Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131352e302f32342d3234203d3e20323632343934.roa
File:                     3137372e36362e3131352e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          cnU0CtC8iUFQIVDZFV124ope3l22ATMSfQvrsc444Lw=
Subject key identifier:   BF:53:69:E0:42:1E:A5:02:E2:E5:83:F9:F0:73:D0:E7:8E:AB:71:42
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       426F9EB30CD5DC4CC8AC57B05B1B5130A90C5A77
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131352e302f32342d3234203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:49 +0000
ROA not before:           Thu 19 Sep 2024 14:06:49 +0000
ROA not after:            Thu 18 Sep 2025 14:11:49 +0000
asID:                     262494
IP address blocks:        177.66.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6f:9e:b3:0c:d5:dc:4c:c8:ac:57:b0:5b:1b:51:30:a9:0c:5a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:49 2024 GMT
            Not After : Sep 18 14:11:49 2025 GMT
        Subject: CN=BF5369E0421EA502E2E583F9F073D0E78EAB7142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:01:3c:4c:8e:0a:2d:85:72:35:ec:93:9a:
                    e6:9e:6a:8a:35:90:bd:92:2a:4c:5d:c4:55:18:29:
                    43:3f:13:6f:6c:7d:a8:72:88:83:ab:79:43:26:3f:
                    ec:cf:e3:06:3e:4e:38:94:4b:b0:12:70:8f:e9:ff:
                    02:6d:1c:5e:5e:07:4c:70:b3:05:b4:c0:6d:76:71:
                    43:33:55:cd:46:7e:79:ac:67:7a:15:9b:2e:ee:1e:
                    33:44:ec:a8:ba:56:7e:a9:bb:dd:31:2a:44:7d:f9:
                    a5:78:8d:1e:90:ad:09:b0:a8:84:82:81:0d:00:e7:
                    17:16:48:7b:c9:73:8c:e2:e5:ed:db:fd:3c:9b:c5:
                    c1:dd:07:2b:49:cf:68:4f:30:55:0b:2f:06:f4:fb:
                    41:72:c5:29:f6:10:21:95:9c:55:02:31:6c:d7:b1:
                    4a:7a:7b:1d:f7:b4:81:63:2a:43:8d:44:41:c9:2f:
                    d8:ab:4d:dd:0a:1c:00:98:6c:a6:5c:90:6e:9d:b5:
                    b1:77:7f:9c:16:ec:08:2e:5c:03:31:d2:64:6d:1e:
                    f1:6f:5a:17:7a:4f:fe:ad:33:d1:55:91:19:09:91:
                    b1:be:18:37:22:d1:a5:82:04:a4:d6:85:60:5e:dd:
                    23:9d:0d:f5:75:1c:7f:f3:58:19:a5:41:8c:4a:bd:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:53:69:E0:42:1E:A5:02:E2:E5:83:F9:F0:73:D0:E7:8E:AB:71:42
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131352e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:0c:1f:3a:03:b4:63:32:e1:ea:3a:bd:c6:fd:ee:5b:a8:97:
         3e:b6:48:53:ed:5b:89:4d:8d:98:17:d5:43:34:5a:2c:d2:8a:
         b3:38:47:2f:16:93:42:9d:23:3a:cc:dd:d5:b9:83:99:53:24:
         fc:5c:36:b6:19:1c:d7:3a:78:09:32:ec:18:46:56:d8:ad:e5:
         db:41:08:4b:1a:58:27:a0:37:d6:d4:24:2d:76:20:01:60:e2:
         6a:76:eb:c2:4a:c0:7a:df:1b:06:02:64:84:24:b2:5a:02:37:
         87:ef:d2:ad:aa:d8:81:58:fc:7a:68:73:8b:6b:00:4d:21:9c:
         a2:e4:fd:96:68:83:00:5f:07:95:da:11:f5:20:02:73:6a:6c:
         0b:48:d1:00:57:7c:01:4c:33:15:31:6f:6c:15:c7:9f:87:70:
         18:3a:a4:ad:c5:73:56:32:81:79:61:8d:c2:9e:96:cf:d0:ee:
         ba:09:14:b1:32:33:45:11:fa:14:af:2b:b4:e9:71:78:71:5c:
         c2:1b:75:cb:69:77:3c:32:fd:c9:29:1c:5e:3f:54:f4:7f:6e:
         9e:fe:f3:b4:9e:bc:b9:66:fc:bf:af:23:2b:19:c7:12:0c:49:
         1f:94:17:8c:9d:70:1e:2c:2a:5c:e7:e8:8d:ee:74:9c:e1:dd:
         43:9b:74:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:09:19 2025 by rpki-client