Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BJqrt6RCHtySujTSUqinqVWGqH419kbuo3QXhddNeYs/0/3137372e33392e3131362e302f32342d3234203d3e20323632343233.roa
File:                     3137372e33392e3131362e302f32342d3234203d3e20323632343233.roa (raw, json)
Hash identifier:          jIgX5pSbza8knzuRCdHAPV1eu9NVt91HgVjEiiplcVE=
Subject key identifier:   26:18:70:DD:02:E2:E7:84:43:73:12:EA:3D:CB:FA:5D:EF:73:F6:89
Certificate issuer:       /CN=F1E672D1C3D7AF666633FFB5FCC3445E93C570E6
Certificate serial:       240C4213FF8C040A750AF5B3EDE99177FAEB39BA
Authority key identifier: F1:E6:72:D1:C3:D7:AF:66:66:33:FF:B5:FC:C3:44:5E:93:C5:70:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1E672D1C3D7AF666633FFB5FCC3445E93C570E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BJqrt6RCHtySujTSUqinqVWGqH419kbuo3QXhddNeYs/0/3137372e33392e3131362e302f32342d3234203d3e20323632343233.roa
Signing time:             Tue 10 Oct 2023 22:16:38 +0000
ROA not before:           Tue 10 Oct 2023 22:11:38 +0000
ROA not after:            Tue 08 Oct 2024 22:16:38 +0000
asID:                     262423
IP address blocks:        177.39.116.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0c:42:13:ff:8c:04:0a:75:0a:f5:b3:ed:e9:91:77:fa:eb:39:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1E672D1C3D7AF666633FFB5FCC3445E93C570E6
        Validity
            Not Before: Oct 10 22:11:38 2023 GMT
            Not After : Oct  8 22:16:38 2024 GMT
        Subject: CN=261870DD02E2E784437312EA3DCBFA5DEF73F689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:dc:6e:8d:84:a6:57:fa:ad:03:50:14:f5:72:
                    9c:06:e1:a0:14:90:3f:8b:0d:96:1d:c7:08:bc:6c:
                    1d:4b:3a:e3:12:e4:d0:75:1e:f6:12:a0:e6:99:ba:
                    01:bb:99:c2:4a:81:97:cc:f8:f2:8a:d2:df:89:3a:
                    12:ad:2b:21:e8:6d:4b:dc:52:b9:10:8a:07:79:7b:
                    fc:78:c9:d5:a6:9d:4b:00:7f:95:d2:9a:d6:fb:52:
                    a3:b8:85:4f:57:bd:f9:a8:e2:3d:60:bb:cc:29:58:
                    53:4a:d9:95:6a:35:f3:50:cb:be:a5:d5:1c:4c:97:
                    8d:84:f7:e2:8b:bd:cd:19:f8:ca:88:af:1c:61:d7:
                    3b:9d:41:a6:d9:2d:d2:8d:5c:b7:cf:7a:00:a2:7a:
                    34:5f:a0:2c:50:2a:d5:60:70:72:41:d1:5f:bc:e8:
                    4b:86:b9:20:ab:7e:9b:8f:8f:f8:e6:fc:77:3b:bf:
                    16:cb:88:99:f9:a4:7e:29:33:b4:0f:44:64:95:cb:
                    64:5b:60:b0:f2:d5:e0:f1:2f:f3:bc:e1:22:a8:2f:
                    4b:50:39:b8:ca:38:b9:f1:5e:7c:ed:25:79:ec:3a:
                    a0:c9:75:4c:57:6b:d2:93:6a:f2:be:3d:e6:79:6f:
                    c2:a4:6d:81:34:1e:69:4d:47:8e:fd:49:25:2e:dd:
                    41:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:18:70:DD:02:E2:E7:84:43:73:12:EA:3D:CB:FA:5D:EF:73:F6:89
            X509v3 Authority Key Identifier:
                keyid:F1:E6:72:D1:C3:D7:AF:66:66:33:FF:B5:FC:C3:44:5E:93:C5:70:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BJqrt6RCHtySujTSUqinqVWGqH419kbuo3QXhddNeYs/0/F1E672D1C3D7AF666633FFB5FCC3445E93C570E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1E672D1C3D7AF666633FFB5FCC3445E93C570E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BJqrt6RCHtySujTSUqinqVWGqH419kbuo3QXhddNeYs/0/3137372e33392e3131362e302f32342d3234203d3e20323632343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:14:23:45:e8:51:e4:01:7c:fa:3a:f5:c7:fd:57:bc:97:7f:
         cf:35:5c:94:4c:1f:86:48:a4:7c:47:13:65:84:ff:1d:35:b3:
         bb:14:03:12:31:17:cf:7e:c0:44:79:66:70:65:45:1b:8e:1f:
         c3:a6:a8:dc:ad:5e:25:d4:58:54:28:31:05:9a:cd:19:b9:b1:
         8d:e2:e4:5b:35:53:de:35:be:82:2f:85:88:a0:de:1a:d3:78:
         fd:af:0c:df:18:a1:0c:3c:92:16:04:10:71:34:78:8a:03:4e:
         83:58:c3:39:f5:e1:85:e0:7f:f4:44:c7:b0:e8:58:9f:e5:56:
         c8:b1:b1:f6:21:59:1a:26:3a:bb:b9:b8:18:00:2a:1d:15:4f:
         61:2d:5a:4d:20:e0:26:98:2e:2f:0d:a5:f3:43:b4:39:46:81:
         f3:b8:20:ea:90:c6:14:84:a9:f9:11:68:71:bd:a7:60:50:da:
         4f:1b:21:88:ff:90:97:84:a0:51:0d:22:8a:ab:83:b7:50:53:
         58:5f:08:e0:45:d8:c6:07:ff:24:46:99:d7:8c:3d:2a:79:20:
         67:32:ea:cb:55:2e:20:3a:f2:1e:69:a7:9c:86:c0:1a:89:8f:
         09:33:43:3a:c3:96:6f:cf:0f:82:3c:1e:9b:f4:a7:7f:3f:9e:
         5f:cf:5e:18
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJAxCE/+MBAp1CvWz7emRd/rrObowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFFNjcyRDFDM0Q3QUY2NjY2MzNGRkI1RkNDMzQ0NUU5
M0M1NzBFNjAeFw0yMzEwMTAyMjExMzhaFw0yNDEwMDgyMjE2MzhaMDMxMTAvBgNV
BAMTKDI2MTg3MEREMDJFMkU3ODQ0MzczMTJFQTNEQ0JGQTVERUY3M0Y2ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt3G6NhKZX+q0DUBT1cpwG4aAU
kD+LDZYdxwi8bB1LOuMS5NB1HvYSoOaZugG7mcJKgZfM+PKK0t+JOhKtKyHobUvc
UrkQigd5e/x4ydWmnUsAf5XSmtb7UqO4hU9Xvfmo4j1gu8wpWFNK2ZVqNfNQy76l
1RxMl42E9+KLvc0Z+MqIrxxh1zudQabZLdKNXLfPegCiejRfoCxQKtVgcHJB0V+8
6EuGuSCrfpuPj/jm/Hc7vxbLiJn5pH4pM7QPRGSVy2RbYLDy1eDxL/O84SKoL0tQ
ObjKOLnxXnztJXnsOqDJdUxXa9KTavK+PeZ5b8KkbYE0HmlNR479SSUu3UGZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJhhw3QLi54RDcxLqPcv6Xe9z9okwHwYDVR0j
BBgwFoAU8eZy0cPXr2ZmM/+1/MNEXpPFcOYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0JKcXJ0NlJDSHR5U3VqVFNVcWlucVZXR3FINDE5a2J1bzNRWGhkZE5l
WXMvMC9GMUU2NzJEMUMzRDdBRjY2NjYzM0ZGQjVGQ0MzNDQ1RTkzQzU3MEU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YxRTY3MkQxQzNEN0FGNjY2
NjMzRkZCNUZDQzM0NDVFOTNDNTcwRTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdCSnFydDZSQ0h0eVN1alRTVXFpbnFWV0dxSDQxOWtidW8zUVhoZGROZVlzLzAv
MzEzNzM3MmUzMzM5MmUzMTMxMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxJ3QwDQYJKoZIhvcNAQELBQADggEBAHMUI0Xo
UeQBfPo69cf9V7yXf881XJRMH4ZIpHxHE2WE/x01s7sUAxIxF89+wER5ZnBlRRuO
H8OmqNytXiXUWFQoMQWazRm5sY3i5Fs1U941voIvhYig3hrTeP2vDN8YoQw8khYE
EHE0eIoDToNYwzn14YXgf/REx7DoWJ/lVsixsfYhWRomOru5uBgAKh0VT2EtWk0g
4CaYLi8NpfNDtDlGgfO4IOqQxhSEqfkRaHG9p2BQ2k8bIYj/kJeEoFENIoqrg7dQ
U1hfCOBF2MYH/yRGmdeMPSp5IGcy6stVLiA68h5pp5yGwBqJjwkzQzrDlm/PD4I8
Hpv0p38/nl/PXhg=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:05 2025 by rpki-client