRasVea/aSBM8cc
z+x5d0cTMuPa9rZ/suaKXrmriqUTfXKCXa9+rplZ3feQCKLTuYs+Wjq5G4rXDbXp
AXZDyx0ftyTJCOCNxoBnRAhuA5LXPqQ8O4fhLv7UQdux+6kYFNeVPVq6c98zlFKk
teW+4D9Ibt6mPHEBg27ruWE9sPUDW1iHg65JdiPorDHHOgS3bwLej8P8Jle3w+MV
9nNf79NL20Hik08=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:06:09 2025 by rpki-client