Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/owdAy1uGb5xBtSUp5jP2T5T6nipmxH2j3QJFiaEyz3x/0/3137372e31302e3132352e302f32342d3234203d3e203532393138.roa
File:                     3137372e31302e3132352e302f32342d3234203d3e203532393138.roa (raw, json)
Hash identifier:          sOd9CWOchIB00re4KYlMXsTMIEA1Us/tNzZdg6zO2ys=
Subject key identifier:   31:25:86:E3:CA:56:17:8F:D9:F1:DE:A5:50:99:D6:EE:D4:3F:B4:64
Certificate issuer:       /CN=4A0559F9CE3145CEAD352814018B1C85517828E5
Certificate serial:       41BEFD3634BCD83B62C98DD6C362F6EC235750DF
Authority key identifier: 4A:05:59:F9:CE:31:45:CE:AD:35:28:14:01:8B:1C:85:51:78:28:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A0559F9CE3145CEAD352814018B1C85517828E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/owdAy1uGb5xBtSUp5jP2T5T6nipmxH2j3QJFiaEyz3x/0/3137372e31302e3132352e302f32342d3234203d3e203532393138.roa
Signing time:             Tue 10 Oct 2023 22:13:35 +0000
ROA not before:           Tue 10 Oct 2023 22:08:35 +0000
ROA not after:            Tue 08 Oct 2024 22:13:35 +0000
asID:                     52918
IP address blocks:        177.10.125.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:be:fd:36:34:bc:d8:3b:62:c9:8d:d6:c3:62:f6:ec:23:57:50:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A0559F9CE3145CEAD352814018B1C85517828E5
        Validity
            Not Before: Oct 10 22:08:35 2023 GMT
            Not After : Oct  8 22:13:35 2024 GMT
        Subject: CN=312586E3CA56178FD9F1DEA55099D6EED43FB464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3f:b8:8c:b5:72:95:c2:48:c3:2e:b1:4d:99:
                    67:eb:45:52:6c:48:da:a9:db:44:6c:0c:05:e7:99:
                    e6:a6:c3:40:29:5e:74:e9:28:09:c4:28:4f:bc:63:
                    9f:16:86:a8:79:e8:ec:c3:a4:8a:fd:dc:31:36:fb:
                    30:b4:59:bb:ca:7c:4a:82:22:56:bc:27:9e:19:c3:
                    76:82:88:c1:df:f6:b4:53:6e:9e:6f:89:a5:4f:01:
                    4c:37:09:cb:50:a4:b8:aa:9a:51:2e:b7:5b:45:61:
                    ae:8e:40:d1:05:63:c4:3d:21:7f:e3:5c:81:8c:87:
                    c7:bc:2d:56:f3:09:5c:49:84:ba:68:5e:b4:ca:16:
                    4c:94:92:4a:de:e5:ca:43:ab:9f:8c:ad:ea:7a:8a:
                    c4:5d:a2:05:e1:f1:58:b9:08:4f:ba:67:5b:85:44:
                    62:c8:9a:78:bb:c5:ee:6f:cd:d3:08:13:41:70:a6:
                    1c:8a:7e:0b:b2:2e:72:48:54:52:ea:4f:d3:da:e6:
                    3b:e5:d1:ca:e4:d7:3d:68:81:2d:e6:da:ef:6c:85:
                    e4:9d:d7:40:3d:8d:9e:a2:d7:30:c6:a9:13:9d:17:
                    42:4a:ed:7d:8b:05:2e:ca:26:8d:ed:8d:da:24:33:
                    61:93:9f:0e:09:8d:99:12:ab:c5:72:10:df:24:bf:
                    e9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:25:86:E3:CA:56:17:8F:D9:F1:DE:A5:50:99:D6:EE:D4:3F:B4:64
            X509v3 Authority Key Identifier:
                keyid:4A:05:59:F9:CE:31:45:CE:AD:35:28:14:01:8B:1C:85:51:78:28:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/owdAy1uGb5xBtSUp5jP2T5T6nipmxH2j3QJFiaEyz3x/0/4A0559F9CE3145CEAD352814018B1C85517828E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A0559F9CE3145CEAD352814018B1C85517828E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/owdAy1uGb5xBtSUp5jP2T5T6nipmxH2j3QJFiaEyz3x/0/3137372e31302e3132352e302f32342d3234203d3e203532393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:bb:48:e6:7f:bf:bc:20:97:b2:81:c3:58:da:50:29:7a:3e:
         9d:23:c4:2d:65:5b:48:56:73:7e:b6:b3:c4:ca:8b:c2:9f:4c:
         24:17:b5:36:da:51:26:55:18:78:d1:9d:80:24:bd:49:ce:1d:
         ff:fd:24:ce:0e:0b:a5:ee:9d:db:09:50:1f:9b:e6:96:94:c6:
         dc:2d:61:d0:4c:71:c9:23:66:d7:fc:27:40:bf:55:29:e8:75:
         e1:d8:89:67:13:42:eb:94:19:e7:33:3d:4c:6e:d3:94:0b:24:
         19:26:a8:a0:2e:f6:6d:89:06:17:9a:22:02:e4:3f:a0:c3:b4:
         db:32:61:cd:30:a4:3f:c2:02:41:49:50:c3:35:fe:39:5a:7b:
         12:2d:88:ee:04:32:d5:4f:05:47:24:a8:e7:12:a1:a6:3c:34:
         d1:02:40:74:d9:2b:f2:53:fc:59:ea:df:aa:7e:d0:7b:ce:64:
         ba:49:61:1b:06:cd:6a:d5:f6:47:4e:a1:3a:55:88:05:0f:c8:
         47:de:ba:c6:5a:fb:98:95:40:7f:87:9f:cf:4d:06:2c:6c:d6:
         58:3d:6f:6a:49:8c:96:54:73:96:b5:0b:cc:77:c4:9f:b5:92:
         e5:81:01:81:46:e9:fb:0a:ae:25:3e:20:f7:cf:6d:a8:fe:d8:
         e2:f3:da:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:10:40 2025 by rpki-client