Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32372e302f32342d3234203d3e20323632393435.roa
File:                     3137372e3135342e32372e302f32342d3234203d3e20323632393435.roa (raw, json)
Hash identifier:          7cCDVdxlmax0MvrCuat2orQT5G7ajstZXE5IvPkldPc=
Subject key identifier:   E2:0D:79:C9:A8:54:D8:14:51:CA:D1:83:6D:CA:B8:E5:F2:60:2B:87
Certificate issuer:       /CN=F5053681E4FFFE993EC674A211C8BBC7FB338987
Certificate serial:       23B788D739B9DF7694AAA8C39543A43C81C89BBF
Authority key identifier: F5:05:36:81:E4:FF:FE:99:3E:C6:74:A2:11:C8:BB:C7:FB:33:89:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32372e302f32342d3234203d3e20323632393435.roa
Signing time:             Wed 05 Mar 2025 19:00:28 +0000
ROA not before:           Wed 05 Mar 2025 18:55:28 +0000
ROA not after:            Wed 04 Mar 2026 19:00:28 +0000
asID:                     262945
IP address blocks:        177.154.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b7:88:d7:39:b9:df:76:94:aa:a8:c3:95:43:a4:3c:81:c8:9b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5053681E4FFFE993EC674A211C8BBC7FB338987
        Validity
            Not Before: Mar  5 18:55:28 2025 GMT
            Not After : Mar  4 19:00:28 2026 GMT
        Subject: CN=E20D79C9A854D81451CAD1836DCAB8E5F2602B87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a0:d2:0b:b5:ed:b5:39:74:21:f6:af:09:3a:
                    9e:f0:a8:d0:88:f4:b2:85:ad:28:b9:2c:f9:c2:70:
                    da:71:c3:04:eb:1d:53:5c:f7:d2:98:e6:cd:1c:50:
                    bc:0a:ce:c2:6c:a1:ee:cb:1b:48:ea:80:6a:cb:bb:
                    0d:3d:eb:f5:91:84:20:0a:19:95:15:25:eb:17:85:
                    ff:49:ff:a4:2b:34:8b:62:a4:14:fc:e1:72:b3:bf:
                    a5:68:c3:fd:ec:35:fd:93:ee:0d:ab:e4:0e:53:16:
                    b2:dc:b4:3b:1a:38:1d:82:7c:2b:87:b0:7d:f3:01:
                    de:b6:8e:f3:e8:37:af:e8:6c:a6:05:6e:51:f3:9d:
                    4b:1c:3f:a4:ff:9e:d1:59:db:7e:fe:fb:f3:da:2c:
                    f2:86:9c:7a:3e:28:9a:fc:cc:dd:16:65:5b:6a:f9:
                    44:c9:59:28:01:ad:7d:56:85:29:8f:24:85:49:0b:
                    98:51:99:c3:ad:05:4e:70:ea:81:9d:54:f5:21:b7:
                    03:f2:a4:a7:1a:59:69:9a:8b:d4:82:76:4d:8d:3e:
                    ac:31:72:04:c2:df:89:fa:9e:7e:42:97:62:78:b9:
                    55:24:8c:7b:86:0c:33:34:b7:4e:0f:a0:30:d1:6d:
                    b1:d2:b9:c8:00:4a:58:2f:9b:47:e4:4c:f2:c7:71:
                    5b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0D:79:C9:A8:54:D8:14:51:CA:D1:83:6D:CA:B8:E5:F2:60:2B:87
            X509v3 Authority Key Identifier:
                keyid:F5:05:36:81:E4:FF:FE:99:3E:C6:74:A2:11:C8:BB:C7:FB:33:89:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32372e302f32342d3234203d3e20323632393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:11:dc:6c:76:6d:09:95:7d:a8:e8:79:ef:72:e0:5a:40:eb:
         14:cc:76:d0:0d:ef:37:0a:60:bc:1b:43:c7:d3:c0:1b:43:f2:
         79:a8:8a:5f:28:e9:9c:c8:7c:73:cf:6a:1b:d0:82:2a:2f:ae:
         69:5f:ca:ae:67:a9:a5:f5:d0:bf:60:cf:0b:0f:3c:84:85:46:
         04:25:29:0b:c8:f0:66:7b:f4:55:97:95:87:0b:3c:f6:2c:9b:
         d6:42:0f:ee:12:0f:26:09:88:ca:3e:36:13:c5:0e:92:4a:1c:
         72:d3:c7:3c:8f:d2:22:62:21:4e:60:44:a8:91:9e:50:d4:7d:
         77:d5:68:ca:42:0e:5d:95:3c:d4:b2:de:c5:c0:ec:41:14:b4:
         3b:48:d9:79:12:af:e8:06:b4:55:e1:d6:3c:34:69:41:9f:37:
         29:f4:19:af:a7:e1:8e:47:04:6b:16:57:69:d8:e5:f7:db:89:
         36:70:30:16:65:eb:8a:fb:3d:6a:65:45:ac:04:2e:c2:fb:e1:
         e6:9d:55:29:65:2f:b5:32:d3:e6:f1:b3:b7:3e:4f:4f:b8:94:
         5a:00:ca:ef:7b:97:be:ee:1c:17:2b:7a:db:c8:22:c2:3a:96:
         c8:bd:0b:4d:0e:01:8e:96:b1:88:fc:ac:cb:0b:61:ae:0d:a4:
         1a:bb:c6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:37:57 2025 by rpki-client