Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32362e302f32332d3233203d3e203532373036.roa
File:                     3137372e3132362e32362e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          LVoxpt3ZGKdgGNvaBuBDS4MkLbBTJkwaLQn1CJjfYKs=
Subject key identifier:   D3:9F:06:4E:44:05:1D:E4:75:4A:21:F2:23:11:61:BD:0E:50:D6:07
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       1FF88945E9106DEA6C33D298E7F0F08C1BB963F4
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32362e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:44 +0000
ROA not before:           Thu 06 Mar 2025 02:26:44 +0000
ROA not after:            Thu 05 Mar 2026 02:31:44 +0000
asID:                     52706
IP address blocks:        177.126.26.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f8:89:45:e9:10:6d:ea:6c:33:d2:98:e7:f0:f0:8c:1b:b9:63:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:44 2025 GMT
            Not After : Mar  5 02:31:44 2026 GMT
        Subject: CN=D39F064E44051DE4754A21F2231161BD0E50D607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:55:d2:b6:d3:2e:ab:e8:f8:52:8b:4c:77:
                    0e:79:62:03:ac:1b:99:9f:cb:40:62:62:e8:90:ba:
                    fa:f1:b1:d8:1e:1e:7e:f7:94:a0:a0:79:87:ea:e1:
                    aa:c7:2a:45:10:6a:69:0b:d6:43:8a:96:52:0b:bc:
                    2f:87:36:05:17:27:d4:d4:0b:ad:76:3a:b2:64:84:
                    93:d1:84:20:11:b6:e9:da:e4:71:3f:98:c3:8e:8c:
                    5f:4f:71:39:9b:0d:a1:66:22:23:09:b9:9e:17:bf:
                    cf:17:1e:10:c4:c2:0c:31:d1:3f:8e:ce:cd:76:43:
                    67:7b:48:9b:8c:b9:2c:7a:cf:b4:01:82:17:51:e0:
                    79:86:1f:3d:c6:90:1c:45:79:97:36:62:5e:3c:f2:
                    d6:dc:18:e7:0f:af:bb:22:c2:9b:30:ae:b0:08:c5:
                    9d:81:2e:fe:ba:71:83:6f:59:63:93:db:ab:d2:c2:
                    30:a4:46:e3:2b:49:16:c7:42:4a:54:57:50:12:1b:
                    31:37:cd:f1:1c:04:24:8c:b1:f4:81:bb:09:f1:a8:
                    a6:70:6f:18:32:74:43:f8:08:20:d0:7d:0d:74:f2:
                    df:84:69:30:c7:35:ff:30:d9:bc:77:d9:21:8c:bd:
                    6d:3b:55:82:44:2f:f3:b8:a5:91:36:b5:3f:89:11:
                    4c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9F:06:4E:44:05:1D:E4:75:4A:21:F2:23:11:61:BD:0E:50:D6:07
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32362e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:e0:aa:8a:48:8d:7a:59:a8:b2:d7:d9:4d:a8:49:fc:6c:ea:
         7c:6f:b5:78:90:62:8b:e6:e0:52:f1:78:9f:6e:ff:0b:e7:89:
         0f:09:19:ab:a8:8b:23:67:fd:c0:16:51:15:7a:11:cf:b1:e5:
         6e:90:16:57:31:08:49:69:5b:ab:70:a9:92:bf:78:75:6a:83:
         84:de:db:79:6b:06:5a:6c:29:07:cd:9c:53:c1:6e:41:b0:f9:
         81:9f:42:ec:5a:39:5b:a1:a4:84:59:c9:fa:16:e7:d9:49:92:
         d5:d0:0f:aa:49:b6:ea:c4:7a:d1:58:84:dc:19:1e:7e:d5:81:
         bf:9f:9a:e8:59:73:3e:bc:d6:1c:ee:69:ec:20:f9:e5:c0:c6:
         82:33:d6:a5:0f:92:8d:95:a2:83:a4:63:ae:4f:dd:d3:35:4a:
         ae:ed:3c:54:44:0e:bc:19:a2:dc:f1:1d:60:16:fb:a5:d4:c5:
         e8:0c:00:8a:f5:86:45:bc:2b:55:f7:fd:7f:e5:71:b4:11:e4:
         65:d2:62:74:ea:9c:b5:18:67:a0:26:3e:b6:3d:ba:6d:42:99:
         cf:25:24:2f:2d:6c:ef:a2:d8:a8:73:d0:38:bd:93:00:e8:39:
         55:e4:d9:2b:37:a2:a4:80:b2:c5:b4:39:33:e0:c9:c7:d5:db:
         ee:a7:d8:d1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUH/iJRekQbepsM9KY5/DwjBu5Y/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNTAzMDYwMjI2NDRaFw0yNjAzMDUwMjMxNDRaMDMxMTAvBgNV
BAMTKEQzOUYwNjRFNDQwNTFERTQ3NTRBMjFGMjIzMTE2MUJEMEU1MEQ2MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhFXSttMuq+j4UotMdw55YgOs
G5mfy0BiYuiQuvrxsdgeHn73lKCgeYfq4arHKkUQamkL1kOKllILvC+HNgUXJ9TU
C612OrJkhJPRhCARtuna5HE/mMOOjF9PcTmbDaFmIiMJuZ4Xv88XHhDEwgwx0T+O
zs12Q2d7SJuMuSx6z7QBghdR4HmGHz3GkBxFeZc2Yl488tbcGOcPr7siwpswrrAI
xZ2BLv66cYNvWWOT26vSwjCkRuMrSRbHQkpUV1ASGzE3zfEcBCSMsfSBuwnxqKZw
bxgydEP4CCDQfQ108t+EaTDHNf8w2bx32SGMvW07VYJEL/O4pZE2tT+JEUwzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU058GTkQFHeR1SiHyIxFhvQ5Q1gcwHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzEzNzM3MmUzMTMyMzYyZTMyMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsX4aMA0GCSqGSIb3DQEBCwUAA4IBAQAO4KqKSI16
Waiy19lNqEn8bOp8b7V4kGKL5uBS8Xifbv8L54kPCRmrqIsjZ/3AFlEVehHPseVu
kBZXMQhJaVurcKmSv3h1aoOE3tt5awZabCkHzZxTwW5BsPmBn0LsWjlboaSEWcn6
FufZSZLV0A+qSbbqxHrRWITcGR5+1YG/n5roWXM+vNYc7mnsIPnlwMaCM9alD5KN
laKDpGOuT93TNUqu7TxURA68GaLc8R1gFvul1MXoDACK9YZFvCtV9/1/5XG0EeRl
0mJ06py1GGegJj62PbptQpnPJSQvLWzvotioc9A4vZMA6DlV5NkrN6KkgLLFtDkz
4MnH1dvup9jR
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:56:12 2025 by rpki-client