Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32372e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32372e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          sc8VId/XTKjJMAm1D/XL+B6jfBpf56U9i7RKACZimAg=
Subject key identifier:   C0:5F:B9:72:51:EF:F1:83:A7:ED:23:A1:EA:4D:9E:07:D6:CB:56:79
Certificate issuer:       /CN=7BB66415D711DB401704B5A5A315C202CB8AF863
Certificate serial:       5CD9DC9111CB784B73D29E307D606E328A295582
Authority key identifier: 7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32372e302f32342d3234203d3e203532363331.roa
Signing time:             Tue 14 Jan 2025 13:26:12 +0000
ROA not before:           Tue 14 Jan 2025 13:21:12 +0000
ROA not after:            Tue 13 Jan 2026 13:26:12 +0000
asID:                     52631
IP address blocks:        177.128.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d9:dc:91:11:cb:78:4b:73:d2:9e:30:7d:60:6e:32:8a:29:55:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB66415D711DB401704B5A5A315C202CB8AF863
        Validity
            Not Before: Jan 14 13:21:12 2025 GMT
            Not After : Jan 13 13:26:12 2026 GMT
        Subject: CN=C05FB97251EFF183A7ED23A1EA4D9E07D6CB5679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:59:71:07:a2:06:c2:0a:6a:09:59:28:e0:
                    13:4c:b1:4e:1b:6c:96:bf:57:51:45:d7:20:78:e4:
                    a3:2f:78:25:da:7e:00:d0:48:e2:45:d4:d7:3f:89:
                    45:e7:ad:ca:5d:0a:63:b0:21:54:f3:ab:c4:cf:0c:
                    23:fe:a4:e9:23:02:d4:a0:ad:fe:37:6e:a4:07:ff:
                    85:e2:f2:01:e0:64:a2:06:c1:c4:d9:36:4b:cb:bd:
                    0a:da:bb:11:e4:c1:29:a0:0f:50:86:d2:d8:85:fa:
                    22:e5:18:66:d3:ce:0e:9d:a5:b4:3d:7d:ae:ad:31:
                    e3:e7:fb:df:b3:d8:33:91:aa:5f:f7:9e:30:61:24:
                    bf:51:26:27:0a:db:8c:6b:2a:78:a8:5e:f4:2a:65:
                    c0:54:54:35:4d:71:0c:00:fd:bb:e8:5f:de:4f:5e:
                    08:5d:14:9c:e8:07:c4:ec:da:78:7a:ab:7d:7b:a4:
                    cb:1f:75:7a:b9:94:9a:cc:cf:8d:a1:4e:87:a4:30:
                    49:7e:42:38:e1:f6:88:ce:71:0f:b9:2c:dd:6a:01:
                    1a:35:64:18:89:a2:b7:f7:cd:e4:72:01:33:5d:58:
                    7a:be:02:35:8e:03:70:24:fc:bc:7f:0e:34:3e:b9:
                    c7:ce:c3:3b:9a:07:b2:55:90:88:ea:9f:99:e8:68:
                    0f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5F:B9:72:51:EF:F1:83:A7:ED:23:A1:EA:4D:9E:07:D6:CB:56:79
            X509v3 Authority Key Identifier:
                keyid:7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/7BB66415D711DB401704B5A5A315C202CB8AF863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32372e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:36:5f:c1:9f:31:a6:86:e7:bf:0c:f8:63:e9:5c:64:a5:c1:
         f4:ce:ea:3f:a3:be:fe:11:84:ae:de:2e:c5:f7:20:dd:0b:1c:
         11:93:a7:a7:2a:c3:7a:2d:4a:3a:d3:c4:b6:6d:23:80:72:65:
         10:5b:93:d6:cf:7c:68:27:4d:95:46:22:03:55:a8:bd:17:2a:
         76:bd:e3:18:c2:51:56:32:f3:2e:43:9e:56:89:f3:24:93:f2:
         da:14:60:0f:3d:7f:4d:52:44:a6:51:d4:40:13:fa:74:75:f7:
         48:77:cf:96:64:5a:30:a8:e8:6d:ef:58:af:f5:bb:ac:d5:76:
         e3:49:26:c6:80:a7:d3:a8:7f:bd:cc:ba:5c:45:5c:74:72:30:
         96:9d:ba:66:c7:9c:b5:64:0b:06:4c:2a:7a:bf:20:67:21:42:
         19:25:d3:de:01:a1:08:10:71:ac:fc:4f:c5:f9:e7:ba:01:8b:
         d7:c7:a5:38:22:f9:1f:23:47:96:95:d8:86:31:04:21:67:86:
         28:17:e4:d0:63:bf:e3:8a:1b:29:16:f3:35:0d:f0:e6:1c:ed:
         35:26:ff:69:4b:be:60:c4:9e:dc:9f:ea:33:a6:a6:ee:7e:f8:
         f7:6e:9c:54:ad:75:29:0b:a6:54:ee:5e:70:6d:39:50:7b:9d:
         c8:80:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:56:26 2025 by rpki-client