Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3137372e38342e3234382e302f32312d3332203d3e203533313831.roa
File:                     3137372e38342e3234382e302f32312d3332203d3e203533313831.roa (raw, json)
Hash identifier:          lv4pk/+CWeN2z0hAuRAK+qL8M5JyAk+t7/Qb/aCj/4w=
Subject key identifier:   49:6B:E8:0D:37:10:97:AF:3E:C0:7E:70:E1:7E:17:E1:6F:9F:69:DD
Certificate issuer:       /CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
Certificate serial:       779E6158F05760F6BA1B2A9FF25CCA1CF62E310F
Authority key identifier: 8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3137372e38342e3234382e302f32312d3332203d3e203533313831.roa
Signing time:             Sat 11 Mar 2023 00:56:39 +0000
ROA not before:           Sat 11 Mar 2023 00:51:39 +0000
ROA not after:            Sat 09 Mar 2024 00:56:39 +0000
asID:                     53181
IP address blocks:        177.84.248.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9e:61:58:f0:57:60:f6:ba:1b:2a:9f:f2:5c:ca:1c:f6:2e:31:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
        Validity
            Not Before: Mar 11 00:51:39 2023 GMT
            Not After : Mar  9 00:56:39 2024 GMT
        Subject: CN=496BE80D371097AF3EC07E70E17E17E16F9F69DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:77:35:a5:d4:ae:3c:e1:72:4e:02:26:36:
                    ff:b9:f4:76:fa:92:d7:fa:43:0e:d7:88:d0:90:da:
                    c2:6f:74:54:3d:70:e3:75:15:a4:5b:50:9b:3e:85:
                    41:ce:6c:83:df:e4:9a:bc:3c:ab:5a:c2:80:fd:00:
                    ab:39:8f:61:a9:39:72:30:a7:0d:18:6f:99:77:2c:
                    8e:93:25:b2:0c:8e:4a:1a:97:44:ce:7c:dc:ce:98:
                    89:6d:45:4c:a3:6e:70:3d:db:73:09:90:62:4f:9c:
                    bf:ad:ab:ab:27:4d:31:e6:aa:67:90:10:d7:3a:93:
                    e8:07:c0:9f:93:e2:61:1e:0f:09:7b:d8:b6:59:38:
                    0f:5d:40:cd:6d:c7:31:8d:df:d0:2a:c3:94:25:45:
                    92:5c:23:08:b0:35:b4:a8:dd:09:c5:a9:06:9e:b9:
                    d2:b5:3a:28:95:c9:d0:51:88:8a:ca:65:4f:e2:af:
                    7d:d0:a1:c8:63:fd:f1:7e:35:48:1e:94:29:54:cb:
                    41:a0:30:e9:78:04:fa:c1:e1:d1:f8:12:a9:6e:6e:
                    1d:de:04:6b:fe:62:05:2c:68:1e:ec:69:bf:af:d4:
                    e3:e9:ff:01:7e:33:b0:95:6d:88:0e:ba:3f:18:85:
                    4a:b8:8e:33:65:32:2a:52:ee:1c:ff:cd:fe:24:26:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6B:E8:0D:37:10:97:AF:3E:C0:7E:70:E1:7E:17:E1:6F:9F:69:DD
            X509v3 Authority Key Identifier:
                keyid:8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3137372e38342e3234382e302f32312d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:88:33:2d:40:e1:0a:06:3c:b3:2c:d4:0d:b8:ec:9f:ef:f2:
         5f:bc:ab:12:61:5b:5c:af:32:e2:1a:50:ed:8e:b4:51:6c:3c:
         93:7e:89:bd:a8:3d:66:69:c9:82:3d:e7:38:2f:44:72:ee:e2:
         fe:c0:45:0d:79:5a:5e:bb:10:58:94:7e:bb:fe:f7:83:bb:43:
         67:6d:0d:7e:19:94:b8:0b:13:0d:7f:78:7d:09:50:9a:0d:68:
         37:94:20:e0:1d:80:0a:7a:9a:ab:19:a3:55:2f:0c:69:90:9c:
         eb:13:72:cb:15:b5:73:12:52:e9:2f:bc:11:46:d4:81:ed:90:
         dd:67:86:19:a3:9e:4f:e8:8f:2d:89:30:b4:6f:49:1d:bb:a7:
         67:b8:9c:86:30:4c:1e:e5:fd:10:34:c5:c8:80:c1:70:02:1f:
         4e:ea:f8:5c:6e:17:04:68:b4:f8:36:7a:85:b8:d1:16:4a:79:
         41:90:a1:56:34:9e:97:da:14:9e:03:60:85:cf:bd:7c:fa:ce:
         9f:08:17:05:08:ae:73:a7:9a:0e:fa:da:e6:28:26:1a:9c:8f:
         56:8e:2b:34:41:2d:4e:f0:c3:77:65:d5:d1:61:d1:91:89:47:
         8e:d2:bf:e3:ae:f8:66:b0:72:16:eb:95:82:4b:c0:d7:f9:01:
         e9:81:9b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:47 2025 by rpki-client