Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/3137372e39312e3134312e302f32342d3234203d3e20323633323935.roa
File:                     3137372e39312e3134312e302f32342d3234203d3e20323633323935.roa (raw, json)
Hash identifier:          SV4Ikc+BF008nXvQNGgwZ+NQxBdRuoz/+tubA3Jd1sw=
Subject key identifier:   5B:EC:A1:7E:98:CF:DA:C9:F4:43:9E:12:DA:B8:89:B8:9B:FA:62:5A
Certificate issuer:       /CN=BFDBD735371A4093C08BE20ED8C03701114BA75E
Certificate serial:       4E89C4C090BA82B522ED52821F5461EC87B59A92
Authority key identifier: BF:DB:D7:35:37:1A:40:93:C0:8B:E2:0E:D8:C0:37:01:11:4B:A7:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFDBD735371A4093C08BE20ED8C03701114BA75E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/3137372e39312e3134312e302f32342d3234203d3e20323633323935.roa
Signing time:             Fri 31 Jan 2025 18:42:06 +0000
ROA not before:           Fri 31 Jan 2025 18:37:06 +0000
ROA not after:            Fri 30 Jan 2026 18:42:06 +0000
asID:                     263295
IP address blocks:        177.91.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:89:c4:c0:90:ba:82:b5:22:ed:52:82:1f:54:61:ec:87:b5:9a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFDBD735371A4093C08BE20ED8C03701114BA75E
        Validity
            Not Before: Jan 31 18:37:06 2025 GMT
            Not After : Jan 30 18:42:06 2026 GMT
        Subject: CN=5BECA17E98CFDAC9F4439E12DAB889B89BFA625A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9d:d3:f8:e4:2a:30:74:4d:be:bf:75:ae:86:
                    88:6d:00:09:86:1f:3e:9b:65:55:41:7f:55:2c:09:
                    bc:49:ff:d2:ee:b2:a7:60:33:ea:d0:0d:20:4c:94:
                    0a:15:cc:94:e8:07:6f:b1:33:a6:14:e6:19:8d:a0:
                    d2:04:86:15:72:59:ec:8b:ae:ab:4c:4a:31:ce:b7:
                    9c:39:9a:84:bc:bf:c2:28:a8:91:77:9f:98:bd:7c:
                    34:5c:ec:59:51:03:69:6e:ea:67:66:4a:d4:2e:4e:
                    db:0c:a2:64:d5:9a:a1:ce:3a:c9:3e:78:95:98:a6:
                    e1:f9:f9:fc:7e:58:e4:f4:a8:8f:35:1a:3f:4f:38:
                    2e:d8:be:9d:a7:05:ae:21:70:97:4a:2b:68:4b:15:
                    65:70:0a:e8:55:29:c4:7b:e8:b4:09:7c:59:e3:85:
                    3b:43:b3:03:3f:ba:12:01:54:f4:0c:01:8a:e6:15:
                    25:d8:89:8a:c6:0d:42:0c:1e:93:b7:8e:6c:6d:5d:
                    19:9a:24:e6:24:87:6c:81:a5:43:31:87:21:a7:d6:
                    73:fb:56:1a:20:83:b3:c1:81:62:5a:00:2a:8a:91:
                    3a:25:00:0c:72:0b:fc:03:20:41:99:b5:b0:2e:8b:
                    f6:23:e4:61:87:c4:5b:c3:90:23:6e:21:96:75:f4:
                    92:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EC:A1:7E:98:CF:DA:C9:F4:43:9E:12:DA:B8:89:B8:9B:FA:62:5A
            X509v3 Authority Key Identifier:
                keyid:BF:DB:D7:35:37:1A:40:93:C0:8B:E2:0E:D8:C0:37:01:11:4B:A7:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/BFDBD735371A4093C08BE20ED8C03701114BA75E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFDBD735371A4093C08BE20ED8C03701114BA75E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/3137372e39312e3134312e302f32342d3234203d3e20323633323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:e5:29:77:ac:86:60:ca:d8:34:52:1b:03:36:ae:61:1c:f5:
         4f:ad:ba:a6:8d:cf:d6:0a:19:b9:4d:14:bd:4a:d0:9d:29:21:
         57:82:90:6d:4a:e2:d6:c9:d1:cd:6a:be:36:f8:aa:21:11:67:
         8c:e0:ba:fb:71:5b:15:c2:d3:4b:ac:74:93:6f:a2:ae:8e:31:
         ed:78:f0:68:47:76:c1:26:ee:5e:07:80:b7:7b:47:93:2c:d3:
         25:7d:6a:e5:17:76:c2:18:09:04:7b:41:d9:10:ef:a1:40:ee:
         82:7c:58:3d:df:ce:a0:a2:5f:10:8c:92:ec:90:ea:72:e7:e9:
         10:7f:2f:e3:96:51:ea:67:08:88:97:ff:89:83:31:15:4f:ac:
         0f:96:0e:4d:ba:35:f5:60:9c:f7:f5:6f:ba:da:fe:5e:7f:f3:
         72:31:4a:be:1a:77:ca:f8:a5:af:dc:c6:f0:b4:f3:89:d3:d4:
         7e:90:70:1e:f2:af:87:50:d6:d1:b8:53:b4:6b:cc:1e:f5:44:
         8f:bc:60:08:69:01:72:a0:09:8d:af:95:84:77:e6:de:2d:97:
         2e:6f:fd:06:a9:0c:e8:4b:08:79:0b:f8:1d:1e:26:9b:04:3a:
         e8:5a:ba:50:c2:51:ae:8a:a1:6e:d2:fb:29:08:71:5d:27:ee:
         31:d7:33:77
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTonEwJC6grUi7VKCH1Rh7Ie1mpIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZEQkQ3MzUzNzFBNDA5M0MwOEJFMjBFRDhDMDM3MDEx
MTRCQTc1RTAeFw0yNTAxMzExODM3MDZaFw0yNjAxMzAxODQyMDZaMDMxMTAvBgNV
BAMTKDVCRUNBMTdFOThDRkRBQzlGNDQzOUUxMkRBQjg4OUI4OUJGQTYyNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ndP45CowdE2+v3WuhohtAAmG
Hz6bZVVBf1UsCbxJ/9LusqdgM+rQDSBMlAoVzJToB2+xM6YU5hmNoNIEhhVyWeyL
rqtMSjHOt5w5moS8v8IoqJF3n5i9fDRc7FlRA2lu6mdmStQuTtsMomTVmqHOOsk+
eJWYpuH5+fx+WOT0qI81Gj9POC7Yvp2nBa4hcJdKK2hLFWVwCuhVKcR76LQJfFnj
hTtDswM/uhIBVPQMAYrmFSXYiYrGDUIMHpO3jmxtXRmaJOYkh2yBpUMxhyGn1nP7
Vhogg7PBgWJaACqKkTolAAxyC/wDIEGZtbAui/Yj5GGHxFvDkCNuIZZ19JI5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUW+yhfpjP2sn0Q54S2riJuJv6YlowHwYDVR0j
BBgwFoAUv9vXNTcaQJPAi+IO2MA3ARFLp14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEIzNEZiekRjRkpXemVaOUVDWDlRSHhmNzdtTDlITU1tZDliQXBodlV0
ZE4vMC9CRkRCRDczNTM3MUE0MDkzQzA4QkUyMEVEOEMwMzcwMTExNEJBNzVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGREJENzM1MzcxQTQwOTND
MDhCRTIwRUQ4QzAzNzAxMTE0QkE3NUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCMzRGYnpEY0ZKV3plWjlFQ1g5UUh4Zjc3bUw5SE1NbWQ5YkFwaHZVdGROLzAv
MzEzNzM3MmUzOTMxMmUzMTM0MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMjM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxW40wDQYJKoZIhvcNAQELBQADggEBADDlKXes
hmDK2DRSGwM2rmEc9U+tuqaNz9YKGblNFL1K0J0pIVeCkG1K4tbJ0c1qvjb4qiER
Z4zguvtxWxXC00usdJNvoq6OMe148GhHdsEm7l4HgLd7R5Ms0yV9auUXdsIYCQR7
QdkQ76FA7oJ8WD3fzqCiXxCMkuyQ6nLn6RB/L+OWUepnCIiX/4mDMRVPrA+WDk26
NfVgnPf1b7ra/l5/83IxSr4ad8r4pa/cxvC084nT1H6QcB7yr4dQ1tG4U7RrzB71
RI+8YAhpAXKgCY2vlYR35t4tly5v/QapDOhLCHkL+B0eJpsEOuhaulDCUa6KoW7S
+ykIcV0n7jHXM3c=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:54 2025 by rpki-client