Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/3137372e36362e3135342e302f32342d3234203d3e20323632343939.roa
File:                     3137372e36362e3135342e302f32342d3234203d3e20323632343939.roa (raw, json)
Hash identifier:          CGhfhY0hQTZsEOlVP9M6Ug7nmMxgCPK1Sr+Y6y3ILpU=
Subject key identifier:   DB:EE:6A:E1:56:98:83:57:DA:71:BF:FA:B1:36:50:9B:22:77:A6:7F
Certificate issuer:       /CN=FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA
Certificate serial:       450C8AE0CF67EDF9C4348575B4CE55E94C22612F
Authority key identifier: FB:69:29:18:40:0F:03:EA:4A:51:C4:E3:6D:DD:21:BB:B7:ED:9D:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/3137372e36362e3135342e302f32342d3234203d3e20323632343939.roa
Signing time:             Wed 21 Feb 2024 20:00:00 +0000
ROA not before:           Wed 21 Feb 2024 19:55:00 +0000
ROA not after:            Wed 19 Feb 2025 20:00:00 +0000
asID:                     262499
IP address blocks:        177.66.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0c:8a:e0:cf:67:ed:f9:c4:34:85:75:b4:ce:55:e9:4c:22:61:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA
        Validity
            Not Before: Feb 21 19:55:00 2024 GMT
            Not After : Feb 19 20:00:00 2025 GMT
        Subject: CN=DBEE6AE156988357DA71BFFAB136509B2277A67F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:01:a8:c1:fc:2d:c1:fb:2d:91:c2:57:82:
                    99:e1:58:56:be:11:a6:c0:06:cd:c5:f4:3e:24:74:
                    fb:6f:46:35:f3:4f:08:18:f9:68:d4:46:cf:57:98:
                    5a:55:9f:bb:10:97:d1:d6:e4:10:af:04:04:a9:a6:
                    eb:b7:43:d7:51:88:59:79:d7:6d:66:28:fb:71:cb:
                    cd:aa:04:86:50:a3:da:14:4d:12:d2:4c:dc:af:eb:
                    ba:75:f0:ac:3f:5e:1c:2a:59:1c:1b:98:db:51:7b:
                    a9:2a:d5:69:5f:48:5f:86:a5:e7:91:c9:62:45:86:
                    bc:d9:58:96:29:22:72:04:c7:d1:96:98:da:75:09:
                    7e:4a:c1:1d:59:9a:1f:7e:11:59:40:0c:79:65:eb:
                    98:8e:ed:1d:a9:d4:88:1c:07:0f:f3:ce:80:a2:9c:
                    49:5e:a1:97:97:d3:2a:a7:e7:42:9a:a9:df:58:46:
                    05:1f:52:d8:b1:3a:67:da:37:f8:ff:34:97:ea:14:
                    83:f7:21:90:c5:08:9c:75:2b:a3:3d:d7:d0:da:bd:
                    20:15:cd:4c:eb:97:4b:6f:93:2b:6e:2a:06:15:5d:
                    2a:5b:cc:c7:36:5c:41:2f:81:c5:47:d2:13:eb:c5:
                    e0:13:21:33:2e:a7:8f:ca:5f:dd:5a:a7:7e:94:c0:
                    89:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EE:6A:E1:56:98:83:57:DA:71:BF:FA:B1:36:50:9B:22:77:A6:7F
            X509v3 Authority Key Identifier:
                keyid:FB:69:29:18:40:0F:03:EA:4A:51:C4:E3:6D:DD:21:BB:B7:ED:9D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/3137372e36362e3135342e302f32342d3234203d3e20323632343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:cb:44:3d:a4:14:14:7e:77:7e:5b:98:63:c8:20:51:48:9d:
         aa:19:1a:49:7b:15:d3:45:17:f9:81:a2:e2:47:59:a2:11:28:
         72:0b:c6:9a:83:a1:7f:cd:da:10:d7:37:79:4f:27:4f:07:f2:
         8a:e0:a3:38:c8:16:52:1f:57:fb:b7:72:e8:11:5b:25:63:0d:
         b2:10:56:d1:61:00:4f:7e:69:66:ad:4a:47:ee:e1:f9:a0:80:
         79:85:ef:a0:c4:75:c9:32:2c:0a:8a:ec:72:cb:6d:5e:c8:05:
         17:32:a9:92:3a:21:b1:54:89:fe:c6:fd:e0:2c:a7:f2:76:9a:
         c7:1d:cb:54:b0:64:99:11:9f:42:af:87:48:10:7d:ba:0a:b3:
         c7:0b:9e:9f:bf:ed:d1:3f:a2:d2:a6:e0:50:41:53:1f:f7:4c:
         b7:ef:a9:55:7f:90:54:68:d5:6f:5d:71:aa:cd:5d:e4:ce:da:
         ec:ec:c9:be:50:48:8f:9b:7f:d3:1d:a6:81:74:8c:08:b8:ae:
         52:24:61:b5:da:d8:c2:be:f8:5b:e1:8a:e5:f2:4e:70:6a:07:
         de:fa:b0:17:9b:ce:52:e6:93:4c:0f:45:3f:41:92:6c:72:1b:
         f8:13:4c:df:4a:3c:9f:2e:74:4f:ec:4a:35:72:2b:f4:1a:cc:
         d9:51:1f:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURQyK4M9n7fnENIV1tM5V6UwiYS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI2OTI5MTg0MDBGMDNFQTRBNTFDNEUzNkRERDIxQkJC
N0VEOUREQTAeFw0yNDAyMjExOTU1MDBaFw0yNTAyMTkyMDAwMDBaMDMxMTAvBgNV
BAMTKERCRUU2QUUxNTY5ODgzNTdEQTcxQkZGQUIxMzY1MDlCMjI3N0E2N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3wGowfwtwfstkcJXgpnhWFa+
EabABs3F9D4kdPtvRjXzTwgY+WjURs9XmFpVn7sQl9HW5BCvBASppuu3Q9dRiFl5
121mKPtxy82qBIZQo9oUTRLSTNyv67p18Kw/XhwqWRwbmNtRe6kq1WlfSF+GpeeR
yWJFhrzZWJYpInIEx9GWmNp1CX5KwR1Zmh9+EVlADHll65iO7R2p1IgcBw/zzoCi
nEleoZeX0yqn50Kaqd9YRgUfUtixOmfaN/j/NJfqFIP3IZDFCJx1K6M919DavSAV
zUzrl0tvkytuKgYVXSpbzMc2XEEvgcVH0hPrxeATITMup4/KX91ap36UwInhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2+5q4VaYg1facb/6sTZQmyJ3pn8wHwYDVR0j
BBgwFoAU+2kpGEAPA+pKUcTjbd0hu7ftndowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDZ6NUR1TDhBaW8zc1p0RUptc1BpZFdSSGdrSEwzdW5reHhjQ1RNeWRD
QVkvMC9GQjY5MjkxODQwMEYwM0VBNEE1MUM0RTM2REREMjFCQkI3RUQ5RERBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZCNjkyOTE4NDAwRjAzRUE0
QTUxQzRFMzZEREQyMUJCQjdFRDlEREEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ2ejVEdUw4QWlvM3NadEVKbXNQaWRXUkhna0hMM3Vua3h4Y0NUTXlkQ0FZLzAv
MzEzNzM3MmUzNjM2MmUzMTM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxQpowDQYJKoZIhvcNAQELBQADggEBABfLRD2k
FBR+d35bmGPIIFFInaoZGkl7FdNFF/mBouJHWaIRKHILxpqDoX/N2hDXN3lPJ08H
8orgozjIFlIfV/u3cugRWyVjDbIQVtFhAE9+aWatSkfu4fmggHmF76DEdckyLAqK
7HLLbV7IBRcyqZI6IbFUif7G/eAsp/J2mscdy1SwZJkRn0Kvh0gQfboKs8cLnp+/
7dE/otKm4FBBUx/3TLfvqVV/kFRo1W9dcarNXeTO2uzsyb5QSI+bf9MdpoF0jAi4
rlIkYbXa2MK++FvhiuXyTnBqB976sBebzlLmk0wPRT9BkmxyG/gTTN9KPJ8udE/s
SjVyK/QazNlRH0g=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:14 2025 by rpki-client