Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38372e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3132392e38372e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          vBcqdwZytXM0JejF8McZgAXD7lnVliZc+tjvH0jQzZ0=
Subject key identifier:   AD:8C:5C:4B:17:43:CA:A4:90:CF:40:BD:27:27:04:AE:A1:CB:AD:08
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       2ADC4651C01C1DD4EFBAA8129CD96C6CE96B29A9
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38372e302f32342d3234203d3e20323632333933.roa
Signing time:             Tue 17 Dec 2024 13:50:44 +0000
ROA not before:           Tue 17 Dec 2024 13:45:44 +0000
ROA not after:            Tue 16 Dec 2025 13:50:44 +0000
asID:                     262393
IP address blocks:        177.129.87.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:dc:46:51:c0:1c:1d:d4:ef:ba:a8:12:9c:d9:6c:6c:e9:6b:29:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Dec 17 13:45:44 2024 GMT
            Not After : Dec 16 13:50:44 2025 GMT
        Subject: CN=AD8C5C4B1743CAA490CF40BD272704AEA1CBAD08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:f6:23:22:5a:06:fb:54:22:43:7e:af:20:
                    ee:a6:60:5f:14:79:40:d0:9c:ea:5a:22:d2:cc:e4:
                    54:1a:bc:60:49:cc:bd:8d:4a:ca:27:0b:73:f6:f1:
                    41:c5:24:21:7f:39:a3:44:25:95:76:3c:f8:ba:af:
                    54:1e:b0:f3:3b:c3:27:14:a5:44:1b:76:4c:a5:4e:
                    52:35:36:5b:28:82:89:89:f9:3f:ff:0e:78:3e:2b:
                    47:b0:06:bc:35:e3:30:60:40:70:6c:44:1c:03:95:
                    64:c6:32:98:63:11:b1:a0:50:45:c6:1b:d4:fe:56:
                    b9:12:14:e2:c9:8b:d4:13:28:a0:2f:0a:5a:8d:80:
                    06:4d:8a:63:7b:f9:47:e5:6a:f1:1f:9a:13:38:da:
                    7c:66:bc:15:94:75:40:c1:43:42:db:33:b9:f3:4c:
                    e7:11:ac:31:f4:0c:9b:59:7f:20:71:71:2d:00:bd:
                    07:29:96:9e:26:f6:ee:6e:7d:37:22:aa:87:c5:36:
                    67:41:da:59:ed:14:34:91:e4:f3:72:e5:77:a4:e8:
                    3c:5b:2b:87:60:ed:b4:b4:e1:c3:de:78:a4:e3:41:
                    ec:ef:2f:f0:d3:fb:02:60:97:17:1e:73:41:84:2a:
                    9e:3c:b1:59:78:fe:da:73:0b:99:53:3b:b0:b0:ef:
                    a9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8C:5C:4B:17:43:CA:A4:90:CF:40:BD:27:27:04:AE:A1:CB:AD:08
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38372e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:c2:09:a1:ce:84:76:0d:83:45:2f:5a:94:90:7d:76:d8:3b:
         9c:9e:46:50:e9:6a:99:e0:61:96:44:63:17:a8:e0:7c:bc:b3:
         0e:b5:24:28:b3:cd:d0:b0:55:fe:a5:b8:e7:2d:2a:28:83:51:
         cc:27:a6:50:5d:78:23:54:d2:ac:16:6a:87:c7:fc:52:47:c8:
         82:08:69:e1:bd:69:67:a6:a0:46:f3:dc:1e:a7:98:9b:3c:9a:
         e9:26:fe:68:48:b2:2a:b4:db:e3:76:b5:9c:b4:8d:74:51:79:
         6b:b3:3a:85:aa:3b:76:80:5b:89:21:8f:74:41:b2:d0:99:dc:
         aa:23:35:72:92:7c:a9:9c:2e:02:b1:b8:86:fd:a1:9a:60:65:
         70:f6:8a:6f:b7:44:0f:6f:df:0b:a5:dd:a9:43:14:6f:08:39:
         f5:d5:36:fa:23:c1:8f:d0:bd:b6:11:dc:c3:44:85:43:8b:06:
         3e:b6:27:ed:81:92:aa:e0:76:b5:81:70:2f:74:5d:aa:6c:e0:
         f7:db:94:d0:ab:42:73:df:24:eb:08:44:0a:d0:f5:a5:59:44:
         3f:f9:4a:f9:cc:cd:4f:a4:89:72:d6:c0:b6:1c:58:46:f0:62:
         7c:c0:e7:a9:d5:bd:49:b1:28:91:dc:42:ba:55:47:4d:b6:95:
         70:e9:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:37:58 2025 by rpki-client