Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/0/3137372e35352e3232332e302f32342d3234203d3e20323632353331.roa
File:                     3137372e35352e3232332e302f32342d3234203d3e20323632353331.roa (raw, json)
Hash identifier:          0Fq59pIdiROGJSvKzGlHeLAHIwHTkyaJAXTxjuWJzkk=
Subject key identifier:   36:88:DF:3D:1E:DB:35:EF:CC:B5:38:9F:EE:3F:E2:36:FF:F0:64:7B
Certificate issuer:       /CN=FE8A729B6C84483723F5592F7ABC49F8CDEA6403
Certificate serial:       56684914AE4212C32484FD74613AC97F828B367C
Authority key identifier: FE:8A:72:9B:6C:84:48:37:23:F5:59:2F:7A:BC:49:F8:CD:EA:64:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE8A729B6C84483723F5592F7ABC49F8CDEA6403.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/0/3137372e35352e3232332e302f32342d3234203d3e20323632353331.roa
Signing time:             Thu 02 Sep 2021 18:47:46 +0000
ROA not before:           Thu 02 Sep 2021 18:42:46 +0000
ROA not after:            Thu 01 Sep 2022 18:47:46 +0000
asID:                     262531
IP address blocks:        177.55.223.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:68:49:14:ae:42:12:c3:24:84:fd:74:61:3a:c9:7f:82:8b:36:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE8A729B6C84483723F5592F7ABC49F8CDEA6403
        Validity
            Not Before: Sep  2 18:42:46 2021 GMT
            Not After : Sep  1 18:47:46 2022 GMT
        Subject: CN=3082010A0282010100CFFD586EC35AC4C345AFBBA00F9AB8DE4718B1CB35CB6F0D6439E4C133A6ADB317EFE4333E9535F5C70D02A387B99F7E823DCA481C2672F9C1D38DD26DF14CDDCEB2F071B91948CA9897AB2892E94F8FB2F8D7067D1EEB3F19B28891925A0B4C03D25C3DEA4120A6A53EBA10D997807B98EC343FD7A3C9E072D1D74717765AA5AF2A391603202995C31B7851CD71AFD4BEF6FBA94DC39B554ADA7A642B5EDE1FA5E8CA3418D6C3C6FF98F3258BD07D475D42DAB7695D2312E49AFB42D8943097054A1171F9E757B626ADC3DA759A84B5F98149F62EFE23178648D08D562CEA75F723564B120FCBBC2DB279E11DB96AB8FAB4DE5C1776924FA2E8BC21CB6C9CFB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fd:58:6e:c3:5a:c4:c3:45:af:bb:a0:0f:9a:
                    b8:de:47:18:b1:cb:35:cb:6f:0d:64:39:e4:c1:33:
                    a6:ad:b3:17:ef:e4:33:3e:95:35:f5:c7:0d:02:a3:
                    87:b9:9f:7e:82:3d:ca:48:1c:26:72:f9:c1:d3:8d:
                    d2:6d:f1:4c:dd:ce:b2:f0:71:b9:19:48:ca:98:97:
                    ab:28:92:e9:4f:8f:b2:f8:d7:06:7d:1e:eb:3f:19:
                    b2:88:91:92:5a:0b:4c:03:d2:5c:3d:ea:41:20:a6:
                    a5:3e:ba:10:d9:97:80:7b:98:ec:34:3f:d7:a3:c9:
                    e0:72:d1:d7:47:17:76:5a:a5:af:2a:39:16:03:20:
                    29:95:c3:1b:78:51:cd:71:af:d4:be:f6:fb:a9:4d:
                    c3:9b:55:4a:da:7a:64:2b:5e:de:1f:a5:e8:ca:34:
                    18:d6:c3:c6:ff:98:f3:25:8b:d0:7d:47:5d:42:da:
                    b7:69:5d:23:12:e4:9a:fb:42:d8:94:30:97:05:4a:
                    11:71:f9:e7:57:b6:26:ad:c3:da:75:9a:84:b5:f9:
                    81:49:f6:2e:fe:23:17:86:48:d0:8d:56:2c:ea:75:
                    f7:23:56:4b:12:0f:cb:bc:2d:b2:79:e1:1d:b9:6a:
                    b8:fa:b4:de:5c:17:76:92:4f:a2:e8:bc:21:cb:6c:
                    9c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:88:DF:3D:1E:DB:35:EF:CC:B5:38:9F:EE:3F:E2:36:FF:F0:64:7B
            X509v3 Authority Key Identifier:
                keyid:FE:8A:72:9B:6C:84:48:37:23:F5:59:2F:7A:BC:49:F8:CD:EA:64:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/0/FE8A729B6C84483723F5592F7ABC49F8CDEA6403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE8A729B6C84483723F5592F7ABC49F8CDEA6403.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/0/3137372e35352e3232332e302f32342d3234203d3e20323632353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:c2:61:72:97:de:b9:39:a9:99:f2:b0:1c:a9:5a:07:db:91:
         a8:e2:d9:27:fc:ca:c6:2e:6f:90:64:32:20:b7:16:63:28:eb:
         4c:da:82:87:22:ff:7a:c9:1c:d8:ca:c8:26:ba:64:95:e2:ea:
         9b:e8:12:f8:ff:6c:26:33:d4:81:ef:8f:d0:9d:3b:17:e7:56:
         a8:3f:a0:c6:99:4d:48:37:62:8b:76:6c:75:8a:b0:45:b7:f6:
         32:e3:1d:57:67:85:fc:66:6b:cf:0a:56:eb:bc:95:2e:a9:ee:
         a4:90:5c:e8:2c:2c:e7:3b:23:d0:16:a6:c6:06:ac:ea:3c:64:
         9c:09:a7:c9:d2:df:de:16:f6:af:81:d4:db:9c:56:b1:3b:55:
         ef:72:e6:12:c0:88:00:d7:da:0c:58:16:2c:67:1e:4c:75:17:
         a1:4a:60:20:a0:09:6e:3d:a1:04:33:21:9e:88:6e:55:dd:1a:
         d7:74:b6:1a:74:9d:46:f0:9a:2e:5f:66:66:bb:d8:86:9b:2a:
         77:dd:5c:9b:f2:5f:7b:72:5b:7d:c9:f4:4e:79:28:74:5b:69:
         e1:60:04:f8:ae:fc:56:a5:1a:68:92:c5:8d:71:4e:0b:68:b4:
         4e:7d:df:77:1d:08:0f:4d:cd:d9:5a:77:79:58:61:0f:e9:1c:
         b8:96:7b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:34 2025 by rpki-client