Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3231362e302f32312d3332203d3e203532363739.roa
File:                     3137372e36372e3231362e302f32312d3332203d3e203532363739.roa (raw, json)
Hash identifier:          6wXH5Dn0LoSht2qYdiDDQX3GVgej+zcm4izOqlA5AX8=
Subject key identifier:   29:4F:B6:B2:1D:0F:3C:B5:6F:1E:D7:7C:1B:A6:20:51:DA:1B:0E:A1
Certificate issuer:       /CN=908579108D7A183795A3DE9DEB22E3F17A2ECACF
Certificate serial:       36CA40F0D5AE59B3AD2C9231D9E9F69A6D88ACC2
Authority key identifier: 90:85:79:10:8D:7A:18:37:95:A3:DE:9D:EB:22:E3:F1:7A:2E:CA:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/908579108D7A183795A3DE9DEB22E3F17A2ECACF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3231362e302f32312d3332203d3e203532363739.roa
Signing time:             Wed 27 Nov 2024 10:22:59 +0000
ROA not before:           Wed 27 Nov 2024 10:17:59 +0000
ROA not after:            Wed 26 Nov 2025 10:22:59 +0000
asID:                     52679
IP address blocks:        177.67.216.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ca:40:f0:d5:ae:59:b3:ad:2c:92:31:d9:e9:f6:9a:6d:88:ac:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908579108D7A183795A3DE9DEB22E3F17A2ECACF
        Validity
            Not Before: Nov 27 10:17:59 2024 GMT
            Not After : Nov 26 10:22:59 2025 GMT
        Subject: CN=294FB6B21D0F3CB56F1ED77C1BA62051DA1B0EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b4:42:23:07:58:85:b1:bf:d9:93:b0:1c:63:
                    82:15:da:6f:66:95:a5:68:10:28:b8:ec:bd:b5:5c:
                    d1:66:c8:90:4c:e6:3e:31:26:9b:79:a7:80:a1:0b:
                    58:1e:9e:a7:ae:c1:f2:e5:61:c2:9f:ca:e2:66:ec:
                    d3:3f:c3:46:87:f0:2b:90:c9:44:2a:76:05:e0:bd:
                    b0:16:2b:9c:8b:38:b4:e5:15:fc:9f:b7:6d:a5:13:
                    75:41:3c:38:67:91:e4:4a:70:e1:fa:e5:d2:ce:94:
                    55:a1:1f:a5:63:38:61:35:cb:af:b6:e3:22:9f:17:
                    b2:ca:00:9e:9f:41:66:87:5f:3f:03:2b:c6:b2:14:
                    11:59:02:e7:13:5a:18:ca:f5:bc:b5:51:f8:eb:39:
                    cd:93:88:ff:b7:f8:55:64:c8:c9:b6:a2:5f:95:98:
                    2a:cd:8c:0a:c9:a0:4a:c2:d9:6e:30:8c:a8:72:4a:
                    3c:5e:15:27:39:0e:3c:eb:1b:d4:97:83:30:92:60:
                    4c:2a:19:03:40:bd:96:ef:f4:18:ff:dc:49:4b:62:
                    fa:f5:2e:d6:48:58:11:dc:ec:84:ad:ac:f8:19:d7:
                    cd:ba:48:f8:1a:96:83:e8:9d:60:78:2b:b4:d6:a4:
                    f6:24:61:c3:57:25:87:16:e5:5f:25:a0:6e:01:fb:
                    de:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4F:B6:B2:1D:0F:3C:B5:6F:1E:D7:7C:1B:A6:20:51:DA:1B:0E:A1
            X509v3 Authority Key Identifier:
                keyid:90:85:79:10:8D:7A:18:37:95:A3:DE:9D:EB:22:E3:F1:7A:2E:CA:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/908579108D7A183795A3DE9DEB22E3F17A2ECACF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/908579108D7A183795A3DE9DEB22E3F17A2ECACF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3231362e302f32312d3332203d3e203532363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:e0:4c:1b:9e:62:a5:f5:f2:5e:b1:9d:f3:a8:d7:42:e0:f9:
         c3:09:4d:ea:e2:dd:c3:65:f4:5d:16:01:01:e5:2c:67:97:6b:
         2f:70:67:8a:b0:32:ac:c4:de:a3:2b:11:00:0b:97:32:f8:ca:
         42:5b:1b:a4:a1:51:39:8a:1e:d6:4e:6c:53:58:df:29:9f:c4:
         2a:29:99:44:3a:43:1d:0c:b9:5a:1a:e8:87:95:3b:f4:38:d7:
         31:80:91:53:d1:ef:c0:63:7a:7d:67:18:34:5f:2c:08:38:29:
         6e:df:f9:e9:0d:26:79:65:6b:1c:64:b6:c8:ac:bd:4e:9b:c0:
         27:52:1a:69:2f:5c:09:f2:88:8d:9a:7d:25:f2:e9:bf:d2:0e:
         a3:d6:3b:bf:c7:9c:d9:76:4e:5c:4e:50:89:57:52:ad:ad:59:
         b3:96:b0:d0:46:95:d2:98:f6:c1:b2:c8:69:46:1e:5c:df:d2:
         be:52:37:7d:c8:00:c1:aa:8c:57:f8:b8:dc:44:21:81:17:e4:
         c7:66:44:bb:73:34:62:b2:91:1a:ce:09:07:0d:61:16:5b:3a:
         80:99:b1:04:97:84:82:f1:22:83:da:e1:10:8c:7c:3e:b0:30:
         6b:29:63:65:9e:57:46:f3:04:4d:d0:4f:72:79:96:c3:0d:09:
         33:54:bc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:29:58 2025 by rpki-client