Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34362e302f32332d3233203d3e20323633343237.roa
File:                     3137372e39312e34362e302f32332d3233203d3e20323633343237.roa (raw, json)
Hash identifier:          2d7DySPXdXL4/MdwvLcQLEd0+pnC6MWZgjY6BhXaA88=
Subject key identifier:   C5:DA:2F:84:7E:37:C2:A9:A3:7F:83:D1:BD:B0:48:CB:A2:2A:99:3E
Certificate issuer:       /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial:       6D3C9233FDF6C3C7297F9B11EE7508524B73CBF1
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34362e302f32332d3233203d3e20323633343237.roa
Signing time:             Fri 09 Jun 2023 22:05:38 +0000
ROA not before:           Fri 09 Jun 2023 22:00:38 +0000
ROA not after:            Fri 07 Jun 2024 22:05:38 +0000
asID:                     263427
IP address blocks:        177.91.46.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3c:92:33:fd:f6:c3:c7:29:7f:9b:11:ee:75:08:52:4b:73:cb:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Validity
            Not Before: Jun  9 22:00:38 2023 GMT
            Not After : Jun  7 22:05:38 2024 GMT
        Subject: CN=C5DA2F847E37C2A9A37F83D1BDB048CBA22A993E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:2d:e8:d9:e3:d6:ee:8e:0d:0b:0c:71:61:
                    83:11:85:c5:25:44:0c:d4:51:39:7c:8e:e7:23:7b:
                    df:56:ce:f5:4c:9b:e8:4d:95:01:d1:0f:49:61:ea:
                    37:a7:91:da:17:db:7a:8e:e6:ff:2b:73:ad:9e:a1:
                    14:5f:03:7b:c4:37:e3:80:ac:54:4a:47:67:93:57:
                    e7:e7:a1:af:e4:ed:9b:41:94:d0:55:fc:98:81:8e:
                    0e:4d:d6:ce:97:15:35:98:60:d1:9c:05:08:6e:37:
                    92:f9:e8:26:19:fd:4e:cd:94:6c:11:d3:45:ba:55:
                    ab:5e:be:0a:fc:96:be:2e:e2:95:7d:1e:08:13:d3:
                    fd:cf:00:a4:36:ec:38:f2:6f:d7:83:7e:ad:d9:15:
                    69:f9:14:0e:84:e6:e3:1f:cb:ce:06:a2:31:fd:67:
                    1e:c3:1f:c8:6c:84:dc:43:cd:75:f4:99:9a:35:17:
                    66:9f:9f:48:be:b2:7d:98:b1:8b:de:0a:b2:9c:e7:
                    4d:4d:07:b1:d7:37:a3:f8:63:35:82:9d:a5:2c:d8:
                    7e:04:4d:73:33:22:f6:a4:20:f1:c4:5e:4f:32:43:
                    2a:34:11:da:96:ca:7e:51:74:59:21:1b:3c:bc:7c:
                    16:5b:6f:2b:8f:83:d8:26:fe:a4:3d:54:66:60:aa:
                    78:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DA:2F:84:7E:37:C2:A9:A3:7F:83:D1:BD:B0:48:CB:A2:2A:99:3E
            X509v3 Authority Key Identifier:
                keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34362e302f32332d3233203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:43:82:9b:8b:5d:4f:26:fd:ee:e6:59:7e:3c:8e:97:d0:6d:
         58:05:a8:0f:60:20:b6:be:68:92:9c:8a:73:81:54:83:b5:e4:
         15:f7:1c:1b:12:26:80:2e:eb:6e:52:3f:dc:a6:55:06:a3:03:
         7a:21:5a:83:d6:ce:37:15:59:00:ca:05:db:ce:cd:3d:a6:2a:
         a1:05:1e:0a:b1:d6:bb:8b:69:20:93:4d:b1:28:58:86:91:46:
         a0:f9:81:1c:04:94:b3:ef:3a:7f:15:69:c9:df:a9:af:68:76:
         44:aa:a7:55:ff:14:95:51:77:aa:72:d6:60:d4:f4:07:84:35:
         f1:1b:fb:ed:e7:d5:fd:a7:38:04:6b:59:7c:7a:e3:25:e6:91:
         a3:61:38:f5:d7:ba:79:9d:1b:cd:b4:c7:d9:13:4c:50:c0:ad:
         79:12:91:32:9a:5f:5c:d7:e3:dc:4c:41:22:e0:9c:b8:0c:12:
         d8:64:0f:57:27:a7:31:54:05:14:74:da:dc:c6:75:0d:6c:c0:
         88:6b:6d:25:d9:cf:38:b1:3b:82:55:49:04:1f:b0:0f:f0:a7:
         8e:a2:ec:14:36:6b:30:08:fd:54:58:d5:91:1a:34:1e:cb:81:
         40:6e:95:46:8f:07:89:bf:cc:4e:57:2e:2d:10:28:25:7f:df:
         e0:9c:e3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:16 2025 by rpki-client