Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3131302e302f32332d3233203d3e20323633363134.roa
File:                     3137372e32332e3131302e302f32332d3233203d3e20323633363134.roa (raw, json)
Hash identifier:          HbDpBqDvzOIenRdnqPrZ0ALtwCUaNyOijDAKfDdgpyg=
Subject key identifier:   88:A1:C5:26:BA:9A:A1:EE:C6:93:CC:4F:BA:87:92:F9:6A:4D:10:E5
Certificate issuer:       /CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
Certificate serial:       3B553A8123F486DBAB76162685750EC7E59DFEAD
Authority key identifier: 0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3131302e302f32332d3233203d3e20323633363134.roa
Signing time:             Fri 09 Feb 2024 17:18:59 +0000
ROA not before:           Fri 09 Feb 2024 17:13:59 +0000
ROA not after:            Fri 07 Feb 2025 17:18:59 +0000
asID:                     263614
IP address blocks:        177.23.110.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:55:3a:81:23:f4:86:db:ab:76:16:26:85:75:0e:c7:e5:9d:fe:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
        Validity
            Not Before: Feb  9 17:13:59 2024 GMT
            Not After : Feb  7 17:18:59 2025 GMT
        Subject: CN=88A1C526BA9AA1EEC693CC4FBA8792F96A4D10E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cc:67:93:fd:40:bf:3b:73:da:13:47:25:fa:
                    be:04:2b:e4:14:0c:55:4c:21:21:a7:cd:d7:33:27:
                    86:f4:49:f0:09:dc:08:69:39:74:27:8e:c3:5f:4c:
                    61:40:d7:2b:f9:4f:2f:f2:02:ef:29:a9:2e:eb:28:
                    14:5d:a2:39:48:9c:f8:0b:2d:83:a2:54:7c:8f:26:
                    ab:13:ba:34:b1:27:a9:d7:24:91:d4:75:f2:09:35:
                    23:05:c0:ad:70:65:67:b0:38:84:bc:9f:44:56:12:
                    24:16:c3:ca:19:a7:3d:7f:ad:16:19:c8:f5:1e:6d:
                    4b:12:3f:32:32:e3:84:56:00:36:d8:ba:5c:57:d5:
                    9a:c8:3f:2d:27:17:13:b9:8c:0b:9a:c7:08:4c:bc:
                    1e:b3:fd:1a:fc:8f:48:a5:62:4e:be:10:f7:f7:46:
                    f2:05:9c:da:74:da:fb:c1:ba:78:55:19:92:ff:9f:
                    a8:46:aa:16:dc:97:8f:6a:ef:b3:8b:01:c4:66:37:
                    7f:e9:ab:65:f6:d5:c3:44:2a:5f:62:ea:7d:fa:dc:
                    a0:c9:a1:4e:66:09:9d:9d:3d:56:93:99:ab:60:3d:
                    15:58:9f:e9:86:6a:6a:3d:76:36:d7:fc:50:d0:0e:
                    85:8f:b4:a7:fc:57:12:0f:7e:b3:24:b0:d3:6a:87:
                    98:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A1:C5:26:BA:9A:A1:EE:C6:93:CC:4F:BA:87:92:F9:6A:4D:10:E5
            X509v3 Authority Key Identifier:
                keyid:0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3131302e302f32332d3233203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:29:5c:80:5b:75:53:22:e7:80:de:83:88:ad:9c:ff:f3:08:
         8b:48:66:33:12:fc:ba:71:70:90:db:80:b8:f0:e3:e2:7b:c1:
         76:2b:10:ae:19:46:a6:d7:13:57:ec:bb:04:b9:59:b1:f8:1d:
         c4:71:af:3d:bb:f4:71:8b:4a:68:79:d5:65:89:76:7c:ae:6b:
         46:bd:19:c7:7e:44:d9:c9:a2:64:b0:b4:6e:96:c9:6b:94:e6:
         c2:2d:74:f2:08:fc:f5:05:33:2d:44:a6:8c:1b:42:0f:60:0c:
         f5:4f:74:f3:d9:e8:5c:e7:ca:29:19:3c:36:f1:49:5b:1b:93:
         c6:cf:b7:d3:33:01:cc:43:3a:28:60:c4:39:c7:94:de:d2:fd:
         5f:77:eb:58:2f:f6:67:1c:41:76:ac:8c:a2:60:a5:9f:36:c3:
         62:fe:7f:ae:7b:d1:df:2b:a4:df:5b:e6:e5:ca:c5:e2:43:68:
         53:3f:87:bc:54:05:bf:28:ce:57:09:a1:bf:57:bb:e6:43:fa:
         f8:e4:d9:77:22:f9:48:38:e4:c3:03:b2:ca:a8:4d:50:4b:48:
         0b:77:ea:79:98:cf:b7:0d:cb:69:c4:65:26:28:e7:80:9b:f9:
         65:f3:c6:4e:dd:b5:9c:35:10:1c:ae:a6:f4:0c:d6:5c:ff:8e:
         8e:2e:02:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:36 2025 by rpki-client