Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e34382e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e34382e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          x1uMEwOGHhJlE9KBm4EHj2xW4NHNz9u5a4qo+5VahXQ=
Subject key identifier:   7D:A5:3D:E0:52:B7:80:CD:E6:DC:49:CF:16:89:A0:DC:77:FE:98:02
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       64ED8F365CB4C2339A58C259C4E31F3104073EE6
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e34382e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 17 Jan 2025 16:16:39 +0000
ROA not before:           Fri 17 Jan 2025 16:11:39 +0000
ROA not after:            Fri 16 Jan 2026 16:16:39 +0000
asID:                     52930
IP address blocks:        177.185.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ed:8f:36:5c:b4:c2:33:9a:58:c2:59:c4:e3:1f:31:04:07:3e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Jan 17 16:11:39 2025 GMT
            Not After : Jan 16 16:16:39 2026 GMT
        Subject: CN=7DA53DE052B780CDE6DC49CF1689A0DC77FE9802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:46:4a:26:e2:6d:4c:22:c9:c7:6a:94:2e:a6:
                    20:7e:a6:a6:1b:3d:67:5a:09:64:bf:ba:5c:9f:1f:
                    d6:e3:df:bc:78:57:73:89:d4:5a:f6:f2:3d:00:02:
                    e2:3c:e8:8c:e3:ac:f1:6d:19:38:fc:32:39:d6:85:
                    00:59:9b:f6:ab:87:57:98:e3:a1:d7:99:98:5f:c4:
                    03:0f:7f:97:2b:9c:e7:bd:8d:e2:66:d6:29:1a:a6:
                    8a:e7:57:93:c0:63:ee:7c:cb:06:55:2b:ce:cc:89:
                    36:87:c6:7d:b4:0d:ef:f8:76:ff:aa:bc:f6:1e:07:
                    e0:f2:70:89:51:69:0f:80:58:9f:99:76:2e:2d:8b:
                    bb:e8:50:9e:bb:da:9a:cf:2d:09:07:0b:a7:a1:20:
                    11:fd:c5:9c:ac:23:46:0b:86:8c:01:89:10:82:40:
                    a7:2a:6a:7a:df:4a:dc:63:55:96:5a:ef:21:69:83:
                    35:de:8a:22:50:97:4b:9e:cd:00:18:ab:25:78:c8:
                    f0:da:3b:50:3a:11:ae:4e:3b:b2:d9:a3:7f:69:f1:
                    25:81:98:5f:d2:4b:b8:ae:3f:cd:bf:d5:c0:11:30:
                    63:e1:6f:83:58:6b:f8:4b:a4:21:c6:46:b4:b5:4f:
                    5c:1d:be:cf:29:64:5a:c3:b3:7a:4a:d3:39:c3:8a:
                    eb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A5:3D:E0:52:B7:80:CD:E6:DC:49:CF:16:89:A0:DC:77:FE:98:02
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e34382e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:3a:78:02:21:fb:7e:18:be:47:0d:5d:ef:ef:d1:45:a8:
         ae:14:b4:64:81:8b:cb:20:79:56:96:d9:77:e1:80:56:ea:17:
         d0:56:55:30:3b:5d:1e:1e:72:11:73:52:06:42:20:ae:0c:32:
         91:27:23:98:95:00:f2:6b:49:b6:1a:3a:08:8f:c8:ae:e0:d7:
         a4:c3:14:84:d7:71:58:d8:46:d8:13:b0:19:f3:d7:fe:00:30:
         be:f6:df:c3:4e:2c:13:27:2f:4c:2c:46:a3:d4:03:d6:44:3e:
         64:23:15:01:04:8d:0e:7a:9b:e0:27:24:b7:df:89:c7:8d:9d:
         c6:31:ca:12:f5:e3:f9:67:24:59:1f:9f:ab:be:64:6f:73:e8:
         b0:d7:d5:ec:36:36:21:e9:b5:ff:97:b4:97:7c:75:28:8d:e3:
         67:3b:29:00:74:c6:04:9a:7e:8b:7f:1f:d4:6d:a1:32:c4:64:
         b8:2b:08:e3:08:d2:4a:0a:0c:85:8a:0f:6f:a0:9a:e6:b6:e5:
         95:74:da:15:75:18:50:a4:94:0d:46:d7:39:2b:16:6f:1f:db:
         92:80:41:b4:a4:80:90:17:d5:d9:63:06:b0:37:e1:1e:91:50:
         04:7d:0d:af:2f:f2:72:86:4c:da:53:d9:bf:32:14:eb:85:44:
         15:69:07:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:47:38 2025 by rpki-client