Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132362e302f32342d3234203d3e20323632343934.roa
File:                     3137302e38322e3132362e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          PMMnxRt2JzlXsS52D57CVhnr5jKrn32/ow+N3JwpBM0=
Subject key identifier:   7C:D4:72:6B:61:EE:9D:F6:08:78:EB:0C:8B:F9:81:22:F0:B0:4B:9D
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       4B0C5B4583365F3C498F2B933FE8E0478C05A094
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132362e302f32342d3234203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:49 +0000
ROA not before:           Thu 19 Sep 2024 14:06:49 +0000
ROA not after:            Thu 18 Sep 2025 14:11:49 +0000
asID:                     262494
IP address blocks:        170.82.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0c:5b:45:83:36:5f:3c:49:8f:2b:93:3f:e8:e0:47:8c:05:a0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:49 2024 GMT
            Not After : Sep 18 14:11:49 2025 GMT
        Subject: CN=7CD4726B61EE9DF60878EB0C8BF98122F0B04B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:93:65:38:9b:4a:33:75:74:0c:be:47:03:29:
                    69:54:6e:db:ec:5f:3a:4a:67:d6:22:a8:b1:b9:05:
                    3d:49:6a:f2:6e:14:83:30:6b:b2:d6:ea:b3:47:5a:
                    70:24:83:29:cf:11:a7:67:c4:23:be:c1:4a:fd:ca:
                    d5:28:e1:d8:ad:cf:e2:f8:9b:95:22:4e:cc:0e:0a:
                    9b:e5:70:40:18:28:6b:af:97:79:82:da:74:1d:b4:
                    e8:b9:cb:9c:bc:55:ed:a4:ad:57:c0:2f:1a:10:67:
                    67:c2:3a:e8:1f:dc:08:5d:8a:e3:02:3c:9e:15:8a:
                    71:5c:f0:e2:0c:20:db:53:56:6c:18:d5:30:2c:6a:
                    84:03:d1:2b:0d:f2:a3:b0:3e:9c:ef:a3:e4:88:6e:
                    5c:dd:c6:f6:bf:2a:43:37:12:47:02:3d:b3:62:58:
                    a8:da:6a:91:ee:5b:65:93:dd:28:0b:6d:dc:86:9b:
                    20:f4:da:85:65:30:eb:5c:51:74:61:7e:72:05:49:
                    ac:b9:cf:b5:48:df:70:3e:63:ee:ba:23:34:10:1b:
                    39:49:86:a8:66:46:f6:d2:9f:2c:df:00:41:0a:c0:
                    57:bb:ff:a6:2a:bf:ab:5a:70:63:7f:7b:9c:14:64:
                    eb:eb:20:b7:bb:4b:d9:14:43:1f:2f:c2:7d:f2:cf:
                    eb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D4:72:6B:61:EE:9D:F6:08:78:EB:0C:8B:F9:81:22:F0:B0:4B:9D
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132362e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:32:a1:76:ae:c8:f3:71:12:f4:4e:d2:a9:24:80:f5:df:b9:
         60:49:ed:a6:44:7b:ad:47:02:fc:a3:fc:83:47:2f:5b:26:6b:
         84:87:dc:25:35:54:c0:44:05:3c:40:fb:e2:28:4c:1e:55:e5:
         37:02:45:47:6a:df:49:df:71:de:68:c5:e0:ae:50:c5:80:f1:
         72:3a:d0:3d:1c:73:2c:0c:0d:f5:3a:9e:ee:dc:3f:db:ff:7f:
         db:bc:b5:99:7f:96:22:7c:f6:1c:4e:63:b5:73:a6:c7:db:20:
         94:d6:78:af:be:ae:c7:5f:ab:93:5d:0d:e5:ab:da:85:e1:e9:
         dc:c1:af:c6:37:67:2f:31:7b:d8:6e:04:39:03:06:76:84:2e:
         80:6a:a7:bd:b2:e9:48:ad:01:6a:d7:99:19:91:5f:3e:ad:9e:
         c8:40:b1:fc:90:03:00:e9:43:ad:c6:ac:e8:2c:e0:e4:3c:e3:
         23:8d:c5:ea:b0:7f:b0:82:51:b8:35:9e:dc:e2:17:2c:97:ab:
         53:44:1f:49:61:1a:ca:78:cb:b0:b1:ab:ea:a3:5f:2e:e5:6b:
         55:7d:9b:ad:52:c6:1c:f2:b3:56:9d:6b:a7:d1:10:53:99:39:
         d8:54:68:f8:d1:83:72:99:8a:3e:b5:1d:8e:c3:ba:56:3a:da:
         29:1e:67:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:44 2025 by rpki-client