Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3137372e3132382e3137362e302f32312d3332203d3e20323632333737.roa
File:                     3137372e3132382e3137362e302f32312d3332203d3e20323632333737.roa (raw, json)
Hash identifier:          cBZhZnF81e/62M5M55Ab1jWEXomSDRHxbjS4eYMPYFM=
Subject key identifier:   AC:C4:F1:2E:07:2D:A5:EC:64:B4:DE:72:13:8E:B9:B1:9E:F1:02:7E
Certificate issuer:       /CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
Certificate serial:       4B95F8B2CF56BA0AA33A7C86B89A207ABC5B2BA3
Authority key identifier: 90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3137372e3132382e3137362e302f32312d3332203d3e20323632333737.roa
Signing time:             Fri 02 Jun 2023 12:19:24 +0000
ROA not before:           Fri 02 Jun 2023 12:14:24 +0000
ROA not after:            Fri 31 May 2024 12:19:24 +0000
asID:                     262377
IP address blocks:        177.128.176.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:95:f8:b2:cf:56:ba:0a:a3:3a:7c:86:b8:9a:20:7a:bc:5b:2b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
        Validity
            Not Before: Jun  2 12:14:24 2023 GMT
            Not After : May 31 12:19:24 2024 GMT
        Subject: CN=ACC4F12E072DA5EC64B4DE72138EB9B19EF1027E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:e4:3f:1f:02:71:de:65:78:e2:84:ba:d3:
                    bf:08:e2:89:bb:97:22:f2:76:45:d4:c3:46:5d:92:
                    9a:d0:ac:3c:db:1c:bb:b0:60:a2:a8:32:f5:6b:2a:
                    e9:a6:e3:6b:e6:68:da:b5:ab:00:0a:4f:d8:16:3f:
                    85:6b:25:14:5b:d9:49:ad:93:92:66:d3:f4:01:fe:
                    13:79:26:5d:d0:31:54:ed:92:97:c2:29:99:82:99:
                    0a:1e:4c:0e:3a:19:70:2d:5d:bd:22:f6:a0:21:5a:
                    ae:13:49:06:bb:7a:e9:c3:94:0c:04:de:8f:92:55:
                    65:e4:e2:8f:a2:49:a3:ab:18:aa:18:05:97:dc:d8:
                    86:be:4b:c8:8c:af:89:f4:d7:81:58:6f:14:b0:8c:
                    4b:28:21:88:3a:58:20:07:06:cf:ef:b5:0f:0b:9e:
                    ef:cb:d8:14:9d:a0:d2:9f:1a:3c:3d:4c:ea:2f:e8:
                    07:ae:8b:e8:54:e4:bf:e0:1f:d6:a8:56:ab:d2:a0:
                    92:32:03:d2:7d:98:21:81:ce:98:46:80:31:c8:c8:
                    b5:24:2c:51:33:22:ca:86:67:f0:d9:da:f6:3f:bc:
                    c3:03:48:f3:5a:d3:44:e8:0a:38:5b:10:99:e9:8a:
                    dd:d5:25:16:92:9f:13:b7:4b:ab:97:34:71:14:3f:
                    a1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C4:F1:2E:07:2D:A5:EC:64:B4:DE:72:13:8E:B9:B1:9E:F1:02:7E
            X509v3 Authority Key Identifier:
                keyid:90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3137372e3132382e3137362e302f32312d3332203d3e20323632333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bc:45:65:2c:7a:1e:c4:73:ee:a0:4d:ad:05:87:82:56:c0:c3:
         e0:6c:8d:fb:2e:35:8d:c2:f0:c3:23:df:29:60:a0:c1:9c:ab:
         e5:94:f9:e9:8e:29:0c:5a:d8:c0:f6:8f:ec:e3:99:2f:21:f6:
         ed:42:ea:25:0c:4a:53:d6:a5:cd:18:af:45:d3:7f:7f:94:05:
         3a:15:99:2d:96:c3:58:05:9d:a5:60:c2:ec:23:51:f3:ab:f8:
         1c:91:32:cf:ed:75:48:45:0d:c2:bb:64:b6:03:a7:43:bb:e4:
         78:8b:d9:1a:0c:10:8f:4f:98:5b:56:7c:b2:18:62:87:10:91:
         3a:6e:e8:67:48:be:a0:a8:46:92:fc:33:76:ab:09:ee:b6:3e:
         98:b3:51:14:3c:d3:af:86:0e:11:3e:78:0b:76:d3:39:91:64:
         69:18:3a:60:04:7c:ec:90:79:75:14:16:64:bc:68:a0:51:ec:
         77:e0:6b:6f:79:3c:7b:ee:ec:90:db:3c:2b:8e:b8:68:68:82:
         ab:ef:78:ad:9d:c3:26:3d:4c:88:84:bb:49:23:30:5e:5c:89:
         c7:69:98:84:61:f7:09:ef:e0:44:2d:df:c7:d0:cc:2b:52:16:
         4e:10:36:ff:89:7a:6a:47:f4:9b:e6:e8:f2:79:dd:5d:37:f9:
         d5:b0:e9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:48 2025 by rpki-client