Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32332d3233203d3e203532363331.roa
File:                     3137372e3132382e32382e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          f2+TuASCqjsVqADU8tvJsUQMFHl2OMT5K/ebIUP/nKM=
Subject key identifier:   E2:88:08:2D:A8:FF:E3:AD:11:BF:88:46:C6:BF:A4:BB:9A:AE:A6:AB
Certificate issuer:       /CN=7BB66415D711DB401704B5A5A315C202CB8AF863
Certificate serial:       7D065BEB4BDA5B0BB7641FD45616DC654B6FFF2E
Authority key identifier: 7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32332d3233203d3e203532363331.roa
Signing time:             Tue 14 Jan 2025 13:26:19 +0000
ROA not before:           Tue 14 Jan 2025 13:21:19 +0000
ROA not after:            Tue 13 Jan 2026 13:26:19 +0000
asID:                     52631
IP address blocks:        177.128.28.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:06:5b:eb:4b:da:5b:0b:b7:64:1f:d4:56:16:dc:65:4b:6f:ff:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB66415D711DB401704B5A5A315C202CB8AF863
        Validity
            Not Before: Jan 14 13:21:19 2025 GMT
            Not After : Jan 13 13:26:19 2026 GMT
        Subject: CN=E288082DA8FFE3AD11BF8846C6BFA4BB9AAEA6AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ad:bb:8b:31:01:9f:7e:cd:83:cb:5a:e2:f4:
                    26:26:1a:1a:6b:91:37:23:45:58:6a:ee:0f:56:bf:
                    87:08:57:52:d5:fe:d2:5f:4f:25:c2:58:83:78:e0:
                    e8:d6:77:dd:32:62:c7:5e:cb:08:74:03:a1:97:fa:
                    84:da:d6:1d:35:47:1d:69:bc:a1:93:98:58:75:80:
                    1b:9a:70:d0:90:ef:89:fc:15:4c:2e:05:c7:3a:4a:
                    eb:db:1b:93:88:27:24:28:c9:90:a4:c0:b5:fd:68:
                    c1:37:a6:df:b7:19:db:5c:8c:a9:be:2d:94:78:02:
                    a4:d2:6a:b2:48:f6:28:2a:ef:67:23:89:de:03:47:
                    bf:4f:c7:dd:b0:f4:0c:a7:a8:9d:2b:4c:cb:6b:36:
                    9b:8b:fa:52:79:e7:7a:20:f4:46:e3:13:ab:ec:26:
                    fd:96:d4:27:e8:91:8e:1a:2c:a9:76:d7:99:c0:4a:
                    92:37:3d:9a:31:b7:ec:fe:a5:c3:0f:7a:5a:3f:b0:
                    9a:b1:0a:3f:aa:fd:cc:81:1c:38:e2:87:b2:d9:1d:
                    44:6f:6e:e3:85:c1:58:64:e6:1a:97:da:01:9a:ea:
                    40:14:ce:63:0e:af:f4:21:f5:e2:59:6e:f6:f7:87:
                    68:84:54:72:e2:0d:75:0b:32:f7:22:3c:2c:9b:2f:
                    c1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:88:08:2D:A8:FF:E3:AD:11:BF:88:46:C6:BF:A4:BB:9A:AE:A6:AB
            X509v3 Authority Key Identifier:
                keyid:7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/7BB66415D711DB401704B5A5A315C202CB8AF863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:50:62:b1:4a:0d:51:61:17:b3:28:c8:20:f0:49:d2:61:29:
         2c:97:3c:53:d6:f0:82:35:7e:15:e8:84:6b:35:b7:f1:1d:b3:
         4f:e2:b0:26:02:0b:9e:20:49:e4:d1:63:1d:61:61:49:1b:53:
         ab:83:e1:da:df:f8:0e:1c:70:71:2b:61:19:9e:76:7d:a6:95:
         ab:52:f3:e4:fa:d7:b0:87:fb:13:f2:96:f4:df:da:c9:18:bc:
         ea:ae:cf:1e:d1:35:ff:40:c8:0f:f3:3d:f0:45:f0:b9:fb:7d:
         2f:a3:99:91:43:66:f2:f0:3d:45:59:d0:01:27:49:92:66:05:
         52:0a:c2:d7:78:77:c1:0d:ed:f9:7d:08:64:e8:14:70:c3:ec:
         df:36:a8:aa:04:9f:30:fb:38:3f:63:85:1f:9d:79:33:19:f6:
         8f:1b:a2:e3:54:ae:ab:bf:93:17:a4:f3:df:f3:8d:1d:6e:37:
         80:90:95:00:b7:9e:70:35:59:86:d4:a3:8a:de:9f:ef:3b:a3:
         27:43:e7:5b:d5:e4:af:74:32:94:14:fc:c6:fc:a4:d9:a1:a2:
         a0:da:f6:16:43:52:ed:da:22:9c:60:2b:6f:b1:fd:00:7b:cb:
         0c:1e:2d:dd:be:a5:9f:1e:82:4d:84:3b:10:88:4c:25:ba:88:
         87:a1:d9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:29:45 2025 by rpki-client