Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/3137372e31312e36382e302f32342d3234203d3e20323632383732.roa
File:                     3137372e31312e36382e302f32342d3234203d3e20323632383732.roa (raw, json)
Hash identifier:          9bUqCSbnMa0/d1Mnh5xtVBMym4wbKF+KV7YEklP7Jeg=
Subject key identifier:   ED:0B:8A:B3:13:86:A3:32:6D:D5:50:29:20:C0:CA:4E:2D:71:1C:EC
Certificate issuer:       /CN=583C53DFDDAB3EB051313E58E5B82EE854B961C7
Certificate serial:       5AB017D8217614CF9605DBF840D0FBCFD29762CA
Authority key identifier: 58:3C:53:DF:DD:AB:3E:B0:51:31:3E:58:E5:B8:2E:E8:54:B9:61:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/583C53DFDDAB3EB051313E58E5B82EE854B961C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/3137372e31312e36382e302f32342d3234203d3e20323632383732.roa
Signing time:             Sat 07 Jan 2023 11:25:34 +0000
ROA not before:           Sat 07 Jan 2023 11:20:34 +0000
ROA not after:            Sat 06 Jan 2024 11:25:34 +0000
asID:                     262872
IP address blocks:        177.11.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b0:17:d8:21:76:14:cf:96:05:db:f8:40:d0:fb:cf:d2:97:62:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583C53DFDDAB3EB051313E58E5B82EE854B961C7
        Validity
            Not Before: Jan  7 11:20:34 2023 GMT
            Not After : Jan  6 11:25:34 2024 GMT
        Subject: CN=ED0B8AB31386A3326DD5502920C0CA4E2D711CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4e:f9:2e:08:fe:ce:27:2d:a5:23:40:2a:58:
                    6f:72:82:8f:25:af:bf:12:97:bf:2a:dc:13:6f:98:
                    4f:27:23:94:22:31:e8:4d:58:ed:99:42:a4:7e:87:
                    92:df:10:2a:5c:1d:d9:c6:ec:32:63:29:c7:0d:cd:
                    f1:73:67:c5:bb:81:29:d0:89:18:c9:d6:97:34:99:
                    98:f0:44:d4:2e:4c:d6:8d:90:22:71:a0:f6:3d:da:
                    4b:24:8c:9d:30:b4:83:2b:1f:5e:87:db:4a:41:1f:
                    e7:16:28:c6:cb:c4:89:64:d7:f7:75:16:da:04:c1:
                    d1:50:41:4a:2f:4f:9e:08:4c:51:db:3a:b9:f9:ee:
                    59:57:4b:85:01:95:4c:c1:5a:e0:e1:dc:18:9e:52:
                    9b:3c:39:16:00:91:90:bf:cc:c1:ed:21:ee:38:4d:
                    df:16:db:df:e2:93:6b:ea:7b:1d:5a:7d:de:05:94:
                    7c:81:b6:0a:60:2f:92:fb:26:03:22:d0:fa:46:10:
                    54:42:5c:82:6f:fc:d5:5f:b5:fe:03:0f:6d:85:e6:
                    90:45:2d:da:b0:90:64:5e:2a:64:ef:00:84:c0:45:
                    58:21:5b:23:7c:9a:1c:49:78:fb:ca:9e:4c:3a:04:
                    ec:00:55:71:c0:c4:a3:93:9d:70:0c:d8:d1:75:91:
                    57:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0B:8A:B3:13:86:A3:32:6D:D5:50:29:20:C0:CA:4E:2D:71:1C:EC
            X509v3 Authority Key Identifier:
                keyid:58:3C:53:DF:DD:AB:3E:B0:51:31:3E:58:E5:B8:2E:E8:54:B9:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/583C53DFDDAB3EB051313E58E5B82EE854B961C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/583C53DFDDAB3EB051313E58E5B82EE854B961C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/3137372e31312e36382e302f32342d3234203d3e20323632383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:dd:b5:a5:a8:be:ab:db:f4:8b:00:f7:7d:c3:42:65:26:2d:
         be:1f:27:a5:18:e6:6f:95:1f:05:3b:ba:16:fe:80:22:00:c8:
         1a:af:e0:2d:23:5b:ed:80:c7:75:8c:25:2d:14:53:50:8d:4b:
         9e:ca:41:56:9f:e1:f8:c3:6f:dd:ce:3a:4d:26:1b:57:0d:80:
         5f:94:f5:3f:91:02:a4:2f:71:45:45:12:f7:32:76:5b:d5:b8:
         cd:2d:ba:55:d8:e9:92:40:e7:24:a9:a5:46:9b:9d:7d:ea:b8:
         4b:96:14:56:44:56:bc:41:94:d6:4e:ae:ea:f2:33:9e:79:a0:
         85:6a:79:57:c2:ae:a9:b2:36:b9:4f:01:04:b2:b1:bf:d2:25:
         d0:f6:64:0c:29:10:56:8e:a1:84:2a:9d:ca:62:dc:59:56:03:
         c1:8f:c9:67:d0:e3:c0:53:bb:31:3c:63:5e:be:13:a5:9f:a7:
         7e:fc:fa:65:dc:87:8c:ac:3a:27:1c:ff:16:9c:ad:63:04:04:
         15:7a:19:ed:1f:4f:c8:46:e8:0d:61:dd:d7:9e:d9:25:04:ee:
         00:b5:10:d9:c7:bd:ff:e5:15:44:76:0d:00:a9:85:03:28:8c:
         a0:5b:fa:aa:d2:1a:a3:c3:1c:32:62:ab:27:7b:f5:83:88:03:
         4e:3e:5a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:37 2025 by rpki-client