Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e33382e3230342e302f32342d3234203d3e20323636363036.roa
File:                     3137372e33382e3230342e302f32342d3234203d3e20323636363036.roa (raw, json)
Hash identifier:          ogj/89poUn0JhFbbAiB3qPW8JCIEZPMVVqkVd/5jJTA=
Subject key identifier:   42:73:6C:9D:96:46:6B:24:12:3C:E1:21:9F:91:E9:27:BB:49:AB:28
Certificate issuer:       /CN=149866FA8B7E908D2F6E00D7214C9D9648704F38
Certificate serial:       2F88B120B85A4ABEE410DC5DFA67248332848927
Authority key identifier: 14:98:66:FA:8B:7E:90:8D:2F:6E:00:D7:21:4C:9D:96:48:70:4F:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149866FA8B7E908D2F6E00D7214C9D9648704F38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e33382e3230342e302f32342d3234203d3e20323636363036.roa
Signing time:             Thu 13 Jul 2023 14:16:32 +0000
ROA not before:           Thu 13 Jul 2023 14:11:32 +0000
ROA not after:            Thu 11 Jul 2024 14:16:32 +0000
asID:                     266606
IP address blocks:        177.38.204.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:88:b1:20:b8:5a:4a:be:e4:10:dc:5d:fa:67:24:83:32:84:89:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149866FA8B7E908D2F6E00D7214C9D9648704F38
        Validity
            Not Before: Jul 13 14:11:32 2023 GMT
            Not After : Jul 11 14:16:32 2024 GMT
        Subject: CN=42736C9D96466B24123CE1219F91E927BB49AB28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:fc:9e:cb:a6:24:3c:94:87:51:db:b2:cb:
                    00:39:56:3f:2e:61:b1:43:b2:37:53:c0:c1:03:e0:
                    5a:bc:0c:32:0a:c1:27:24:92:bf:5c:32:c1:33:3b:
                    23:80:53:9d:ee:dc:51:ae:c9:31:36:64:25:f3:f6:
                    af:f3:e3:89:09:47:32:1a:07:bb:ac:3b:65:36:ce:
                    2c:40:00:03:d8:57:a8:db:98:94:45:37:cb:8e:cf:
                    41:a3:15:e8:af:59:b2:40:3f:a9:a1:4b:bf:a8:c7:
                    54:e7:4f:89:56:16:fa:35:02:0b:b4:0e:69:8c:bd:
                    dd:b5:9d:97:f5:1d:6d:74:c1:62:12:51:e9:6a:73:
                    b2:8f:8a:91:33:a8:81:6c:f8:25:aa:cb:b3:90:85:
                    e0:43:3f:e0:6d:f5:68:61:1f:d4:95:74:60:69:66:
                    b0:6d:8f:c8:6d:9e:7e:e4:04:6c:99:2d:ba:5d:d0:
                    7d:fb:ad:82:4d:b4:15:dd:27:ac:4e:77:1a:56:d1:
                    8e:ee:c0:4a:66:2c:59:d1:d0:f8:ba:e6:e8:ae:8d:
                    a6:9c:05:e9:1a:3e:ea:dc:32:66:63:54:3e:5a:78:
                    fe:49:a2:63:d6:8a:50:10:cd:eb:88:ab:e3:35:3d:
                    ec:25:71:43:a0:cf:0f:64:aa:71:b8:fe:48:62:99:
                    f0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:73:6C:9D:96:46:6B:24:12:3C:E1:21:9F:91:E9:27:BB:49:AB:28
            X509v3 Authority Key Identifier:
                keyid:14:98:66:FA:8B:7E:90:8D:2F:6E:00:D7:21:4C:9D:96:48:70:4F:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/149866FA8B7E908D2F6E00D7214C9D9648704F38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149866FA8B7E908D2F6E00D7214C9D9648704F38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e33382e3230342e302f32342d3234203d3e20323636363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:9e:7d:36:34:ab:69:6e:24:76:1e:68:d3:56:e1:77:b2:aa:
         03:f3:07:67:eb:5d:84:e3:a6:37:86:76:93:09:06:ca:4a:2e:
         9d:e0:84:bb:83:a9:17:08:07:97:28:75:85:9e:b8:b5:88:02:
         85:a6:21:6d:16:96:1d:71:5b:25:c9:3b:51:8d:22:28:5f:f6:
         cf:c5:37:c9:84:4f:cf:34:13:9d:06:6a:4b:16:3b:ba:c0:91:
         60:92:bd:61:ee:91:38:a5:58:a8:4d:06:33:76:47:87:da:4a:
         08:9a:de:c3:04:0d:8e:57:81:4b:a2:4c:27:d7:34:96:63:02:
         8c:86:4e:f4:86:e4:77:c9:fb:87:81:38:ed:9f:39:f0:24:2f:
         f2:73:18:8f:52:d6:71:69:ea:3a:9a:ea:04:65:7b:b6:31:a7:
         e9:a5:95:73:44:62:93:58:ca:88:39:fb:24:7a:a3:02:4a:14:
         92:16:40:5e:50:bc:4d:2d:58:ca:46:ed:22:c5:de:43:3f:41:
         33:56:2a:53:91:51:7d:6f:26:3d:0a:a7:e0:f2:d5:89:9c:ba:
         d3:69:c1:a1:bc:9d:59:c4:f9:0d:1c:b2:ca:b6:46:4d:a2:be:
         14:73:c1:c9:01:e9:c3:57:15:60:6e:98:52:6d:d8:54:72:00:
         5f:20:ba:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:03:42 2025 by rpki-client