Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3137372e32302e3138382e302f32322d3232203d3e20323632383931.roa
File:                     3137372e32302e3138382e302f32322d3232203d3e20323632383931.roa (raw, json)
Hash identifier:          Z3zRprCakE1ZvU4lscpW+FsqPlQQQrd8IrqjcMDmZqk=
Subject key identifier:   09:21:8C:71:50:12:04:0F:2A:9F:74:A9:EF:26:50:23:74:F5:9D:A8
Certificate issuer:       /CN=CD8207F50B5584700354C87E2FDD3EEDAABE3E9C
Certificate serial:       215BF9B7EC41D38C5418DA7C5FFF99DD4315EBF4
Authority key identifier: CD:82:07:F5:0B:55:84:70:03:54:C8:7E:2F:DD:3E:ED:AA:BE:3E:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3137372e32302e3138382e302f32322d3232203d3e20323632383931.roa
Signing time:             Thu 18 Aug 2022 21:11:43 +0000
ROA not before:           Thu 18 Aug 2022 21:06:43 +0000
ROA not after:            Thu 17 Aug 2023 21:11:43 +0000
asID:                     262891
IP address blocks:        177.20.188.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5b:f9:b7:ec:41:d3:8c:54:18:da:7c:5f:ff:99:dd:43:15:eb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8207F50B5584700354C87E2FDD3EEDAABE3E9C
        Validity
            Not Before: Aug 18 21:06:43 2022 GMT
            Not After : Aug 17 21:11:43 2023 GMT
        Subject: CN=09218C715012040F2A9F74A9EF26502374F59DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f0:9e:99:7c:5d:fe:52:ec:fe:04:3b:33:34:
                    72:1e:49:d2:4d:c8:57:8a:cb:47:aa:60:96:a6:91:
                    22:ea:d8:7b:f2:e4:00:be:96:19:1d:85:ba:78:9c:
                    95:7e:62:29:0a:6b:67:1e:a8:0e:c0:20:5f:f8:3c:
                    9c:1a:ef:54:cd:69:66:78:02:19:95:0a:0e:81:40:
                    20:bc:27:5e:e1:fb:d2:c3:35:a6:26:06:b3:10:0a:
                    da:82:37:60:11:20:e2:d1:ae:7a:2a:6b:c4:4b:aa:
                    f1:36:46:ac:81:86:7d:36:80:2c:79:a5:e0:b9:ae:
                    fd:46:1d:ad:d1:6e:62:fd:bd:86:a1:41:66:ce:ed:
                    53:ee:d6:a4:39:47:ab:6f:eb:55:be:e3:b9:2d:f4:
                    1f:c4:7a:89:40:59:65:8b:6a:e0:9d:8b:e6:f9:a3:
                    7a:5a:81:2f:5d:dd:b8:cd:6e:a1:dc:60:04:d9:1a:
                    34:f0:c0:7d:a2:ec:e7:52:41:f7:62:67:28:83:8e:
                    e1:dc:c1:8f:f4:3f:eb:2b:60:5b:7b:9e:e4:4c:b8:
                    03:10:29:36:3e:fc:c1:52:74:40:cd:1d:06:14:2d:
                    fd:8c:c4:b4:90:1c:60:ad:9c:d5:d7:78:1a:1f:69:
                    97:8c:30:38:1c:d3:59:bf:3a:ce:2f:c2:79:84:a7:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:21:8C:71:50:12:04:0F:2A:9F:74:A9:EF:26:50:23:74:F5:9D:A8
            X509v3 Authority Key Identifier:
                keyid:CD:82:07:F5:0B:55:84:70:03:54:C8:7E:2F:DD:3E:ED:AA:BE:3E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3137372e32302e3138382e302f32322d3232203d3e20323632383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:ff:f7:08:16:08:9c:1f:2a:4c:20:74:31:d1:91:c3:fa:ac:
         0e:43:df:33:4d:48:7d:b3:5f:0f:c4:44:fe:10:c6:8e:d2:d6:
         dd:fe:b3:b0:ab:e7:4c:f3:ed:4a:2d:ae:8c:24:83:22:ca:92:
         ef:1a:af:4c:26:24:cf:2e:cb:6b:2a:f7:ec:57:59:5d:4f:c9:
         69:f4:c4:15:3d:23:4f:62:24:e2:34:4c:38:31:b9:d7:7e:d4:
         64:8f:f0:fa:60:b0:02:3f:b9:8f:25:4f:66:5c:13:26:75:be:
         15:15:cd:46:fd:b1:e2:f0:fd:bd:15:2c:2e:63:d0:7d:c0:61:
         db:d8:b8:08:a2:1a:f8:cf:c5:e9:6a:03:db:79:84:ce:6d:aa:
         dc:ee:30:62:12:f6:df:28:2a:05:4f:39:24:cc:97:c9:3b:cb:
         aa:6c:cd:a3:fa:93:7f:13:57:7e:f5:5a:81:b3:1b:20:0d:3e:
         a0:f1:e0:02:3a:97:bb:8d:07:29:0b:9b:63:39:64:7a:3f:2f:
         21:e9:c7:e0:0e:54:71:81:e6:01:98:9d:f8:7c:51:7a:ac:ed:
         0e:dc:56:8e:66:9f:52:fb:3b:cf:35:78:6e:ed:b1:08:ad:bc:
         66:7b:73:4f:99:53:d7:19:0e:cd:6c:15:46:2f:32:33:6d:55:
         f0:9c:c2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:43 2025 by rpki-client