Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32332d3233203d3e203532363331.roa
File:                     3137372e3132382e32342e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          4Oine99t5O4n7h2GuY2hdzPX6YJubI0Ho8gR5g16vAE=
Subject key identifier:   C3:50:E1:0B:6C:75:29:EC:DF:77:B2:4C:59:C6:85:74:94:BC:45:4B
Certificate issuer:       /CN=7BB66415D711DB401704B5A5A315C202CB8AF863
Certificate serial:       1034344EBD90CE1EA64B10FFF9EBA9D9B4DEAEF3
Authority key identifier: 7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32332d3233203d3e203532363331.roa
Signing time:             Tue 14 Jan 2025 13:26:11 +0000
ROA not before:           Tue 14 Jan 2025 13:21:11 +0000
ROA not after:            Tue 13 Jan 2026 13:26:11 +0000
asID:                     52631
IP address blocks:        177.128.24.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:34:34:4e:bd:90:ce:1e:a6:4b:10:ff:f9:eb:a9:d9:b4:de:ae:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB66415D711DB401704B5A5A315C202CB8AF863
        Validity
            Not Before: Jan 14 13:21:11 2025 GMT
            Not After : Jan 13 13:26:11 2026 GMT
        Subject: CN=C350E10B6C7529ECDF77B24C59C6857494BC454B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8f:08:a5:1a:b2:f7:56:a4:a4:de:20:8a:17:
                    d7:c6:a2:b7:1f:ba:87:50:ae:c2:89:7d:7c:1b:87:
                    13:d0:7a:8a:ad:10:1f:3d:15:80:c0:5d:32:e6:a4:
                    bb:9f:68:c3:66:4b:75:8d:48:e4:c0:d1:50:2b:70:
                    40:16:64:2a:ec:ce:b7:e0:7a:2b:55:7c:a0:2b:9a:
                    8c:bb:92:16:69:10:e1:20:cc:3a:8d:e3:a6:dd:ef:
                    85:49:83:ee:ae:f6:15:1a:a6:73:a9:ac:ac:58:fb:
                    a2:a3:0a:8a:4b:64:cc:fe:86:1a:7b:aa:e0:a9:6f:
                    82:dc:e2:bc:0f:51:5c:59:dd:f2:36:b5:f0:74:a9:
                    07:86:a9:78:d4:91:15:21:0d:cd:2e:71:93:ad:54:
                    90:8c:4c:92:b6:5e:a7:87:95:0d:30:81:bc:52:eb:
                    db:f9:6c:d9:3a:a9:da:7e:da:57:3b:18:66:ab:fb:
                    14:e5:24:df:03:4e:79:29:75:ce:4f:b1:61:0d:a6:
                    ef:13:71:78:79:f9:90:3a:19:ce:18:b0:cb:12:d3:
                    3f:c5:77:df:38:9d:5b:0d:3d:9a:f7:3f:31:f7:51:
                    81:2e:2d:78:74:20:a6:ad:a9:4c:8e:02:39:b7:40:
                    1f:57:88:62:e9:95:bd:df:a7:02:da:f0:94:82:8d:
                    62:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:50:E1:0B:6C:75:29:EC:DF:77:B2:4C:59:C6:85:74:94:BC:45:4B
            X509v3 Authority Key Identifier:
                keyid:7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/7BB66415D711DB401704B5A5A315C202CB8AF863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:8c:4a:8a:cc:aa:c4:2a:aa:ac:77:a1:fb:a6:e9:21:5b:71:
         d8:77:ed:ec:3f:cb:df:16:91:fc:92:8c:67:87:cb:0d:38:f8:
         df:98:6c:d8:cb:b8:57:4b:8f:82:69:a2:ee:b4:46:d0:37:4b:
         cf:d8:dd:67:a2:86:26:63:57:c9:c2:b4:c1:24:5e:96:15:ec:
         83:12:f4:37:5a:23:e9:c7:e7:f7:40:35:cd:26:64:32:54:c6:
         a8:64:a9:48:32:34:5a:97:b5:8c:a7:27:2a:b2:e9:0e:ab:93:
         74:90:90:18:fc:e9:b2:e9:f0:47:5a:89:45:11:fd:35:55:db:
         fc:8c:25:ff:cc:2b:79:85:6f:25:ef:4c:31:88:3a:2d:51:48:
         91:c5:74:4f:2f:1f:a0:29:d1:2d:36:6a:82:6e:8a:70:ad:6d:
         92:23:55:e8:14:a1:f4:6f:93:35:14:c5:03:74:98:e3:81:f6:
         02:0f:d9:21:4a:34:a7:99:db:11:10:27:76:a6:11:bd:0b:e7:
         39:48:b7:2f:56:c6:56:94:84:42:46:88:97:f5:63:0f:5f:5e:
         22:7d:ba:92:3f:86:aa:a6:8a:af:80:0f:d8:e1:bf:4c:ba:97:
         59:e8:30:f4:15:34:2c:85:80:03:55:7b:7c:00:87:78:3d:d5:
         cb:42:a5:96
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEDQ0Tr2Qzh6mSxD/+eup2bTervMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JCNjY0MTVENzExREI0MDE3MDRCNUE1QTMxNUMyMDJD
QjhBRjg2MzAeFw0yNTAxMTQxMzIxMTFaFw0yNjAxMTMxMzI2MTFaMDMxMTAvBgNV
BAMTKEMzNTBFMTBCNkM3NTI5RUNERjc3QjI0QzU5QzY4NTc0OTRCQzQ1NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCojwilGrL3VqSk3iCKF9fGorcf
uodQrsKJfXwbhxPQeoqtEB89FYDAXTLmpLufaMNmS3WNSOTA0VArcEAWZCrszrfg
eitVfKArmoy7khZpEOEgzDqN46bd74VJg+6u9hUapnOprKxY+6KjCopLZMz+hhp7
quCpb4Lc4rwPUVxZ3fI2tfB0qQeGqXjUkRUhDc0ucZOtVJCMTJK2XqeHlQ0wgbxS
69v5bNk6qdp+2lc7GGar+xTlJN8DTnkpdc5PsWENpu8TcXh5+ZA6Gc4YsMsS0z/F
d984nVsNPZr3PzH3UYEuLXh0IKatqUyOAjm3QB9XiGLplb3fpwLa8JSCjWKrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUw1DhC2x1Kezfd7JMWcaFdJS8RUswHwYDVR0j
BBgwFoAUe7ZkFdcR20AXBLWloxXCAsuK+GMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC83QkI2NjQxNUQ3MTFEQjQwMTcwNEI1QTVBMzE1QzIwMkNCOEFGODYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCQjY2NDE1RDcxMURCNDAx
NzA0QjVBNUEzMTVDMjAyQ0I4QUY4NjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzEzNzM3MmUzMTMyMzgyZTMyMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzYzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsYAYMA0GCSqGSIb3DQEBCwUAA4IBAQBfjEqKzKrE
Kqqsd6H7pukhW3HYd+3sP8vfFpH8koxnh8sNOPjfmGzYy7hXS4+CaaLutEbQN0vP
2N1nooYmY1fJwrTBJF6WFeyDEvQ3WiPpx+f3QDXNJmQyVMaoZKlIMjRal7WMpycq
sukOq5N0kJAY/Omy6fBHWolFEf01Vdv8jCX/zCt5hW8l70wxiDotUUiRxXRPLx+g
KdEtNmqCbopwrW2SI1XoFKH0b5M1FMUDdJjjgfYCD9khSjSnmdsRECd2phG9C+c5
SLcvVsZWlIRCRoiX9WMPX14ifbqSP4aqpoqvgA/Y4b9MupdZ6DD0FTQshYADVXt8
AId4PdXLQqWW
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:22:17 2025 by rpki-client