Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132372e302f32342d3234203d3e203238353938.roa
File:                     3137372e3130342e3132372e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          R3NkRpgf20vi9icVbSGoDLwQlroXz6dfgorAfF/HO1g=
Subject key identifier:   97:A0:93:E3:0A:A4:60:CE:74:9A:A6:6D:19:17:2B:D1:39:2F:26:F4
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       59603D05304CA8897424EE198A86F75613DB0643
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132372e302f32342d3234203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:01:01 +0000
ROA not before:           Mon 23 Oct 2023 12:56:01 +0000
ROA not after:            Mon 21 Oct 2024 13:01:01 +0000
asID:                     28598
IP address blocks:        177.104.127.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:60:3d:05:30:4c:a8:89:74:24:ee:19:8a:86:f7:56:13:db:06:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:56:01 2023 GMT
            Not After : Oct 21 13:01:01 2024 GMT
        Subject: CN=97A093E30AA460CE749AA66D19172BD1392F26F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c4:01:c4:6b:ed:88:44:af:3f:b5:30:1e:f7:
                    34:eb:cf:97:44:ab:d4:ee:85:ec:a0:b9:6d:ac:ef:
                    ff:c0:36:4d:0e:06:cf:71:26:b3:35:bd:ff:f2:80:
                    28:c1:ad:64:31:20:6c:e5:b8:b8:74:56:df:84:9f:
                    7e:56:a3:28:14:87:3b:87:0a:cb:e6:c7:46:5d:56:
                    9a:33:49:e4:d3:31:1b:cb:e8:82:41:fd:ae:d0:c2:
                    03:53:12:2e:26:09:9d:23:43:15:e3:9e:bd:66:0b:
                    a8:c5:81:5d:03:6e:42:3f:dc:e7:ef:18:2e:80:33:
                    19:40:4f:97:a9:f7:06:09:b1:70:ff:a8:b5:c2:40:
                    d1:3b:a7:6d:63:d6:b0:84:03:14:7d:b7:4d:38:c9:
                    3f:d1:ff:5e:93:d0:43:d8:36:47:61:4a:1f:21:94:
                    74:5b:6b:89:67:d0:ad:85:a4:6d:c5:4b:21:3f:4a:
                    4c:b1:be:9b:b7:34:0e:29:a9:b5:1e:ca:f0:09:7b:
                    52:fa:e9:16:fe:a7:a2:77:e0:d7:82:89:5c:44:8e:
                    7b:83:cc:a2:24:39:f1:d6:20:78:22:20:9b:6d:3e:
                    21:14:e8:ae:d4:fe:89:91:34:12:e1:1a:5c:2a:89:
                    e9:83:1a:ca:5f:74:89:33:71:9c:77:8e:13:34:78:
                    3e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A0:93:E3:0A:A4:60:CE:74:9A:A6:6D:19:17:2B:D1:39:2F:26:F4
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132372e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:e6:67:d8:bb:df:2e:5c:17:5a:f0:d0:b4:9c:0d:4e:63:13:
         a1:c2:af:94:24:bf:06:eb:03:05:b2:77:5a:aa:59:e3:ce:98:
         a9:9f:b3:36:20:10:4a:21:1a:9a:81:38:2e:80:14:78:58:fb:
         bf:71:c5:53:9d:7b:37:8f:7e:5c:13:07:26:bc:ad:38:48:94:
         3d:7f:ef:ec:f0:d0:6f:d7:9e:51:da:bb:7a:6c:ad:28:e7:9a:
         54:86:dd:a4:bd:ef:9e:53:9e:23:d9:bf:79:7e:f2:0e:3e:a3:
         ee:be:35:df:f1:3f:cd:4c:d9:f5:0c:df:fd:66:a8:54:a8:11:
         da:4f:7a:2f:6d:be:7e:57:4e:eb:12:77:c6:17:66:51:d5:7f:
         fe:0e:fc:dd:40:8c:c6:c0:9a:c1:57:dc:af:0c:24:44:bf:3a:
         d2:ea:18:1d:f7:68:e4:a5:e8:5d:1f:9d:e8:a2:99:28:0c:ea:
         72:cb:d6:51:5c:7e:de:06:af:01:00:4b:8b:9e:0d:93:97:c7:
         9e:4d:dd:5b:40:0b:ca:c4:ea:27:99:54:22:e9:54:e3:d2:61:
         bd:82:ff:81:70:59:38:b4:11:41:09:2a:d7:f8:87:ad:7f:02:
         2f:71:ef:65:87:e0:7d:89:16:c2:28:77:c0:49:69:29:94:79:
         96:88:ef:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:25:15 2025 by rpki-client