Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/3137372e3138352e33322e302f32312d3234203d3e203532393237.roa
File:                     3137372e3138352e33322e302f32312d3234203d3e203532393237.roa (raw, json)
Hash identifier:          7UddehBD8VCf4FzEoBgHDctvizapcr3fdqlQ9nxtLsY=
Subject key identifier:   58:DA:6C:89:21:86:FC:03:E3:BA:09:D4:33:9A:EF:59:7B:35:00:45
Certificate issuer:       /CN=85F479D0628FB756E26AA406F0E8C072770444C8
Certificate serial:       2136B4F64C2AFA5648333A48461C1D91649356AB
Authority key identifier: 85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/3137372e3138352e33322e302f32312d3234203d3e203532393237.roa
Signing time:             Fri 07 Mar 2025 02:28:22 +0000
ROA not before:           Fri 07 Mar 2025 02:23:22 +0000
ROA not after:            Fri 06 Mar 2026 02:28:22 +0000
asID:                     52927
IP address blocks:        177.185.32.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:36:b4:f6:4c:2a:fa:56:48:33:3a:48:46:1c:1d:91:64:93:56:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F479D0628FB756E26AA406F0E8C072770444C8
        Validity
            Not Before: Mar  7 02:23:22 2025 GMT
            Not After : Mar  6 02:28:22 2026 GMT
        Subject: CN=58DA6C892186FC03E3BA09D4339AEF597B350045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:68:c3:14:79:08:d5:aa:39:4c:09:36:80:6b:
                    93:cf:4a:0c:ca:ba:61:b6:96:31:9e:c2:85:ce:6c:
                    eb:46:fd:e8:ea:1a:df:ad:20:98:8e:51:9c:1a:51:
                    b1:af:13:24:e9:d1:ac:e0:c4:be:d2:86:ed:0f:b3:
                    05:9c:4e:bc:10:50:9f:14:56:47:1e:87:e7:62:09:
                    6e:15:27:53:5f:60:87:bf:67:b4:5d:96:36:be:c3:
                    e0:15:7b:d8:8e:83:0a:00:0f:0b:75:d5:0b:1c:bd:
                    60:a7:59:98:06:12:53:79:3d:26:36:83:42:12:2a:
                    69:ea:e2:ea:d2:44:33:39:0c:eb:13:5f:ed:95:06:
                    47:ab:89:0a:d0:3b:de:de:32:c6:4d:22:f6:73:37:
                    95:12:79:37:4a:60:d5:62:0b:68:04:df:e4:26:e7:
                    ee:98:23:f3:40:05:0c:fb:91:65:84:38:a6:e0:0e:
                    07:e2:a1:07:04:99:d5:76:ba:14:8d:28:93:81:f8:
                    0d:fc:50:61:7c:97:fc:90:26:c7:0f:0e:49:19:6a:
                    3d:5d:19:a5:d2:7c:26:49:72:ca:95:83:be:4d:a3:
                    5b:2f:6c:67:c4:d8:cd:ec:c1:be:03:df:00:48:d2:
                    6f:e6:25:24:96:2d:30:be:97:cc:f7:ec:00:d2:7b:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DA:6C:89:21:86:FC:03:E3:BA:09:D4:33:9A:EF:59:7B:35:00:45
            X509v3 Authority Key Identifier:
                keyid:85:F4:79:D0:62:8F:B7:56:E2:6A:A4:06:F0:E8:C0:72:77:04:44:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/85F479D0628FB756E26AA406F0E8C072770444C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F479D0628FB756E26AA406F0E8C072770444C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/3/3137372e3138352e33322e302f32312d3234203d3e203532393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:c3:54:cf:06:37:a4:52:42:3a:12:4a:25:20:42:ec:5d:20:
         fc:1a:72:73:d3:60:e2:43:aa:a0:34:58:34:12:ad:65:43:89:
         da:55:2b:b9:cf:ec:70:bb:91:ae:55:d5:23:cd:37:ef:9a:88:
         43:6f:a2:57:88:4c:a9:17:3c:c9:11:5e:ad:52:e1:99:d3:1e:
         f4:c0:df:74:61:ad:80:04:ba:c9:53:f8:5f:56:7e:e2:30:2b:
         a9:48:47:6d:07:31:61:4e:d6:ab:45:c3:bb:75:f2:b1:8a:45:
         78:f2:cb:5b:c7:b7:cd:d8:a0:68:56:76:fd:f0:20:d4:9e:44:
         6b:f1:0f:57:24:bc:bc:ab:0a:4a:8b:7d:ae:33:50:62:00:38:
         56:ab:e5:ce:92:53:c5:e1:48:10:d3:fa:f9:f2:33:49:50:f7:
         e9:48:a9:86:c7:f3:0e:d1:ed:91:09:d3:41:88:3d:65:4d:93:
         12:00:01:ca:c6:ec:2c:ea:be:95:84:b1:ef:b9:d4:0d:69:10:
         9a:d9:15:5e:a2:32:99:2d:42:82:56:93:b7:f8:c9:27:c5:27:
         53:aa:80:d4:33:c3:c0:b6:f3:06:f3:b5:ce:cc:e1:1a:e7:59:
         b1:d3:86:b7:54:9a:08:5f:d0:38:99:24:d1:ab:7c:13:e7:fe:
         a1:88:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:11 2025 by rpki-client