Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa
File:                     3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa (raw, json)
Hash identifier:          pEQ55vnuzI4a01rOA4B1rNFMJMHsext1maSMKYYBTbs=
Subject key identifier:   09:E5:0F:C4:55:53:76:FD:C6:23:60:93:88:78:65:86:04:30:15:5B
Certificate issuer:       /CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Certificate serial:       75CBA4556D18C9D2787214E0AEC7AD9E38C83A63
Authority key identifier: 88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa
Signing time:             Mon 10 Mar 2025 15:21:10 +0000
ROA not before:           Mon 10 Mar 2025 15:16:10 +0000
ROA not after:            Mon 09 Mar 2026 15:21:10 +0000
asID:                     262373
IP address blocks:        177.128.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:cb:a4:55:6d:18:c9:d2:78:72:14:e0:ae:c7:ad:9e:38:c8:3a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
        Validity
            Not Before: Mar 10 15:16:10 2025 GMT
            Not After : Mar  9 15:21:10 2026 GMT
        Subject: CN=09E50FC4555376FDC6236093887865860430155B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:cc:c1:71:ec:40:d2:00:21:8c:40:4b:43:
                    f8:6b:29:49:ba:90:26:8a:38:06:65:4f:67:48:09:
                    fe:2c:fb:6f:1a:52:93:99:20:9d:0c:ec:a3:e0:56:
                    3f:21:b5:85:2d:9a:71:2f:41:9e:ac:3d:1c:01:ab:
                    7d:3a:fc:f6:6b:9d:43:94:4d:ef:ac:69:58:b2:32:
                    14:c9:07:e7:00:37:a3:25:de:62:04:40:43:ea:75:
                    bf:a4:a2:fd:47:e8:bc:56:a7:88:52:4b:9f:b3:ac:
                    dc:8f:aa:4d:02:4f:f5:5f:11:cb:93:16:e1:06:77:
                    50:c8:d4:ae:c8:25:12:e5:68:e8:a4:13:7d:1b:3d:
                    7a:dc:ef:76:45:6a:2c:a7:c6:cc:e2:47:d2:2b:91:
                    29:d2:cc:ac:d2:a2:5e:08:9d:53:65:ae:21:9c:81:
                    df:cc:c7:07:62:92:39:a0:2e:21:8d:9a:2e:9a:eb:
                    ec:2c:7d:d9:4e:b8:93:75:7e:c2:7d:e6:e1:5e:2f:
                    09:8e:1b:5e:47:66:a9:44:ba:cd:7c:a8:a0:9a:96:
                    2a:95:13:64:19:43:c5:f4:5a:38:44:4a:30:59:cd:
                    31:8e:ed:8e:97:5c:99:d6:95:3e:e5:4b:00:36:53:
                    4b:a6:48:f7:b1:6d:ff:83:ac:18:5c:03:64:1a:12:
                    a0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E5:0F:C4:55:53:76:FD:C6:23:60:93:88:78:65:86:04:30:15:5B
            X509v3 Authority Key Identifier:
                keyid:88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:08:05:fb:d2:8a:30:11:0d:d0:75:54:35:45:97:2c:67:88:
         3a:71:00:0e:ba:bf:6b:42:ca:0a:13:23:02:49:ce:ac:01:21:
         ec:59:33:42:97:86:8b:78:d3:e8:43:f6:d2:a1:1c:42:76:c1:
         6a:40:fa:64:1b:65:ab:02:0a:62:67:ed:8e:69:48:b8:d1:01:
         a8:3f:53:cd:16:3f:75:86:8c:b3:a7:05:51:81:52:75:1e:f3:
         ad:5e:57:c8:6d:02:8a:65:52:6d:8a:3e:b8:f7:ea:17:3b:70:
         fe:12:b5:99:64:24:a0:d6:64:31:04:79:f6:1c:a1:49:14:d3:
         5c:0d:28:2b:a4:f2:4e:34:0c:90:0e:5a:bc:50:c0:86:07:cc:
         a7:b1:da:3e:ab:f6:40:24:36:eb:bf:24:28:af:25:4e:05:36:
         74:a2:b6:2b:2b:2d:6d:22:0c:2f:42:94:0d:39:31:04:95:3e:
         78:a8:6b:a3:04:1e:3e:a9:d6:e7:f0:c0:18:9a:73:0a:25:bc:
         a6:b3:bd:fb:73:aa:0e:c5:97:6e:4b:23:d3:fd:74:72:2f:3a:
         25:d4:f7:21:38:6f:9e:ec:88:34:0d:26:6f:97:08:35:b6:bf:
         48:01:bd:c7:0b:47:93:e8:77:30:91:81:b4:40:c7:52:8a:1a:
         b5:ec:cf:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:21:37 2025 by rpki-client