Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230322e302f32342d3234203d3e203532353736.roa
File:                     3137372e38362e3230322e302f32342d3234203d3e203532353736.roa (raw, json)
Hash identifier:          iAkKDtw43rrBau342HBrIh8E5ePpKiJ86Kdqr1+8EE0=
Subject key identifier:   2F:3E:65:23:F7:1B:EC:58:4E:49:77:AA:A1:42:35:92:4D:2C:50:3C
Certificate issuer:       /CN=FC100DC5B568BA67A953B7D437E5FF8FC8C7254B
Certificate serial:       1719EB553D62A67056C224D8300C4BF063484B50
Authority key identifier: FC:10:0D:C5:B5:68:BA:67:A9:53:B7:D4:37:E5:FF:8F:C8:C7:25:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC100DC5B568BA67A953B7D437E5FF8FC8C7254B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230322e302f32342d3234203d3e203532353736.roa
Signing time:             Tue 16 May 2023 18:18:23 +0000
ROA not before:           Tue 16 May 2023 18:13:23 +0000
ROA not after:            Tue 14 May 2024 18:18:23 +0000
asID:                     52576
IP address blocks:        177.86.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:19:eb:55:3d:62:a6:70:56:c2:24:d8:30:0c:4b:f0:63:48:4b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC100DC5B568BA67A953B7D437E5FF8FC8C7254B
        Validity
            Not Before: May 16 18:13:23 2023 GMT
            Not After : May 14 18:18:23 2024 GMT
        Subject: CN=2F3E6523F71BEC584E4977AAA14235924D2C503C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:dc:2c:3d:0c:47:ea:89:98:b9:39:1f:ca:
                    5c:b0:2a:6a:83:80:d7:eb:d4:ee:2d:cd:69:e3:58:
                    0a:82:b7:95:f8:00:a9:7e:f1:b3:fd:68:43:8b:40:
                    28:fd:bc:55:57:b0:1a:e0:46:bf:3f:f2:d9:b4:f1:
                    63:12:13:62:4e:9a:37:ff:ca:37:f4:d2:3c:2a:6c:
                    47:88:80:1d:50:3c:4f:5a:31:45:27:6c:a1:9b:44:
                    23:3a:c4:5b:17:d6:8a:1f:a1:75:5b:7d:39:b3:c4:
                    45:26:52:6e:39:bb:d2:8a:b2:d5:47:c6:2f:79:2d:
                    80:84:ae:a4:56:4c:bc:f7:39:af:db:79:51:e6:ea:
                    c9:42:a1:a5:7d:6f:80:bd:dd:fd:ca:81:1a:11:17:
                    2b:53:8a:f5:3b:81:43:10:99:c1:8b:65:7d:5c:0b:
                    59:24:c1:7c:78:fe:61:11:24:a3:61:b3:f2:ad:09:
                    ae:66:bd:89:c3:1b:1a:0a:de:aa:3b:5f:ed:8b:83:
                    5d:66:fe:73:4f:3c:22:02:4a:6d:e3:e7:c6:88:40:
                    3e:8e:30:c1:56:12:bd:79:22:d6:10:97:e0:2c:0f:
                    b4:87:48:2b:5a:32:3f:7e:6c:58:89:97:41:b2:9e:
                    0e:d4:a4:cc:43:82:ef:b0:80:82:df:e6:7f:cb:30:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3E:65:23:F7:1B:EC:58:4E:49:77:AA:A1:42:35:92:4D:2C:50:3C
            X509v3 Authority Key Identifier:
                keyid:FC:10:0D:C5:B5:68:BA:67:A9:53:B7:D4:37:E5:FF:8F:C8:C7:25:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/FC100DC5B568BA67A953B7D437E5FF8FC8C7254B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC100DC5B568BA67A953B7D437E5FF8FC8C7254B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230322e302f32342d3234203d3e203532353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:dd:ba:94:9e:93:80:27:96:c1:a1:8e:01:71:69:d7:d1:eb:
         8a:1e:df:c4:50:14:81:a3:ad:db:06:ce:ab:f4:bf:b9:be:4d:
         93:92:21:f5:91:50:a8:15:3a:8e:e4:f2:41:f6:a6:69:42:13:
         9b:4b:36:db:c3:a8:0e:1b:63:29:8f:be:70:96:9f:f3:38:a3:
         91:51:cc:0f:78:2d:f5:74:d8:cb:26:7a:49:05:ca:a1:08:e4:
         a4:e2:b5:ed:59:e8:73:c5:4c:f0:b4:fe:f2:ee:c5:c2:b2:3a:
         c8:8f:d9:9a:14:b0:09:50:50:df:59:4a:59:34:fd:f8:6d:0c:
         98:7c:c4:c4:c4:1b:eb:60:a6:32:b3:42:1b:41:5d:24:fc:d0:
         3b:ce:b9:fa:3f:05:c8:c8:38:19:58:a7:74:9f:d0:8e:41:68:
         f2:30:ba:4e:1b:c1:4a:b4:da:45:b7:6e:9e:fe:d8:6d:3a:f7:
         ea:1d:a2:38:2b:b1:f9:14:60:59:9c:40:69:75:f5:cc:29:e8:
         1c:44:05:18:da:56:8a:4a:75:4a:c2:ce:da:d4:e3:ca:1b:16:
         e0:2c:d2:c7:2d:dd:15:1a:b8:11:b4:7e:d9:b5:e9:e1:ff:79:
         2e:82:54:e8:03:81:9b:ce:c0:12:ff:bb:c2:80:ca:31:79:5d:
         cc:76:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:25 2025 by rpki-client