Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35382e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e35382e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          LEzD9FF5uTFc3Ed5rhuEVluHIquKRCkVzzCdQMOeHhs=
Subject key identifier:   B4:7A:0A:76:05:3F:FF:B0:2C:FF:BF:DC:4E:23:76:09:CD:BF:BB:FB
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       626B47E075A9A7F29F1E256DB4D9BBE933203324
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35382e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 17 Jan 2025 16:16:45 +0000
ROA not before:           Fri 17 Jan 2025 16:11:45 +0000
ROA not after:            Fri 16 Jan 2026 16:16:45 +0000
asID:                     52930
IP address blocks:        177.185.58.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6b:47:e0:75:a9:a7:f2:9f:1e:25:6d:b4:d9:bb:e9:33:20:33:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Jan 17 16:11:45 2025 GMT
            Not After : Jan 16 16:16:45 2026 GMT
        Subject: CN=B47A0A76053FFFB02CFFBFDC4E237609CDBFBBFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cd:fc:ce:37:ef:61:f3:23:b4:9e:aa:f7:5e:
                    ca:8d:38:50:1e:d1:f5:31:dd:b6:b9:d7:5c:80:f7:
                    c4:86:09:73:c8:b2:62:aa:55:04:4a:4f:25:6c:f7:
                    81:5d:5d:f4:d3:e9:c2:0c:91:ae:41:19:a1:35:3b:
                    69:ad:0f:1f:f5:ac:3f:cb:c3:6d:24:ec:e1:dc:1e:
                    8e:e3:2e:75:7d:e2:e1:28:0c:64:31:47:76:47:68:
                    a9:01:67:44:a9:92:ad:5b:2b:89:bc:f9:6a:e5:f8:
                    12:27:c7:3d:63:13:ba:9a:e0:03:9e:d7:e8:11:2d:
                    76:33:b6:39:6f:ca:53:91:91:8a:33:3f:c0:5c:8d:
                    4f:5b:0b:75:6d:84:4b:fb:21:74:9d:91:49:04:71:
                    cd:ac:5a:ba:9a:bc:87:8f:5a:e8:aa:e7:fc:20:05:
                    ee:12:48:df:9f:90:b6:31:22:95:1c:06:06:b7:46:
                    c5:e2:c5:02:8e:10:5e:36:98:91:c4:09:ad:3e:5f:
                    a1:ba:7f:7a:76:8c:4a:da:89:30:a8:39:fa:6d:f4:
                    ab:2f:bc:75:ef:d8:bd:74:61:6c:92:14:f3:dc:4d:
                    77:5f:06:84:24:b6:0c:7b:b0:3c:ad:b8:ec:3a:55:
                    02:4b:d6:0d:55:c3:d0:9e:28:e7:ac:3c:80:4d:a1:
                    42:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7A:0A:76:05:3F:FF:B0:2C:FF:BF:DC:4E:23:76:09:CD:BF:BB:FB
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35382e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:3f:a6:0a:60:bd:2b:9e:d1:c4:ac:9d:e7:47:2a:f5:ef:01:
         2d:41:4b:0e:7c:e2:12:7f:de:fe:2e:49:f8:a3:b4:70:e8:22:
         8f:a3:f7:fc:5b:ff:60:28:b6:08:ba:f9:9f:6a:8b:47:43:d8:
         83:77:f0:d2:e1:fd:f6:a9:34:d0:a9:22:ef:b3:d9:77:42:e0:
         fd:c6:6f:7a:e5:f9:7c:0d:ae:c0:c4:df:f0:63:01:1a:a8:c9:
         4e:bf:9e:f2:9a:d2:6d:e8:72:6f:b9:fc:33:10:0a:b4:41:97:
         2b:47:38:46:74:2d:31:a1:e2:b6:91:59:94:19:02:9b:af:ee:
         cf:22:49:ae:eb:9a:bf:d4:72:5a:4a:b4:11:cd:28:19:e4:2c:
         65:93:59:cb:dc:ca:53:89:fd:c2:a9:96:a3:8e:da:95:5e:c9:
         c0:11:66:1b:f4:30:30:64:7b:ae:b4:a2:a4:3b:d3:6e:fd:0e:
         ec:35:8e:e9:3f:4a:9c:f4:31:cd:db:b1:ce:56:a8:8e:a7:f3:
         a4:74:f8:0c:13:27:c8:06:d6:c5:ec:e1:4b:3f:f9:dd:42:1d:
         c9:60:1f:cf:06:ca:f7:1d:11:91:a2:73:d4:79:8d:4d:64:7c:
         5a:8c:e7:2a:00:5f:2f:09:db:d5:7e:cc:a3:8e:b5:4d:fa:2b:
         20:53:e3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:46:54 2025 by rpki-client