Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3230203d3e20323731373234.roa
File:                     3137372e37352e3230382e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          c0EHpIxzDks9u7M2tNPoEqnCbJcYYKfJgqJ0fxbnHVE=
Subject key identifier:   FB:18:D5:67:5E:1D:F5:98:AA:23:A6:A6:D9:1C:D0:29:6B:AA:7B:8D
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       649989A5A550927B7CD32C9B61794954DD499BDD
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3230203d3e20323731373234.roa
Signing time:             Thu 07 Nov 2024 20:40:14 +0000
ROA not before:           Thu 07 Nov 2024 20:35:14 +0000
ROA not after:            Thu 06 Nov 2025 20:40:14 +0000
asID:                     271724
IP address blocks:        177.75.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:99:89:a5:a5:50:92:7b:7c:d3:2c:9b:61:79:49:54:dd:49:9b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:14 2024 GMT
            Not After : Nov  6 20:40:14 2025 GMT
        Subject: CN=FB18D5675E1DF598AA23A6A6D91CD0296BAA7B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:eb:a3:4c:ec:23:88:d8:03:37:0d:d7:0d:
                    fb:8c:38:c0:5f:97:3a:bc:83:18:78:86:a5:2f:1b:
                    12:a1:c0:72:eb:98:82:80:cb:36:9d:22:3c:57:37:
                    fb:43:9a:93:af:7b:f6:69:af:6f:bc:91:65:17:50:
                    2d:52:c3:2c:be:da:2c:87:7e:3a:e4:31:67:42:e8:
                    e2:2d:90:16:80:46:e7:f3:14:36:46:18:ba:da:e6:
                    ab:a6:0b:01:34:ad:5c:99:85:98:d4:f2:7c:4f:2e:
                    68:17:9b:f8:67:6f:aa:72:bc:7f:b1:fa:5f:57:63:
                    5c:72:9e:9c:16:f6:29:23:e4:28:d8:7d:a3:ff:91:
                    ab:b1:74:df:8f:1c:2d:3c:41:b7:a4:c4:72:5c:12:
                    91:ec:b5:ce:c3:07:15:6e:fc:3b:91:18:62:de:ca:
                    a1:d1:81:b8:92:85:c4:d1:da:67:2e:1c:4d:9f:d5:
                    a3:1b:72:9a:07:99:ec:fe:fd:0a:48:de:b1:7e:ae:
                    6b:6a:cb:be:30:a6:c4:52:ae:7b:e5:c3:ae:6b:1f:
                    32:d2:ce:b0:b8:c9:25:aa:6f:86:59:a2:33:96:3b:
                    b4:10:56:e6:3c:43:99:9b:27:80:00:72:a6:34:2b:
                    40:90:18:8e:f0:d1:1d:a0:cb:03:e9:99:64:38:ad:
                    da:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:18:D5:67:5E:1D:F5:98:AA:23:A6:A6:D9:1C:D0:29:6B:AA:7B:8D
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3230382e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:e1:a6:c9:ee:be:ac:65:77:27:e7:1b:c9:07:1f:e1:21:78:
         9f:9a:30:53:2d:ed:1d:44:ed:25:3a:9e:6b:0c:1c:11:f0:ac:
         1a:0c:42:62:63:e2:67:c6:e7:b4:fe:53:ec:1d:77:a9:c9:c2:
         1f:57:de:0c:fd:ab:39:2c:fc:7d:4d:ce:18:33:52:87:96:e8:
         98:10:6a:e5:c7:86:6e:7c:13:0b:49:cd:90:0a:d1:c1:88:ed:
         5b:a4:02:64:2d:12:75:ff:65:5a:50:2c:9b:d0:ea:f3:f7:14:
         40:6e:bf:0a:54:52:23:6c:07:9f:27:81:d1:cc:3d:fa:3c:62:
         b7:3f:a1:c9:89:30:78:6c:09:aa:ed:02:4e:2d:a9:4b:09:2c:
         41:fd:42:0a:b5:b1:f8:a3:ea:e4:bf:60:13:2e:6b:bd:5a:d3:
         49:21:cc:42:65:b9:36:59:9b:e4:a9:71:62:63:93:ba:15:6d:
         31:cd:2e:a2:bf:26:95:7b:1a:0c:4c:71:e2:db:a7:20:1b:13:
         69:cd:4e:d4:d7:a1:53:50:c4:e8:24:a6:b8:9d:55:e9:dc:e3:
         92:33:f7:30:78:e7:9a:c1:0f:34:61:93:c5:22:1f:9f:68:fe:
         4f:60:f0:e0:21:c8:56:2a:ca:dd:78:4d:d5:e3:79:d0:54:26:
         7e:c7:9c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:57:13 2025 by rpki-client