Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/AS262514.roa
File:                     AS262514.roa (raw, json)
Hash identifier:          36bcVMKR/CW+Z2q/dcZv+zZC82QOc9m0vb8VLzKwjrM=
Subject key identifier:   86:4F:56:E2:D6:63:EC:AD:15:3F:08:79:06:BF:37:BB:10:A1:F8:12
Certificate issuer:       /CN=1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E
Certificate serial:       22DF7990ADE6F8D9DFFBB154796D77E1574A4CC2
Authority key identifier: 1A:9F:DA:07:97:66:26:D4:1E:7D:F6:DE:52:A2:B0:D9:6B:47:C5:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/AS262514.roa
Signing time:             Tue 12 Sep 2023 15:25:33 +0000
ROA not before:           Tue 12 Sep 2023 15:20:33 +0000
ROA not after:            Tue 10 Sep 2024 15:25:33 +0000
asID:                     262514
IP address blocks:        170.80.64.0/22 maxlen: 22
                          170.80.64.0/23 maxlen: 23
                          170.80.64.0/24 maxlen: 24
                          170.80.65.0/24 maxlen: 24
                          170.80.66.0/23 maxlen: 23
                          170.80.66.0/24 maxlen: 24
                          170.80.67.0/24 maxlen: 24
                          177.55.176.0/20 maxlen: 20
                          177.55.176.0/21 maxlen: 21
                          177.55.176.0/22 maxlen: 22
                          177.55.176.0/23 maxlen: 23
                          177.55.176.0/24 maxlen: 24
                          177.55.177.0/24 maxlen: 24
                          177.55.178.0/23 maxlen: 23
                          177.55.178.0/24 maxlen: 24
                          177.55.179.0/24 maxlen: 24
                          177.55.180.0/22 maxlen: 22
                          177.55.180.0/24 maxlen: 24
                          177.55.181.0/24 maxlen: 24
                          177.55.182.0/23 maxlen: 23
                          177.55.182.0/24 maxlen: 24
                          177.55.183.0/24 maxlen: 24
                          177.55.184.0/21 maxlen: 21
                          177.55.184.0/22 maxlen: 22
                          177.55.184.0/23 maxlen: 23
                          177.55.184.0/24 maxlen: 24
                          177.55.185.0/24 maxlen: 24
                          177.55.186.0/23 maxlen: 23
                          177.55.186.0/24 maxlen: 24
                          177.55.188.0/22 maxlen: 22
                          177.55.188.0/23 maxlen: 23
                          177.55.188.0/24 maxlen: 24
                          177.55.189.0/24 maxlen: 24
                          177.55.190.0/23 maxlen: 23
                          177.55.190.0/24 maxlen: 24
                          177.55.191.0/24 maxlen: 24
                          2804:568::/32 maxlen: 32
                          2804:568::/33 maxlen: 33
                          2804:568:600::/48 maxlen: 48
                          2804:568:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:df:79:90:ad:e6:f8:d9:df:fb:b1:54:79:6d:77:e1:57:4a:4c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E
        Validity
            Not Before: Sep 12 15:20:33 2023 GMT
            Not After : Sep 10 15:25:33 2024 GMT
        Subject: CN=864F56E2D663ECAD153F087906BF37BB10A1F812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:ca:08:13:e2:5b:f1:cb:07:68:28:5f:08:
                    e3:7d:87:d8:b0:6f:f3:b2:f9:30:af:4a:4a:5d:a3:
                    c3:a4:73:20:56:e8:a9:79:f6:e8:9c:a5:37:3f:fd:
                    a0:fc:b1:bd:e2:44:81:c6:49:7a:02:a7:00:54:90:
                    eb:c6:5c:2d:d7:b7:63:c4:ee:8a:bb:5d:42:de:b0:
                    55:bc:50:c9:46:2b:41:58:79:12:5a:9f:0c:c3:9b:
                    d1:06:be:71:69:47:de:7a:4a:64:1a:67:dd:43:55:
                    ef:e6:84:77:98:f3:ab:ee:f7:8e:49:5b:7e:a4:dc:
                    bc:4f:d2:dd:82:97:65:e0:7c:29:71:de:8c:31:64:
                    7a:c1:8f:91:2f:57:7a:49:f2:4b:c5:74:00:ee:91:
                    6d:fb:d4:8a:13:13:3f:ca:a3:48:cb:f3:36:44:8b:
                    a3:7e:81:ba:07:49:f6:c3:54:6d:80:4c:5d:a3:7b:
                    d8:2d:ee:d1:89:9d:83:9f:db:0f:42:5e:87:b8:8a:
                    75:12:03:1f:3d:f9:13:94:99:94:b1:9a:c2:46:82:
                    8f:ca:e3:8e:c9:93:7d:24:1e:3f:8f:c5:57:e7:fd:
                    c9:31:95:c7:80:fa:b5:23:d3:80:25:78:11:ac:83:
                    b9:a7:e0:91:da:45:14:96:3a:f8:80:ac:e2:bb:05:
                    22:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4F:56:E2:D6:63:EC:AD:15:3F:08:79:06:BF:37:BB:10:A1:F8:12
            X509v3 Authority Key Identifier:
                keyid:1A:9F:DA:07:97:66:26:D4:1E:7D:F6:DE:52:A2:B0:D9:6B:47:C5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/AS262514.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.64.0/22
                  177.55.176.0/20
                IPv6:
                  2804:568::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:80:4d:6d:d8:a5:b4:af:6e:bd:67:e1:15:98:10:95:d5:64:
         86:6f:39:17:b2:69:1f:27:ad:10:82:2f:06:5d:61:79:89:62:
         a1:30:2e:4b:94:ca:49:26:f4:77:18:3c:94:a9:4d:81:f1:d3:
         dc:24:71:83:f5:37:6d:8e:b6:cb:46:e9:81:27:c1:a7:f9:a8:
         fe:91:68:85:12:f0:d5:57:c0:2f:58:35:d6:eb:7c:e1:df:44:
         b8:1e:11:52:08:6f:77:1b:19:dd:4d:67:96:66:ff:80:83:9d:
         b8:97:e9:16:75:d3:20:ab:e6:25:d0:c9:1c:91:57:7d:21:06:
         51:3e:30:85:dd:b6:7e:42:d0:54:75:f3:f7:a9:d0:6e:9d:89:
         90:0c:e5:2e:1f:ac:16:d6:c2:b0:f5:73:34:ec:f9:8b:10:5e:
         3a:7f:4b:de:7d:d1:f8:85:6f:f5:59:e6:0a:d1:c8:26:94:e1:
         5c:9a:23:4e:6f:ef:e9:cc:99:dc:81:b1:e0:3d:b0:36:03:36:
         7c:a9:b6:b7:4f:7b:54:d8:d6:3c:2d:8b:93:2b:20:1e:83:81:
         10:8d:5b:9d:3e:ed:3b:b6:6f:6d:36:4b:c7:f7:c2:60:fc:a1:
         82:93:0d:81:5a:99:5d:78:1d:b0:ab:f1:fc:09:a5:02:20:6c:
         63:d6:d9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:18 2025 by rpki-client