Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34342e302f32342d3234203d3e20323633343237.roa
File:                     3137372e39312e34342e302f32342d3234203d3e20323633343237.roa (raw, json)
Hash identifier:          gsfUuyOWGlwLsmZmLjEvSncGcTKLNnUtm2552OWsIHs=
Subject key identifier:   1E:E2:40:89:DB:A8:61:A6:A1:D6:6A:C6:44:CF:13:09:40:A2:36:F9
Certificate issuer:       /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial:       7EEAFF0510E1D8F0E152B533602CD2E3D656044E
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34342e302f32342d3234203d3e20323633343237.roa
Signing time:             Fri 09 Jun 2023 22:04:39 +0000
ROA not before:           Fri 09 Jun 2023 21:59:39 +0000
ROA not after:            Fri 07 Jun 2024 22:04:39 +0000
asID:                     263427
IP address blocks:        177.91.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ea:ff:05:10:e1:d8:f0:e1:52:b5:33:60:2c:d2:e3:d6:56:04:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Validity
            Not Before: Jun  9 21:59:39 2023 GMT
            Not After : Jun  7 22:04:39 2024 GMT
        Subject: CN=1EE24089DBA861A6A1D66AC644CF130940A236F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:89:6f:71:6b:0e:82:0f:b4:62:20:fc:1c:95:
                    9f:43:eb:02:f7:d7:ac:ee:92:eb:7b:a3:6e:08:88:
                    59:0d:94:36:a5:a5:ee:f4:f5:76:4b:12:ac:46:37:
                    a9:8d:ef:56:aa:00:4f:33:07:f8:f2:6e:22:2c:5f:
                    ad:b3:d1:c1:d1:a2:8d:ba:89:d9:3b:00:f9:f3:6b:
                    78:b8:39:67:85:85:fb:0f:24:a0:3b:d0:c6:ed:d7:
                    d6:44:dc:ea:8d:ba:fb:3b:22:2a:85:1b:c8:d5:c1:
                    84:66:72:3b:b0:2b:f4:e5:13:41:fd:f9:a6:6e:09:
                    ed:e3:c4:cf:b7:56:63:fc:7a:d5:43:72:18:5c:50:
                    88:8e:f4:89:c7:6f:03:d7:1b:c6:98:55:91:46:23:
                    9f:9b:1a:34:43:99:ff:ed:61:1a:1e:0d:59:5f:f2:
                    14:76:3f:f4:93:c8:48:d5:b6:a1:a7:2a:a9:b2:91:
                    9b:eb:28:65:08:c3:3e:c1:e1:18:fc:09:8d:1c:98:
                    03:59:29:55:a6:a8:50:73:92:13:8a:5d:ca:57:24:
                    3e:6f:62:31:54:8e:54:ae:70:d0:bf:e9:6d:b1:af:
                    22:57:2a:e9:2c:13:3a:12:e2:c5:d5:9a:24:68:21:
                    05:e4:ec:25:f4:70:14:cc:c0:ce:bd:46:df:44:e4:
                    89:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E2:40:89:DB:A8:61:A6:A1:D6:6A:C6:44:CF:13:09:40:A2:36:F9
            X509v3 Authority Key Identifier:
                keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34342e302f32342d3234203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:db:0c:16:55:6a:c5:34:58:a6:5c:99:13:4a:ca:64:39:e8:
         c8:83:b8:73:a1:6c:13:75:8d:ae:99:3f:95:ea:59:22:0b:57:
         b0:f9:a9:72:88:fe:fa:d2:8e:d3:73:c3:75:e5:eb:6d:c0:4a:
         fd:e5:b0:84:d6:17:4c:03:68:2c:74:0f:af:64:a3:1d:01:ce:
         70:f1:58:f3:3f:ca:cd:e6:cc:72:cc:b5:10:95:05:c9:f4:f3:
         85:ce:98:9d:c1:e6:eb:51:64:be:72:73:cf:4f:1d:60:8f:58:
         10:2a:7f:e7:17:33:0d:0b:dc:f3:5c:d7:b5:3b:a9:16:e5:6c:
         f4:d0:0e:eb:f2:2b:b2:17:13:6a:49:dd:c5:c3:a7:33:03:30:
         22:99:b6:f7:5d:a0:fb:26:3f:02:8d:ec:72:76:d5:49:2b:8c:
         ce:0d:ed:f2:9b:b8:de:51:25:53:2f:2d:06:40:ea:3f:e4:65:
         73:9e:fd:c3:50:99:73:ee:c0:43:21:fe:b7:2d:f2:0e:53:ce:
         c3:69:6f:1c:b1:5f:11:71:bf:89:ab:4b:66:6f:5d:f1:b1:82:
         42:71:f3:09:74:14:b1:9e:b8:9d:9b:1e:da:3c:91:77:aa:c5:
         de:61:3f:e6:80:a0:29:c9:af:38:53:58:8d:bb:b6:f7:f2:1f:
         70:92:a4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:01:20 2025 by rpki-client