Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137372e38372e36342e302f32322d3236203d3e203532383538.roa
File:                     3137372e38372e36342e302f32322d3236203d3e203532383538.roa (raw, json)
Hash identifier:          Ilq877JPkZyBtPzSEFjTwb3qx4v4WpQL8ZPI82qCeJA=
Subject key identifier:   78:2A:7A:E8:69:B8:65:BC:70:B0:7B:5D:41:97:15:DF:02:E9:72:DB
Certificate issuer:       /CN=5B263F0F259C154495BFEADDE220CF73F0E6D7D0
Certificate serial:       636F41FC9A5DDA66DDA32B1F2F5F26B140D2034F
Authority key identifier: 5B:26:3F:0F:25:9C:15:44:95:BF:EA:DD:E2:20:CF:73:F0:E6:D7:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137372e38372e36342e302f32322d3236203d3e203532383538.roa
Signing time:             Tue 05 Dec 2023 15:44:38 +0000
ROA not before:           Tue 05 Dec 2023 15:39:38 +0000
ROA not after:            Tue 03 Dec 2024 15:44:38 +0000
asID:                     52858
IP address blocks:        177.87.64.0/22 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6f:41:fc:9a:5d:da:66:dd:a3:2b:1f:2f:5f:26:b1:40:d2:03:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B263F0F259C154495BFEADDE220CF73F0E6D7D0
        Validity
            Not Before: Dec  5 15:39:38 2023 GMT
            Not After : Dec  3 15:44:38 2024 GMT
        Subject: CN=782A7AE869B865BC70B07B5D419715DF02E972DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:1c:e3:fc:50:57:e3:d7:67:0e:57:5d:7b:
                    30:ec:f9:52:8e:51:b2:71:00:65:f9:7c:c2:e8:48:
                    eb:b5:1b:a1:be:5d:3c:78:83:c1:24:12:b1:d1:b2:
                    60:33:e5:b6:ee:85:0a:c8:ce:43:79:a6:db:18:a4:
                    52:e1:7c:48:b2:08:aa:d4:74:13:0c:a0:1f:67:52:
                    53:59:af:c2:0b:5e:dd:7e:45:d4:5d:77:2d:63:04:
                    1a:94:86:96:8e:18:82:14:fc:dc:93:ed:4c:8f:9a:
                    d9:1d:bc:f9:8f:35:9a:08:eb:46:b5:0e:4c:93:ca:
                    fe:dc:6f:25:14:8e:55:6a:e2:d3:e2:ba:7b:57:fa:
                    48:fd:20:e7:0a:29:87:9e:b3:b7:b5:ed:d5:38:a2:
                    1e:4b:72:38:00:7d:d3:65:fc:77:35:07:b5:d3:04:
                    9c:3d:42:6b:5b:c5:66:3b:3d:3a:f1:15:60:bb:ff:
                    2e:74:80:fc:5c:82:bc:46:ed:ed:78:44:47:22:64:
                    78:1a:34:19:3d:e0:d9:73:7f:df:3d:0e:25:7a:c5:
                    1f:d8:d3:09:08:c1:17:f8:44:d6:43:b0:f3:d9:25:
                    73:82:f2:63:2b:ca:26:b9:d3:83:a1:43:b0:23:b5:
                    a4:92:92:d9:55:a1:ee:e3:66:92:55:cb:46:de:dc:
                    cd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2A:7A:E8:69:B8:65:BC:70:B0:7B:5D:41:97:15:DF:02:E9:72:DB
            X509v3 Authority Key Identifier:
                keyid:5B:26:3F:0F:25:9C:15:44:95:BF:EA:DD:E2:20:CF:73:F0:E6:D7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137372e38372e36342e302f32322d3236203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:66:16:38:41:8c:ad:c6:54:2a:9a:99:82:db:c1:e3:f9:d0:
         30:28:75:44:c9:7d:c9:ba:9d:57:28:2b:7c:f0:6d:55:e8:c3:
         0c:4a:96:11:28:87:06:58:9d:2d:6f:5d:af:e8:eb:e1:01:03:
         45:61:6d:75:7a:e0:f7:7a:a7:c7:ec:9f:45:ce:01:66:a8:94:
         07:54:78:73:8e:e6:c1:81:b3:94:80:14:9d:75:1f:4d:22:d1:
         93:0b:c4:0c:93:60:fb:bf:63:16:77:a4:45:49:59:82:ea:1f:
         c1:d7:01:ff:81:c0:db:67:8c:ab:ef:9a:0e:e3:b7:91:93:97:
         18:a6:d9:d7:f0:b9:8c:a7:3d:41:7f:e1:e0:da:d5:52:1d:0c:
         47:ff:6a:7e:bb:c5:b6:6b:6e:04:d9:87:e0:21:b9:5b:90:8f:
         98:f0:2b:42:d1:2b:29:ad:ed:19:10:c8:91:52:2c:01:08:75:
         b3:9f:55:9f:5a:3f:25:17:3d:35:15:46:ae:6a:e9:51:b8:21:
         ce:2a:05:ba:46:10:c6:8f:07:a7:0c:3a:89:3d:ec:b5:e4:8c:
         48:4e:d1:6f:56:5e:19:63:83:15:aa:8f:3e:40:6c:35:f6:8f:
         47:bb:c7:72:fa:95:35:42:b5:71:02:f1:71:e7:02:9e:b9:95:
         9f:79:02:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:17:43 2025 by rpki-client