Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3137372e32332e36342e302f32332d3233203d3e20323632383931.roa
File:                     3137372e32332e36342e302f32332d3233203d3e20323632383931.roa (raw, json)
Hash identifier:          ykCGFKQoInSm5PdNyuyqmJJA3F0ssKe1dZ46YAC8WtE=
Subject key identifier:   E4:3E:F7:0D:2E:17:5B:80:4B:E0:54:58:B0:43:9F:C1:A8:9B:D3:AE
Certificate issuer:       /CN=CD8207F50B5584700354C87E2FDD3EEDAABE3E9C
Certificate serial:       7C1C59F2882DD4010AB6FFA0EA63739C676BC8DD
Authority key identifier: CD:82:07:F5:0B:55:84:70:03:54:C8:7E:2F:DD:3E:ED:AA:BE:3E:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3137372e32332e36342e302f32332d3233203d3e20323632383931.roa
Signing time:             Thu 18 Aug 2022 21:14:26 +0000
ROA not before:           Thu 18 Aug 2022 21:09:26 +0000
ROA not after:            Thu 17 Aug 2023 21:14:26 +0000
asID:                     262891
IP address blocks:        177.23.64.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1c:59:f2:88:2d:d4:01:0a:b6:ff:a0:ea:63:73:9c:67:6b:c8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8207F50B5584700354C87E2FDD3EEDAABE3E9C
        Validity
            Not Before: Aug 18 21:09:26 2022 GMT
            Not After : Aug 17 21:14:26 2023 GMT
        Subject: CN=E43EF70D2E175B804BE05458B0439FC1A89BD3AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:43:67:b7:2a:e8:9f:17:3d:e6:26:58:74:14:
                    08:6d:be:a7:46:3a:f4:73:1f:e3:dc:15:4d:fe:a9:
                    2b:53:1d:39:98:1a:f3:5a:f5:a5:52:98:6d:7f:c9:
                    d4:42:7f:93:2f:ed:31:27:36:46:15:6a:ac:d0:74:
                    39:b1:cf:a3:3f:3d:48:c2:78:c2:a5:f7:a5:b4:93:
                    09:7f:9b:2b:00:be:cb:2b:98:f3:9d:89:2e:74:3d:
                    f7:f1:29:71:ed:24:c0:8e:80:85:0a:43:b5:da:ec:
                    31:7c:39:5f:7f:f0:fd:2c:4c:db:25:a8:7b:92:fa:
                    cf:8f:c7:d9:f4:2b:ff:59:db:dc:47:5a:69:02:6f:
                    e5:63:59:e7:7f:75:1c:c4:10:bb:40:8a:01:4b:c7:
                    24:84:7b:12:c2:72:fb:88:78:8c:20:52:3f:8f:84:
                    05:8e:68:f9:c2:40:64:c2:8e:8a:30:3a:d3:10:91:
                    18:7b:3a:dc:8f:e7:e6:59:70:75:7e:29:02:7a:61:
                    f7:a1:df:49:9b:4d:2f:ea:87:b9:ba:07:7c:1a:72:
                    66:c2:2e:07:82:4d:cd:55:b8:1b:f1:8c:56:c8:29:
                    0b:53:bc:2c:b0:7f:aa:35:27:4f:f7:9a:7f:0f:13:
                    84:c9:fc:de:fc:b6:ce:8a:ff:ed:ad:29:95:b2:13:
                    d0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3E:F7:0D:2E:17:5B:80:4B:E0:54:58:B0:43:9F:C1:A8:9B:D3:AE
            X509v3 Authority Key Identifier:
                keyid:CD:82:07:F5:0B:55:84:70:03:54:C8:7E:2F:DD:3E:ED:AA:BE:3E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3137372e32332e36342e302f32332d3233203d3e20323632383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:2f:c1:7f:5f:98:37:9c:cb:79:70:48:58:95:b1:3c:26:b9:
         1c:95:5a:e9:c3:67:95:8d:61:a8:a3:20:cf:6c:f2:fa:97:52:
         41:06:37:d0:11:eb:ef:57:fd:ec:b3:c4:9d:e1:a1:c5:3d:23:
         51:5e:c0:49:da:5f:ae:e1:bf:3d:f0:66:13:c4:19:a0:35:3f:
         10:55:ed:fb:72:de:0f:45:63:58:1e:7e:96:ad:bf:c7:7c:e3:
         86:75:83:33:71:70:c1:8c:31:d3:85:0b:a5:42:4a:74:d7:7d:
         1e:0e:ca:bb:37:04:9f:03:12:8a:67:19:b6:ef:03:f8:ae:89:
         8b:c3:00:97:21:d7:51:bd:b1:33:f3:af:88:c3:c6:44:06:fd:
         f3:b0:a2:b0:7d:6a:2d:c9:be:32:f9:e7:75:a1:44:f1:8b:4d:
         58:d9:13:79:44:9d:57:60:7f:6a:b0:24:0b:50:bd:11:68:03:
         ac:28:dd:74:b4:b7:e7:36:5d:35:ce:ba:32:fe:f7:a5:e6:43:
         30:2d:3e:17:49:e8:69:02:a6:c9:e3:a3:fb:ad:66:df:02:3b:
         dd:a6:d9:e1:c4:2c:3c:af:8e:f1:15:5e:b5:35:80:01:dc:99:
         79:2d:98:67:34:9d:ea:ec:b2:31:d6:69:38:18:8c:57:9a:a3:
         f9:6f:8c:b0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfBxZ8ogt1AEKtv+g6mNznGdryN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q4MjA3RjUwQjU1ODQ3MDAzNTRDODdFMkZERDNFRURB
QUJFM0U5QzAeFw0yMjA4MTgyMTA5MjZaFw0yMzA4MTcyMTE0MjZaMDMxMTAvBgNV
BAMTKEU0M0VGNzBEMkUxNzVCODA0QkUwNTQ1OEIwNDM5RkMxQTg5QkQzQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Q2e3KuifFz3mJlh0FAhtvqdG
OvRzH+PcFU3+qStTHTmYGvNa9aVSmG1/ydRCf5Mv7TEnNkYVaqzQdDmxz6M/PUjC
eMKl96W0kwl/mysAvssrmPOdiS50PffxKXHtJMCOgIUKQ7Xa7DF8OV9/8P0sTNsl
qHuS+s+Px9n0K/9Z29xHWmkCb+VjWed/dRzEELtAigFLxySEexLCcvuIeIwgUj+P
hAWOaPnCQGTCjoowOtMQkRh7OtyP5+ZZcHV+KQJ6Yfeh30mbTS/qh7m6B3wacmbC
LgeCTc1VuBvxjFbIKQtTvCywf6o1J0/3mn8PE4TJ/N78ts6K/+2tKZWyE9BnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5D73DS4XW4BL4FRYsEOfwaib064wHwYDVR0j
BBgwFoAUzYIH9QtVhHADVMh+L90+7aq+PpwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWZjVmZ3YWJUa2d5b2hTTks2cjVOOVZYeHZ3TUFLRzZWWHJDVlJ4a1hQ
YWQvMC9DRDgyMDdGNTBCNTU4NDcwMDM1NEM4N0UyRkREM0VFREFBQkUzRTlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NEODIwN0Y1MEI1NTg0NzAw
MzU0Qzg3RTJGREQzRUVEQUFCRTNFOUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVmY1Zmd2FiVGtneW9oU05LNnI1TjlWWHh2d01BS0c2VlhyQ1ZSeGtYUGFkLzAv
MzEzNzM3MmUzMjMzMmUzNjM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMy
MzgzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsRdAMA0GCSqGSIb3DQEBCwUAA4IBAQC1L8F/X5g3
nMt5cEhYlbE8JrkclVrpw2eVjWGooyDPbPL6l1JBBjfQEevvV/3ss8Sd4aHFPSNR
XsBJ2l+u4b898GYTxBmgNT8QVe37ct4PRWNYHn6Wrb/HfOOGdYMzcXDBjDHThQul
Qkp0130eDsq7NwSfAxKKZxm27wP4romLwwCXIddRvbEz86+Iw8ZEBv3zsKKwfWot
yb4y+ed1oUTxi01Y2RN5RJ1XYH9qsCQLUL0RaAOsKN10tLfnNl01zroy/vel5kMw
LT4XSehpAqbJ46P7rWbfAjvdptnhxCw8r47xFV61NYAB3Jl5LZhnNJ3q7LIx1mk4
GIxXmqP5b4yw
-----END CERTIFICATE-----
Generated at Wed Apr 23 05:38:26 2025 by rpki-client