Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/3137372e31302e35362e302f32312d3234203d3e20323632383437.roa
File:                     3137372e31302e35362e302f32312d3234203d3e20323632383437.roa (raw, json)
Hash identifier:          PhH+evWG7Pon7y7U5pWP0YlLH4oDtEtf+frkxUdJOY8=
Subject key identifier:   50:04:56:10:CF:22:8E:BB:72:AF:5C:70:5B:36:92:88:F8:5C:2A:4C
Certificate issuer:       /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial:       10DA8C9DF6450E8C08F675231D82C3F5660C5F8E
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/3137372e31302e35362e302f32312d3234203d3e20323632383437.roa
Signing time:             Sun 11 Dec 2022 18:41:24 +0000
ROA not before:           Sun 11 Dec 2022 18:36:24 +0000
ROA not after:            Sun 10 Dec 2023 18:41:24 +0000
asID:                     262847
IP address blocks:        177.10.56.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:da:8c:9d:f6:45:0e:8c:08:f6:75:23:1d:82:c3:f5:66:0c:5f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
        Validity
            Not Before: Dec 11 18:36:24 2022 GMT
            Not After : Dec 10 18:41:24 2023 GMT
        Subject: CN=50045610CF228EBB72AF5C705B369288F85C2A4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c5:e6:8a:aa:c4:ce:bf:c5:87:e9:2e:6b:b0:
                    01:c7:61:06:27:e1:5b:9a:bd:f3:00:fb:37:dc:70:
                    b8:a5:2b:45:34:33:b2:69:0e:64:be:5c:2e:80:3e:
                    7a:69:d3:db:9d:3a:b0:72:1d:8b:54:57:51:d8:c1:
                    07:4e:9b:2a:17:97:82:93:e5:e5:e4:4b:5f:10:37:
                    cf:f1:a3:5a:d2:e7:b6:9b:ba:63:08:0f:0f:f8:2c:
                    d7:4d:49:2b:5e:e8:07:bb:af:5c:52:8c:b8:aa:e2:
                    c0:32:dc:7c:05:18:63:7e:b7:ef:68:4f:95:95:86:
                    cd:a6:58:7b:d5:b0:30:ab:ce:7e:f9:00:3c:01:39:
                    44:01:12:b2:46:43:6b:9c:15:10:2e:8b:c4:cf:c9:
                    78:ac:ad:05:80:8a:6e:87:38:25:22:38:e2:38:78:
                    09:55:cf:4c:34:67:97:2d:9f:91:ef:78:0e:c7:71:
                    67:49:8d:05:c4:e5:65:c2:3c:d8:c8:31:96:9f:8d:
                    3f:4d:39:e9:19:12:c8:4c:e6:b6:75:3e:3f:bf:e3:
                    ee:c0:dc:5b:c0:36:3d:ed:0e:de:20:43:0a:55:1d:
                    90:06:ea:05:e9:86:db:68:e9:06:55:2e:24:65:13:
                    a4:55:b9:5e:8f:16:15:d5:70:8a:42:57:85:2d:be:
                    d9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:04:56:10:CF:22:8E:BB:72:AF:5C:70:5B:36:92:88:F8:5C:2A:4C
            X509v3 Authority Key Identifier:
                keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/3137372e31302e35362e302f32312d3234203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:ab:30:32:08:f4:c5:f1:af:c3:73:43:6f:f5:46:ec:52:71:
         32:e9:d3:8b:62:b1:1f:a2:93:f2:a4:44:e2:d9:93:b1:1f:ff:
         8d:98:b7:f7:23:30:f3:73:95:70:a0:9a:a0:47:90:79:03:c2:
         ce:c0:7a:fb:fe:f6:75:f0:8a:46:7c:9c:5d:50:d3:47:80:fe:
         bd:d6:6c:fa:38:ac:f7:c4:59:b7:93:c3:80:98:cc:c6:45:1d:
         08:4a:0f:76:ad:c3:bd:a8:ee:9c:8d:d5:82:b1:97:05:33:65:
         50:d2:18:78:3f:ef:d8:25:c7:f9:56:ea:9f:c5:32:5a:8a:bd:
         4c:2c:08:e1:4c:94:98:9f:f3:48:bc:cc:3b:b4:f1:63:1b:d8:
         0d:81:ed:1b:47:79:7d:73:75:8c:5c:e4:ec:e9:f8:41:a3:8a:
         db:b4:12:a4:44:15:2e:4f:86:a6:8c:bf:b2:23:9a:a6:82:76:
         fa:c2:57:27:ac:76:06:c2:ae:d0:30:f5:49:cc:77:68:9a:54:
         94:eb:2f:45:b3:95:41:b1:46:f8:7e:ef:57:43:65:b9:9e:4f:
         17:08:e2:7f:db:bf:af:bc:11:9e:67:19:34:d6:2a:b6:dc:2e:
         2a:cc:cd:52:f8:24:e1:d8:7c:73:84:18:5d:a1:04:38:2a:42:
         e0:1c:6f:fc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUENqMnfZFDowI9nUjHYLD9WYMX44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU5ODI1QkZGM0VDQTY0MjQ1QjY4RkFFMDdDRUVDQkMy
NUUzNTUwMDAeFw0yMjEyMTExODM2MjRaFw0yMzEyMTAxODQxMjRaMDMxMTAvBgNV
BAMTKDUwMDQ1NjEwQ0YyMjhFQkI3MkFGNUM3MDVCMzY5Mjg4Rjg1QzJBNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxeaKqsTOv8WH6S5rsAHHYQYn
4VuavfMA+zfccLilK0U0M7JpDmS+XC6APnpp09udOrByHYtUV1HYwQdOmyoXl4KT
5eXkS18QN8/xo1rS57abumMIDw/4LNdNSSte6Ae7r1xSjLiq4sAy3HwFGGN+t+9o
T5WVhs2mWHvVsDCrzn75ADwBOUQBErJGQ2ucFRAui8TPyXisrQWAim6HOCUiOOI4
eAlVz0w0Z5ctn5HveA7HcWdJjQXE5WXCPNjIMZafjT9NOekZEshM5rZ1Pj+/4+7A
3FvANj3tDt4gQwpVHZAG6gXphtto6QZVLiRlE6RVuV6PFhXVcIpCV4UtvtnXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUARWEM8ijrtyr1xwWzaSiPhcKkwwHwYDVR0j
BBgwFoAUJZglv/PspkJFto+uB87svCXjVQAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JBYmJaNng1RnJ3QTRKNmFkNjFKZW90d2RZQ3hSM3Z2ZER1VjdoSEdx
QmYvMC8yNTk4MjVCRkYzRUNBNjQyNDVCNjhGQUUwN0NFRUNCQzI1RTM1NTAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI1OTgyNUJGRjNFQ0E2NDI0
NUI2OEZBRTA3Q0VFQ0JDMjVFMzU1MDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiQWJiWjZ4NUZyd0E0SjZhZDYxSmVvdHdkWUN4UjN2dmREdVY3aEhHcUJmLzAv
MzEzNzM3MmUzMTMwMmUzNTM2MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMy
MzgzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsQo4MA0GCSqGSIb3DQEBCwUAA4IBAQC9qzAyCPTF
8a/Dc0Nv9UbsUnEy6dOLYrEfopPypETi2ZOxH/+NmLf3IzDzc5VwoJqgR5B5A8LO
wHr7/vZ18IpGfJxdUNNHgP691mz6OKz3xFm3k8OAmMzGRR0ISg92rcO9qO6cjdWC
sZcFM2VQ0hh4P+/YJcf5VuqfxTJair1MLAjhTJSYn/NIvMw7tPFjG9gNge0bR3l9
c3WMXOTs6fhBo4rbtBKkRBUuT4amjL+yI5qmgnb6wlcnrHYGwq7QMPVJzHdomlSU
6y9Fs5VBsUb4fu9XQ2W5nk8XCOJ/27+vvBGeZxk01iq23C4qzM1S+CTh2HxzhBhd
oQQ4KkLgHG/8
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:03 2025 by rpki-client