Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e33382e3230302e302f32342d3234203d3e203532373539.roa
File:                     3137372e33382e3230302e302f32342d3234203d3e203532373539.roa (raw, json)
Hash identifier:          JUy1/fbYnpTyakkD0hEkQ1nCfZXTAbwQ8fUK4hO4Z8g=
Subject key identifier:   FC:9A:B4:B4:D8:F5:00:B8:1D:1D:4E:4B:F7:7B:EA:98:99:6E:8D:6C
Certificate issuer:       /CN=149866FA8B7E908D2F6E00D7214C9D9648704F38
Certificate serial:       407BC687B74E9776A137CB804C56DCC4E22F86A1
Authority key identifier: 14:98:66:FA:8B:7E:90:8D:2F:6E:00:D7:21:4C:9D:96:48:70:4F:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149866FA8B7E908D2F6E00D7214C9D9648704F38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e33382e3230302e302f32342d3234203d3e203532373539.roa
Signing time:             Thu 13 Jul 2023 14:16:33 +0000
ROA not before:           Thu 13 Jul 2023 14:11:33 +0000
ROA not after:            Thu 11 Jul 2024 14:16:33 +0000
asID:                     52759
IP address blocks:        177.38.200.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7b:c6:87:b7:4e:97:76:a1:37:cb:80:4c:56:dc:c4:e2:2f:86:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149866FA8B7E908D2F6E00D7214C9D9648704F38
        Validity
            Not Before: Jul 13 14:11:33 2023 GMT
            Not After : Jul 11 14:16:33 2024 GMT
        Subject: CN=FC9AB4B4D8F500B81D1D4E4BF77BEA98996E8D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:27:64:32:63:11:95:0c:76:e3:9a:6f:a5:
                    64:7b:4c:51:9d:55:79:8f:c4:47:b1:04:d8:00:82:
                    1c:29:c7:df:19:3d:4f:9d:dd:97:cd:07:62:a9:a3:
                    39:3a:d1:ad:92:0f:ba:31:6f:89:d6:a3:57:21:b2:
                    5f:70:a6:8a:63:8d:dc:7b:8a:a3:d2:2c:7c:6e:d7:
                    ff:5d:bf:84:53:86:cd:75:6b:e8:2c:b3:39:1f:9e:
                    70:c9:26:4e:ee:f6:e2:2d:bd:69:2b:db:17:b4:6a:
                    f1:99:5b:81:5d:03:68:6b:18:99:a3:00:37:60:e9:
                    65:6e:83:76:a5:ab:84:52:60:9e:d3:95:6a:d2:c9:
                    43:2f:0d:8c:47:99:6d:2b:18:a6:d1:d5:ee:5b:b0:
                    3f:e8:18:34:df:1d:05:c7:f9:25:1d:1e:60:bf:59:
                    f5:40:2a:ad:d8:05:a6:7d:1d:89:42:ca:67:ef:cb:
                    37:ae:0f:8b:c2:39:24:ee:d4:92:8a:55:e8:4e:3c:
                    6d:36:09:26:06:4a:6d:1e:e7:d2:7c:0d:4e:03:5c:
                    19:d3:02:fe:12:56:b1:da:4f:5c:f3:a6:cb:a2:8e:
                    52:32:13:34:f2:9e:75:e4:b5:91:46:ee:92:97:60:
                    d8:b0:61:e8:62:59:cb:6d:fa:dd:50:27:26:5d:6a:
                    14:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9A:B4:B4:D8:F5:00:B8:1D:1D:4E:4B:F7:7B:EA:98:99:6E:8D:6C
            X509v3 Authority Key Identifier:
                keyid:14:98:66:FA:8B:7E:90:8D:2F:6E:00:D7:21:4C:9D:96:48:70:4F:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/149866FA8B7E908D2F6E00D7214C9D9648704F38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149866FA8B7E908D2F6E00D7214C9D9648704F38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e33382e3230302e302f32342d3234203d3e203532373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:ea:20:53:02:00:fd:11:c1:32:1e:b8:05:91:73:32:9e:6a:
         7b:9f:c4:ac:02:f3:5c:70:a0:2d:cd:ed:48:f2:56:29:af:22:
         54:c7:83:ca:26:f2:c1:43:1d:e8:62:6f:ce:98:65:ff:b9:38:
         01:d7:da:45:53:1d:50:24:d9:31:d3:d4:de:8a:34:99:29:d5:
         5b:eb:c3:7a:96:ac:5e:d1:b1:ef:49:c6:83:4d:99:d1:35:76:
         27:a6:bb:7a:6e:59:e2:aa:7a:1d:51:bf:0f:ca:30:27:e3:87:
         06:a8:c6:08:c8:97:45:e6:a1:cc:a2:df:5f:04:ad:1a:06:35:
         1b:63:0b:7a:3d:fd:ff:ed:68:76:41:d4:82:39:4d:1b:3f:3f:
         66:28:73:ca:7f:99:9c:d9:7b:29:67:2e:f4:ba:3f:5d:f8:15:
         f1:01:7a:f7:82:a0:c2:51:d3:35:e5:16:62:7f:68:4d:df:51:
         67:40:aa:07:81:f1:93:a2:b0:de:44:ca:66:36:2c:59:ad:8a:
         17:9b:d4:7e:b9:c3:8b:38:a4:5a:42:41:5f:3e:5f:2e:b5:93:
         04:39:b1:78:c0:87:f3:41:b5:c2:3d:13:ac:72:58:08:1d:5f:
         47:d5:61:63:44:a4:6d:b5:32:4d:9e:b4:5a:6b:23:af:73:08:
         58:47:35:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:08 2025 by rpki-client