Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34362e302f32342d3234203d3e20323633343237.roa
File:                     3137372e39312e34362e302f32342d3234203d3e20323633343237.roa (raw, json)
Hash identifier:          g3EXw0uj2rJIetWrO8Hd/4qAnjdr757cRDoAwhUmmQs=
Subject key identifier:   9B:F8:7D:ED:3B:C3:F5:47:9B:F0:4D:3A:01:BC:88:4E:E3:28:EB:A9
Certificate issuer:       /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial:       78C4340B728DD3525E9C8F68CF3D987D39C79F71
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34362e302f32342d3234203d3e20323633343237.roa
Signing time:             Fri 09 Jun 2023 22:04:24 +0000
ROA not before:           Fri 09 Jun 2023 21:59:24 +0000
ROA not after:            Fri 07 Jun 2024 22:04:24 +0000
asID:                     263427
IP address blocks:        177.91.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c4:34:0b:72:8d:d3:52:5e:9c:8f:68:cf:3d:98:7d:39:c7:9f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Validity
            Not Before: Jun  9 21:59:24 2023 GMT
            Not After : Jun  7 22:04:24 2024 GMT
        Subject: CN=9BF87DED3BC3F5479BF04D3A01BC884EE328EBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:eb:08:b7:cb:6a:1a:f8:ef:8a:49:36:82:
                    56:79:d2:4d:f6:48:02:cd:dd:aa:a6:eb:e7:3f:89:
                    1c:97:15:6b:1b:67:68:4d:6d:cb:ba:40:2a:b8:7b:
                    5a:e9:64:d1:29:d3:48:4e:2e:e0:10:79:eb:66:d3:
                    cf:ac:7e:53:3b:24:02:30:4d:df:d6:d6:6a:6c:92:
                    cf:89:8c:db:77:5f:b4:52:bb:a8:21:f7:ac:d9:65:
                    7a:2c:c9:4b:81:7d:f3:36:a9:5f:cf:a9:dd:6b:3d:
                    e6:65:f6:cb:bc:ee:ed:58:e8:63:2c:67:ad:ea:2b:
                    2f:c7:8e:c1:69:58:de:c2:3c:b8:eb:6e:d3:8d:78:
                    02:a6:9b:19:41:9e:f9:82:3c:b3:65:c4:0e:54:9f:
                    5c:f7:ec:c3:31:ee:45:c2:0f:f7:7d:e2:ac:83:84:
                    13:35:0a:9c:76:2d:31:f2:a3:3e:4f:7d:a3:46:2f:
                    b5:e3:fc:fb:4b:00:0e:cc:96:d2:d2:76:1f:71:31:
                    ae:fc:1e:fe:26:2f:31:18:78:e7:12:7c:74:e4:20:
                    23:d5:6d:5d:cb:45:21:c2:72:34:e9:bf:0b:2b:f3:
                    00:41:de:e5:b5:59:20:36:1b:e4:bc:e9:c9:28:6a:
                    2f:fe:9d:01:95:22:3a:66:5a:45:a4:03:98:79:5d:
                    ae:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F8:7D:ED:3B:C3:F5:47:9B:F0:4D:3A:01:BC:88:4E:E3:28:EB:A9
            X509v3 Authority Key Identifier:
                keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34362e302f32342d3234203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f8:88:8a:ee:13:6a:31:56:82:c3:1d:6f:98:a0:77:78:54:
         85:03:af:e6:af:13:4f:95:6e:57:13:41:52:bf:7e:85:e1:15:
         88:87:6f:60:da:a2:eb:9f:a1:a1:27:37:1f:dd:b2:bd:a7:09:
         2a:7d:fb:99:8b:55:6b:a4:3d:91:2a:87:5e:53:f4:7e:3d:10:
         6a:90:73:4b:fa:4d:45:96:27:17:3b:a1:93:f7:38:7e:87:df:
         e8:4d:e5:82:67:e2:63:83:15:1e:db:89:f8:89:2f:b2:b6:91:
         b3:67:ac:c0:e9:06:9d:c4:48:0a:a2:c0:64:dc:c1:95:e0:62:
         61:83:c8:eb:65:e0:a7:79:cd:21:bc:f0:b8:2f:cb:83:69:d9:
         8c:f1:cc:b6:ec:c4:da:dd:98:53:19:12:b7:28:7d:ea:ba:19:
         c6:f7:22:3d:ba:45:fc:ae:44:46:4b:59:c6:04:f7:64:ec:50:
         df:3d:a0:e8:c7:bc:11:03:ec:12:3c:bf:ab:ff:20:14:aa:41:
         8a:ef:1d:af:9e:b1:2e:cc:c9:b8:36:f6:b9:cd:7a:c5:fa:2f:
         31:c1:fa:85:35:fd:80:b2:c3:2f:6f:18:b2:e2:64:2d:a8:87:
         41:d3:30:7f:22:3b:5a:e1:60:00:6f:bc:4d:9d:e3:3c:f5:e5:
         a3:e8:50:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:57 2025 by rpki-client