Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/3137372e3139302e3138342e302f32312d3233203d3e20323633343632.roa
File:                     3137372e3139302e3138342e302f32312d3233203d3e20323633343632.roa (raw, json)
Hash identifier:          G0oCrODJlw5y7YwuWis3ZHiXbMGvPLeJgfBt2Scv+ZE=
Subject key identifier:   8B:31:DC:A1:89:28:0D:3E:F3:91:C8:DE:C5:C9:14:EF:76:41:1A:3A
Certificate issuer:       /CN=ECAF836B05993192B75EB1C0F1CB4F986B3860AF
Certificate serial:       48DDD78CED9C243C6F7427B1C4CBA46EA9612E9E
Authority key identifier: EC:AF:83:6B:05:99:31:92:B7:5E:B1:C0:F1:CB:4F:98:6B:38:60:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECAF836B05993192B75EB1C0F1CB4F986B3860AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/3137372e3139302e3138342e302f32312d3233203d3e20323633343632.roa
Signing time:             Thu 28 Mar 2024 02:39:59 +0000
ROA not before:           Thu 28 Mar 2024 02:34:59 +0000
ROA not after:            Thu 27 Mar 2025 02:39:59 +0000
asID:                     263462
IP address blocks:        177.190.184.0/21 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:dd:d7:8c:ed:9c:24:3c:6f:74:27:b1:c4:cb:a4:6e:a9:61:2e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECAF836B05993192B75EB1C0F1CB4F986B3860AF
        Validity
            Not Before: Mar 28 02:34:59 2024 GMT
            Not After : Mar 27 02:39:59 2025 GMT
        Subject: CN=8B31DCA189280D3EF391C8DEC5C914EF76411A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e2:6d:5c:23:8e:1a:c5:fb:00:ae:7b:95:15:
                    e1:ca:98:13:59:7e:3d:e4:99:da:a6:94:6f:dd:a3:
                    45:a4:27:51:5a:e0:51:24:c6:3e:c2:65:09:03:02:
                    9e:7f:70:60:f9:18:2f:f2:1b:71:6f:d8:a8:1a:4b:
                    1d:18:bf:dd:92:ba:41:ff:58:51:4f:21:8f:d0:7f:
                    ff:9c:fd:e5:c4:c3:77:3b:0f:02:40:5b:5f:20:30:
                    55:a2:cd:5b:4f:b4:60:ae:88:f7:1f:c0:ff:17:9e:
                    14:0a:e6:4d:bf:7f:2f:b1:f8:2c:5b:c4:a9:d7:de:
                    57:d3:8d:61:92:ec:32:fa:f8:39:8f:2a:b3:0c:56:
                    6b:02:bc:da:47:74:c5:aa:31:6a:b2:e6:86:9c:da:
                    a2:88:5e:a6:14:89:a4:d3:ea:3c:0d:60:c2:ba:f9:
                    c8:b2:53:1c:f8:fb:6a:16:14:df:f3:76:6a:fb:0a:
                    17:32:bf:00:ba:98:ed:bc:9e:da:7b:27:ff:ce:c9:
                    d5:0a:91:7b:cd:68:20:a0:0e:6f:e7:d7:89:5c:18:
                    71:94:b3:0e:20:d3:a5:b4:d4:fe:17:09:5f:3f:46:
                    47:a8:f8:ee:ac:fe:38:d8:8e:25:e1:8c:9c:1b:98:
                    a0:7b:c6:ff:70:21:c0:21:ca:6f:11:75:89:4d:88:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:31:DC:A1:89:28:0D:3E:F3:91:C8:DE:C5:C9:14:EF:76:41:1A:3A
            X509v3 Authority Key Identifier:
                keyid:EC:AF:83:6B:05:99:31:92:B7:5E:B1:C0:F1:CB:4F:98:6B:38:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/ECAF836B05993192B75EB1C0F1CB4F986B3860AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECAF836B05993192B75EB1C0F1CB4F986B3860AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/0/3137372e3139302e3138342e302f32312d3233203d3e20323633343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:7f:f9:79:e4:2c:95:e6:35:b2:f5:45:c6:1e:4f:e1:f4:94:
         c9:8c:6d:58:b6:fe:7f:ec:13:c6:b9:40:fc:1a:91:57:5d:b8:
         b1:3b:23:aa:20:0b:1a:9d:94:00:20:1d:9f:c0:96:8d:d6:5c:
         ca:7f:4c:ed:a8:31:20:af:3b:10:05:6b:b9:c5:cf:6d:b7:c6:
         ff:25:ba:6f:8a:65:e2:4b:de:6a:45:a8:d5:dd:94:b3:32:d4:
         56:22:fd:7d:b1:5b:13:c9:fc:f3:68:cc:af:a9:f0:e6:62:1e:
         c0:3b:23:8b:6c:c5:77:ad:ae:a3:fe:95:46:30:4a:06:61:72:
         1c:fe:84:16:1e:67:73:be:e2:e8:ee:dd:b1:11:1c:87:37:8a:
         14:47:b9:03:08:c0:45:b9:6b:4c:3b:04:62:fa:e8:ad:bf:20:
         fe:88:f0:8b:c2:d3:c4:65:d5:27:cc:b7:8f:cb:e8:cf:89:ec:
         95:d2:97:c6:36:d9:f0:f3:b6:0f:b8:28:bf:fd:6a:e4:73:32:
         ab:be:8a:54:cd:08:ef:25:a9:4e:a4:5e:45:ee:82:45:8d:1e:
         4d:0f:14:23:51:e4:c1:ec:b9:29:12:a1:dc:7b:f3:d4:7b:4d:
         97:93:51:d5:cd:3c:b8:ed:09:ce:25:2f:dd:2a:93:86:d0:a3:
         6a:99:7f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:43 2025 by rpki-client