Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32332d3233203d3e203532363331.roa
File:                     3137372e3132382e32362e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          5IXgwR7WrIomW2Tadc08Idu4zdYFrWmMbxuvwYWRlKM=
Subject key identifier:   7F:95:79:D5:98:96:02:EB:5D:B4:DE:D6:29:35:3B:EA:53:41:B6:9F
Certificate issuer:       /CN=7BB66415D711DB401704B5A5A315C202CB8AF863
Certificate serial:       7B8B438886ECC494554777E9646EFF55DB9454B5
Authority key identifier: 7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32332d3233203d3e203532363331.roa
Signing time:             Tue 14 Jan 2025 13:26:10 +0000
ROA not before:           Tue 14 Jan 2025 13:21:10 +0000
ROA not after:            Tue 13 Jan 2026 13:26:10 +0000
asID:                     52631
IP address blocks:        177.128.26.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8b:43:88:86:ec:c4:94:55:47:77:e9:64:6e:ff:55:db:94:54:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB66415D711DB401704B5A5A315C202CB8AF863
        Validity
            Not Before: Jan 14 13:21:10 2025 GMT
            Not After : Jan 13 13:26:10 2026 GMT
        Subject: CN=7F9579D5989602EB5DB4DED629353BEA5341B69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:32:09:21:8b:39:f7:c3:9e:bc:0b:74:68:0f:
                    76:fa:3b:2d:7a:63:62:37:6f:09:7f:da:2e:0f:b5:
                    92:b4:f6:06:7b:66:fe:71:9a:9c:7a:d4:6d:69:04:
                    14:44:24:1d:ce:54:ed:60:06:ab:92:7c:3f:84:de:
                    6f:c4:b2:f9:66:b4:4a:0c:84:e2:26:ea:7f:33:a3:
                    e0:7c:33:bc:26:ea:01:33:fa:e2:d6:7c:ab:ac:71:
                    d1:9b:4a:68:e0:b7:4d:3b:61:bc:24:61:23:d8:6b:
                    9c:7c:49:5a:ea:26:6f:ed:b1:04:f6:85:1d:24:a0:
                    8e:5c:2f:dc:4b:53:d9:69:5c:b7:95:c3:c4:47:7c:
                    2d:e1:6c:b7:ea:3a:da:c6:2b:f8:cc:62:fe:a6:36:
                    4a:09:65:15:ba:b6:38:ca:43:4a:a3:cf:c0:6f:ff:
                    f1:68:89:59:f3:14:5c:d6:53:29:eb:a6:f7:bf:1f:
                    c3:cb:1e:fe:48:49:2e:13:f4:72:90:bf:1e:e3:ae:
                    89:59:f6:f8:43:32:c8:53:1f:71:9d:ae:28:1a:a1:
                    35:69:1c:22:42:4e:28:15:d5:94:e0:21:1f:5f:91:
                    ce:ea:51:18:ef:30:06:3a:35:13:3d:c9:ff:63:ac:
                    12:6a:10:6a:c8:80:f2:b2:1c:41:16:1f:cb:83:3f:
                    6d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:95:79:D5:98:96:02:EB:5D:B4:DE:D6:29:35:3B:EA:53:41:B6:9F
            X509v3 Authority Key Identifier:
                keyid:7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/7BB66415D711DB401704B5A5A315C202CB8AF863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:1b:85:64:93:1c:71:95:59:c4:60:0c:7d:d6:42:88:d8:fb:
         a7:d4:75:1c:c8:30:15:37:22:70:86:0d:48:4a:2e:ef:44:1a:
         dc:ee:79:93:af:72:db:28:59:92:3e:db:f0:19:90:3e:1d:67:
         86:08:5c:9c:08:97:63:00:1a:99:75:35:52:68:3b:60:6a:d8:
         98:ad:ba:15:a2:1e:ab:39:e4:e9:2a:af:6d:84:3d:ac:59:08:
         7a:ce:9b:c6:1f:5b:18:ef:ad:68:1a:1a:9c:7b:61:6f:51:5f:
         ed:eb:09:66:74:db:8e:07:bb:4f:b5:97:14:be:48:a1:56:64:
         28:b7:ae:d8:a9:14:45:ec:e3:a9:81:8a:49:86:a6:bd:32:12:
         14:7a:dc:a2:60:46:47:41:2e:13:a6:5c:6b:c2:54:15:1e:e6:
         a7:12:68:39:b4:0f:c2:d0:39:88:4e:e4:69:41:99:b8:7a:96:
         89:22:2e:10:29:9e:0a:c1:83:8f:68:9a:84:2e:99:d1:e5:bd:
         cf:97:52:e3:18:7e:18:6c:8e:ad:fc:e9:7c:4e:86:83:ae:9d:
         06:11:4b:42:1b:3c:d0:45:12:47:58:8c:f7:e8:4a:3c:0d:5c:
         16:1f:92:28:9a:5e:8c:9d:6c:11:f9:6e:02:2e:46:ea:bd:42:
         3d:01:5e:20
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUe4tDiIbsxJRVR3fpZG7/VduUVLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JCNjY0MTVENzExREI0MDE3MDRCNUE1QTMxNUMyMDJD
QjhBRjg2MzAeFw0yNTAxMTQxMzIxMTBaFw0yNjAxMTMxMzI2MTBaMDMxMTAvBgNV
BAMTKDdGOTU3OUQ1OTg5NjAyRUI1REI0REVENjI5MzUzQkVBNTM0MUI2OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNMgkhizn3w568C3RoD3b6Oy16
Y2I3bwl/2i4PtZK09gZ7Zv5xmpx61G1pBBREJB3OVO1gBquSfD+E3m/EsvlmtEoM
hOIm6n8zo+B8M7wm6gEz+uLWfKuscdGbSmjgt007YbwkYSPYa5x8SVrqJm/tsQT2
hR0koI5cL9xLU9lpXLeVw8RHfC3hbLfqOtrGK/jMYv6mNkoJZRW6tjjKQ0qjz8Bv
//FoiVnzFFzWUynrpve/H8PLHv5ISS4T9HKQvx7jrolZ9vhDMshTH3GdrigaoTVp
HCJCTigV1ZTgIR9fkc7qURjvMAY6NRM9yf9jrBJqEGrIgPKyHEEWH8uDP227AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUf5V51ZiWAutdtN7WKTU76lNBtp8wHwYDVR0j
BBgwFoAUe7ZkFdcR20AXBLWloxXCAsuK+GMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC83QkI2NjQxNUQ3MTFEQjQwMTcwNEI1QTVBMzE1QzIwMkNCOEFGODYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCQjY2NDE1RDcxMURCNDAx
NzA0QjVBNUEzMTVDMjAyQ0I4QUY4NjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzEzNzM3MmUzMTMyMzgyZTMyMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzYzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsYAaMA0GCSqGSIb3DQEBCwUAA4IBAQAwG4Vkkxxx
lVnEYAx91kKI2Pun1HUcyDAVNyJwhg1ISi7vRBrc7nmTr3LbKFmSPtvwGZA+HWeG
CFycCJdjABqZdTVSaDtgatiYrboVoh6rOeTpKq9thD2sWQh6zpvGH1sY761oGhqc
e2FvUV/t6wlmdNuOB7tPtZcUvkihVmQot67YqRRF7OOpgYpJhqa9MhIUetyiYEZH
QS4TplxrwlQVHuanEmg5tA/C0DmITuRpQZm4epaJIi4QKZ4KwYOPaJqELpnR5b3P
l1LjGH4YbI6t/Ol8ToaDrp0GEUtCGzzQRRJHWIz36Eo8DVwWH5Ioml6MnWwR+W4C
LkbqvUI9AV4g
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:29:43 2025 by rpki-client