Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e33302e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          GRw/pzdQhTHbzWeQcrV6DWUOiFaNbu8cu6D4NbLPuuI=
Subject key identifier:   0A:18:A9:46:82:31:75:3B:1F:28:07:EC:BC:67:9C:60:89:BF:77:6C
Certificate issuer:       /CN=7BB66415D711DB401704B5A5A315C202CB8AF863
Certificate serial:       7C2CB59331947DE924D9BD11D1F01ADC9365C8A7
Authority key identifier: 7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32342d3234203d3e203532363331.roa
Signing time:             Tue 14 Jan 2025 13:26:18 +0000
ROA not before:           Tue 14 Jan 2025 13:21:18 +0000
ROA not after:            Tue 13 Jan 2026 13:26:18 +0000
asID:                     52631
IP address blocks:        177.128.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2c:b5:93:31:94:7d:e9:24:d9:bd:11:d1:f0:1a:dc:93:65:c8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB66415D711DB401704B5A5A315C202CB8AF863
        Validity
            Not Before: Jan 14 13:21:18 2025 GMT
            Not After : Jan 13 13:26:18 2026 GMT
        Subject: CN=0A18A9468231753B1F2807ECBC679C6089BF776C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:45:6a:1a:01:7d:a8:aa:99:27:42:93:99:
                    98:0a:a0:19:1e:3c:da:23:8c:be:c4:89:11:1b:04:
                    f4:f4:fe:7f:21:b0:f7:48:c5:9d:ae:da:62:ce:e3:
                    8d:b4:cc:75:cd:a3:25:f1:18:e4:02:6a:2d:da:d1:
                    c2:bf:cc:2d:35:38:dd:f0:13:ec:f8:98:69:9a:a8:
                    5f:80:82:ee:a0:45:c8:26:3a:98:c5:b6:09:28:44:
                    54:a7:83:9f:09:28:6a:04:ac:8e:81:60:8e:63:32:
                    23:ec:2a:5c:50:4f:ed:f4:f8:91:ab:1b:88:f8:14:
                    f7:56:b1:fa:3e:01:7a:c5:bd:ff:8c:b6:60:da:f8:
                    fb:be:38:16:13:b8:d9:0b:78:72:0e:8b:a0:1b:84:
                    57:fb:f6:80:24:f4:2f:9e:93:7d:3a:cd:32:dc:ae:
                    ab:0e:2b:32:82:34:59:2d:2e:07:f3:63:9c:ef:57:
                    44:7f:8c:f0:1a:c9:2b:87:01:04:f2:1d:81:78:f8:
                    33:be:59:4c:32:75:21:59:84:4f:02:f9:e3:e2:8c:
                    d3:20:32:d3:ba:86:1d:12:15:14:26:3f:d0:93:ee:
                    c7:5a:11:e7:c4:55:e8:fd:81:fb:15:b4:f7:c5:e4:
                    ba:db:27:af:da:0c:e9:5b:05:3b:07:02:a0:c1:20:
                    1f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:18:A9:46:82:31:75:3B:1F:28:07:EC:BC:67:9C:60:89:BF:77:6C
            X509v3 Authority Key Identifier:
                keyid:7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/7BB66415D711DB401704B5A5A315C202CB8AF863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:d1:12:ad:d2:d9:66:cc:dc:ce:a7:ed:47:6e:af:d7:d6:c3:
         f4:0c:8a:41:ca:d1:7b:bd:cd:20:99:9a:41:91:47:3d:f7:68:
         13:9e:b1:a6:23:2f:b5:07:4f:63:44:1e:65:4a:5a:bd:53:78:
         06:ed:04:49:65:60:e8:c6:e1:b9:a8:a2:6d:ec:4a:b3:0a:79:
         ae:90:f5:bf:a2:db:b0:aa:2f:4c:08:69:66:7f:25:e5:49:9b:
         b9:06:23:0b:80:6f:b0:5a:d1:ca:97:2f:63:d0:de:b5:e4:03:
         bd:33:a5:6b:b3:0f:9d:2e:dd:3a:0c:25:34:6d:a2:49:5a:22:
         31:82:21:cf:85:58:db:d5:f5:81:1e:2c:af:7b:66:c1:12:41:
         38:7f:36:b7:98:65:28:6a:68:dc:cc:d6:91:56:70:8c:e4:a2:
         1f:8e:b9:7d:c1:f5:36:0a:fa:fa:6c:44:7c:d2:c9:7e:78:d1:
         c5:04:15:59:1a:89:f3:bc:be:38:de:4c:78:71:57:19:3b:52:
         f5:90:5e:b9:d1:dc:d4:b5:41:17:5b:16:9e:36:57:4e:64:30:
         d5:f2:5e:ce:1e:9a:d3:bc:46:82:6f:b8:c4:a6:a1:d6:4e:13:
         f1:cc:a9:76:51:35:e8:84:a4:40:19:f9:65:bd:bc:1f:22:51:
         f0:5e:6c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:34:26 2025 by rpki-client