Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34342e302f32322d3232203d3e20323633343237.roa
File:                     3137372e39312e34342e302f32322d3232203d3e20323633343237.roa (raw, json)
Hash identifier:          1RJSUbWTX1q3JF+p2D46JidZP3YPA1ffbltwubByfkc=
Subject key identifier:   C5:06:53:38:F5:B6:AB:0C:63:FF:F4:A8:18:2D:E0:60:92:3E:C7:E5
Certificate issuer:       /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial:       63FBEB6A71787874CDBB4F25D816DCA27DB3E942
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34342e302f32322d3232203d3e20323633343237.roa
Signing time:             Fri 09 Jun 2023 22:12:50 +0000
ROA not before:           Fri 09 Jun 2023 22:07:50 +0000
ROA not after:            Fri 07 Jun 2024 22:12:50 +0000
asID:                     263427
IP address blocks:        177.91.44.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fb:eb:6a:71:78:78:74:cd:bb:4f:25:d8:16:dc:a2:7d:b3:e9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Validity
            Not Before: Jun  9 22:07:50 2023 GMT
            Not After : Jun  7 22:12:50 2024 GMT
        Subject: CN=C5065338F5B6AB0C63FFF4A8182DE060923EC7E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e1:40:95:64:c9:62:5a:c1:bd:b0:60:68:2e:
                    74:b0:dc:a5:56:c3:e5:57:f4:1e:d9:28:e7:93:04:
                    39:9c:05:a7:87:b0:53:a8:70:d9:3f:af:22:f9:19:
                    08:eb:d4:40:b0:f6:ee:5c:23:b5:56:43:2f:5f:a0:
                    96:16:4d:54:7d:e9:c4:d8:f8:74:57:9c:8c:a5:68:
                    5a:55:61:9a:f8:b1:e7:36:02:c9:73:81:6e:cb:e3:
                    ff:77:37:7e:13:e3:7a:82:d1:97:4f:52:f6:15:34:
                    a0:97:88:3e:de:f8:69:46:a8:20:2f:0f:1f:37:78:
                    ac:a6:41:ce:07:8d:2d:39:dc:c2:28:02:ca:04:e6:
                    87:9c:b1:11:92:4c:c8:84:be:76:bd:a6:8f:57:83:
                    74:f9:9b:45:e1:c8:ca:02:d3:94:4a:51:8f:03:a9:
                    71:89:74:c0:41:fe:73:10:77:84:0d:3d:96:f0:f5:
                    01:a4:78:d1:b5:37:fb:7a:ed:78:fc:35:bf:de:85:
                    9e:8b:22:a9:e5:87:99:06:f0:17:08:52:e2:e4:1f:
                    31:00:70:f4:43:39:35:3f:05:48:14:a2:5b:d2:1f:
                    22:65:99:23:0d:3e:68:ee:3a:a7:11:55:dd:b4:c9:
                    4f:58:7e:2e:a8:69:52:3b:25:27:47:e3:20:00:1f:
                    2d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:06:53:38:F5:B6:AB:0C:63:FF:F4:A8:18:2D:E0:60:92:3E:C7:E5
            X509v3 Authority Key Identifier:
                keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34342e302f32322d3232203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:bd:1b:f3:1b:1a:f8:fc:e1:97:2c:9a:87:2a:b0:f7:85:a0:
         93:8a:64:67:56:ba:c1:9c:51:4c:a9:46:3b:1a:17:5a:86:a0:
         ea:f2:f5:23:4e:87:c4:54:02:86:85:8f:4a:16:12:9f:b2:e6:
         c3:b4:20:3e:3e:d6:c8:b0:5a:cb:29:49:22:27:9f:e5:36:9d:
         ee:1c:65:04:0e:6a:8e:0c:4b:5d:0e:25:c7:94:ac:78:ba:31:
         53:3d:76:0b:80:0e:04:45:8f:0e:ac:9f:e9:07:b0:e9:93:f2:
         cd:73:b0:76:d1:19:1e:b8:9d:9c:73:e1:af:a3:bd:c2:ae:5c:
         b6:66:5f:3c:6f:c4:9a:b3:f8:be:1b:c4:b6:ed:79:b2:ff:07:
         27:fa:ee:fb:0c:97:11:fe:32:57:b3:31:bc:84:96:d1:d5:f3:
         6a:1f:d3:b5:04:dd:d5:b3:3b:58:4e:a1:2b:1b:5b:6d:6d:2f:
         00:66:dc:c0:24:f2:27:63:a6:76:87:28:f7:d0:16:e0:3a:d1:
         de:70:c7:0f:d7:64:91:bf:7f:7f:2f:aa:85:e0:f1:27:5d:ba:
         96:ea:00:0b:9c:54:4c:4d:0d:ce:22:0c:15:d1:6e:7b:b1:72:
         0a:76:a8:32:4c:13:fe:97:de:92:2a:4f:dd:6e:52:65:e1:81:
         4f:f9:e7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:10 2025 by rpki-client