Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32332d3234203d3e20323633353731.roa
File:                     3137372e35352e38382e302f32332d3234203d3e20323633353731.roa (raw, json)
Hash identifier:          9XPGBqPzv29w3BAL0y0GyyQtOrn4QrvIaFB+Lo4rcfk=
Subject key identifier:   80:62:3E:5D:76:91:80:27:C6:B7:B3:8A:DC:1E:F7:C9:84:63:70:8E
Certificate issuer:       /CN=2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190
Certificate serial:       31F2F83C04A7C65AC71FBBDF05BA18C9835FA1CD
Authority key identifier: 2B:D7:FC:C4:7D:CA:9F:F8:A2:B9:C3:58:07:6F:80:CC:7B:9A:51:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32332d3234203d3e20323633353731.roa
Signing time:             Wed 11 Dec 2024 20:33:30 +0000
ROA not before:           Wed 11 Dec 2024 20:28:30 +0000
ROA not after:            Wed 10 Dec 2025 20:33:30 +0000
asID:                     263571
IP address blocks:        177.55.88.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f2:f8:3c:04:a7:c6:5a:c7:1f:bb:df:05:ba:18:c9:83:5f:a1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190
        Validity
            Not Before: Dec 11 20:28:30 2024 GMT
            Not After : Dec 10 20:33:30 2025 GMT
        Subject: CN=80623E5D76918027C6B7B38ADC1EF7C98463708E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:52:07:a5:26:c8:24:08:82:5f:c1:11:b1:8a:
                    72:5f:5f:86:05:0b:62:a6:18:b5:95:3c:e3:a1:4a:
                    49:b9:85:4f:8d:8c:4c:52:63:85:e3:4c:5b:7d:83:
                    af:9f:ae:64:4c:0c:e9:73:69:62:2a:e3:4d:8d:9f:
                    d0:76:16:45:1f:bf:b9:56:55:7c:1d:ce:08:61:63:
                    af:c4:5b:bd:0c:16:cd:f7:8e:6c:db:f9:b0:23:b3:
                    0d:30:16:5d:10:0f:dc:26:4d:68:e0:44:bd:3a:b7:
                    b2:ad:ea:ae:43:21:a3:07:4c:26:a1:ff:14:f8:1b:
                    6c:03:eb:97:3e:93:ec:0c:42:64:d7:78:1f:c1:0d:
                    2a:cb:be:2d:b8:42:f9:3e:c5:21:60:2e:d9:53:47:
                    f8:2c:c8:86:a8:95:ec:9a:20:14:f7:72:8e:72:3b:
                    d2:df:ed:c4:a3:71:a1:c5:78:e7:94:31:1b:6e:66:
                    5f:bd:cd:b9:c3:2e:74:41:c5:6a:e4:ae:88:c7:83:
                    a5:7c:5d:db:81:38:3b:be:3e:79:90:74:5c:46:8d:
                    5c:c7:0f:d9:b7:b7:98:94:92:77:74:85:0b:61:3a:
                    ec:4c:ce:12:a8:77:90:06:5c:17:46:46:62:66:a3:
                    aa:e1:0b:9b:23:23:7b:2d:ae:c8:6f:4d:91:51:dd:
                    61:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:62:3E:5D:76:91:80:27:C6:B7:B3:8A:DC:1E:F7:C9:84:63:70:8E
            X509v3 Authority Key Identifier:
                keyid:2B:D7:FC:C4:7D:CA:9F:F8:A2:B9:C3:58:07:6F:80:CC:7B:9A:51:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32332d3234203d3e20323633353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:9f:50:5d:3a:e7:48:82:89:a7:cc:13:8a:ea:bf:5f:03:f8:
         6a:07:91:58:e6:0a:39:e2:9f:99:52:20:d1:4b:9e:91:28:99:
         12:ce:f1:ff:66:52:eb:3a:fa:37:fa:c6:f8:ea:60:41:c4:d3:
         d8:55:40:f7:d6:5e:05:f9:04:8e:35:79:3f:e2:95:6c:91:5f:
         7c:4e:34:76:f4:11:8e:3b:2b:05:7d:3b:a5:09:c7:f0:03:60:
         16:3e:7c:3b:12:46:fa:97:8a:41:72:a8:7a:c1:13:7f:03:55:
         e7:f0:07:7d:2e:ad:a7:24:ce:c6:b8:e5:e8:30:e4:e6:3b:08:
         d7:24:01:89:e6:ea:5f:6b:41:7c:6f:60:e9:ef:b2:2e:ca:6f:
         41:43:52:8a:d3:89:37:90:0d:71:73:85:96:fd:03:c0:84:23:
         d1:4e:2d:d9:99:0c:8b:75:08:89:f4:fb:82:83:55:79:ba:10:
         37:85:80:d5:7b:dd:2a:7e:e5:d5:f2:05:88:9b:6f:a5:15:47:
         63:2b:d6:e4:8f:54:18:52:24:06:4e:b1:63:8b:37:a4:4b:b7:
         13:15:44:33:cb:22:7e:c0:b3:99:4c:fc:56:c3:07:4f:6f:69:
         5d:fd:37:e8:99:1f:88:e0:7f:65:bc:6f:f5:51:1a:72:02:a2:
         eb:14:df:30
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMfL4PASnxlrHH7vfBboYyYNfoc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJEN0ZDQzQ3RENBOUZGOEEyQjlDMzU4MDc2RjgwQ0M3
QjlBNTE5MDAeFw0yNDEyMTEyMDI4MzBaFw0yNTEyMTAyMDMzMzBaMDMxMTAvBgNV
BAMTKDgwNjIzRTVENzY5MTgwMjdDNkI3QjM4QURDMUVGN0M5ODQ2MzcwOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgUgelJsgkCIJfwRGxinJfX4YF
C2KmGLWVPOOhSkm5hU+NjExSY4XjTFt9g6+frmRMDOlzaWIq402Nn9B2FkUfv7lW
VXwdzghhY6/EW70MFs33jmzb+bAjsw0wFl0QD9wmTWjgRL06t7Kt6q5DIaMHTCah
/xT4G2wD65c+k+wMQmTXeB/BDSrLvi24Qvk+xSFgLtlTR/gsyIaoleyaIBT3co5y
O9Lf7cSjcaHFeOeUMRtuZl+9zbnDLnRBxWrkrojHg6V8XduBODu+PnmQdFxGjVzH
D9m3t5iUknd0hQthOuxMzhKod5AGXBdGRmJmo6rhC5sjI3strshvTZFR3WGZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgGI+XXaRgCfGt7OK3B73yYRjcI4wHwYDVR0j
BBgwFoAUK9f8xH3Kn/iiucNYB2+AzHuaUZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXI2UGJ5d0tVWDZ4U2txN3ZSZTlHWkNhNzFLMUtKakpjR25CVWlzM3J5
SEEvMC8yQkQ3RkNDNDdEQ0E5RkY4QTJCOUMzNTgwNzZGODBDQzdCOUE1MTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRDdGQ0M0N0RDQTlGRjhB
MkI5QzM1ODA3NkY4MENDN0I5QTUxOTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVyNlBieXdLVVg2eFNrcTd2UmU5R1pDYTcxSzFLSmpKY0duQlVpczNyeUhBLzAv
MzEzNzM3MmUzNTM1MmUzODM4MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjMz
MzUzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsTdYMA0GCSqGSIb3DQEBCwUAA4IBAQCBn1BdOudI
gomnzBOK6r9fA/hqB5FY5go54p+ZUiDRS56RKJkSzvH/ZlLrOvo3+sb46mBBxNPY
VUD31l4F+QSONXk/4pVskV98TjR29BGOOysFfTulCcfwA2AWPnw7Ekb6l4pBcqh6
wRN/A1Xn8Ad9Lq2nJM7GuOXoMOTmOwjXJAGJ5upfa0F8b2Dp77Iuym9BQ1KK04k3
kA1xc4WW/QPAhCPRTi3ZmQyLdQiJ9PuCg1V5uhA3hYDVe90qfuXV8gWIm2+lFUdj
K9bkj1QYUiQGTrFjizekS7cTFUQzyyJ+wLOZTPxWwwdPb2ld/TfomR+I4H9lvG/1
URpyAqLrFN8w
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:47:09 2025 by rpki-client