Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/3137372e39312e3134322e302f32342d3234203d3e20323633323935.roa
File:                     3137372e39312e3134322e302f32342d3234203d3e20323633323935.roa (raw, json)
Hash identifier:          Y5ohGlrLeZNYJAkPJKx42Um7ku95w++ukHn40xXvwDU=
Subject key identifier:   75:9F:7E:09:F0:6E:F0:9E:A1:5C:71:3B:C3:3B:DD:E1:46:7F:32:8E
Certificate issuer:       /CN=BFDBD735371A4093C08BE20ED8C03701114BA75E
Certificate serial:       56582BE543B15E7AFCAB35019E5FB1239A9D717E
Authority key identifier: BF:DB:D7:35:37:1A:40:93:C0:8B:E2:0E:D8:C0:37:01:11:4B:A7:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFDBD735371A4093C08BE20ED8C03701114BA75E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/3137372e39312e3134322e302f32342d3234203d3e20323633323935.roa
Signing time:             Fri 31 Jan 2025 18:42:14 +0000
ROA not before:           Fri 31 Jan 2025 18:37:14 +0000
ROA not after:            Fri 30 Jan 2026 18:42:14 +0000
asID:                     263295
IP address blocks:        177.91.142.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:58:2b:e5:43:b1:5e:7a:fc:ab:35:01:9e:5f:b1:23:9a:9d:71:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFDBD735371A4093C08BE20ED8C03701114BA75E
        Validity
            Not Before: Jan 31 18:37:14 2025 GMT
            Not After : Jan 30 18:42:14 2026 GMT
        Subject: CN=759F7E09F06EF09EA15C713BC33BDDE1467F328E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:4b:15:43:2d:01:a0:14:c6:b3:82:88:24:
                    dd:db:d0:b9:d7:75:fc:af:02:e9:3b:2e:48:63:5e:
                    dd:de:62:79:1a:a7:0d:c5:0d:56:68:8d:2c:98:06:
                    eb:68:8c:b8:63:15:04:30:09:1a:7d:54:27:31:eb:
                    8c:63:30:a5:b9:dd:f5:a0:d4:85:c5:d4:8d:23:09:
                    81:73:d9:4a:52:90:c4:06:48:c7:74:00:34:27:86:
                    27:3c:b1:c7:e3:97:bd:92:aa:23:88:69:c8:2e:d8:
                    c7:6d:fb:77:79:87:82:b9:1c:f3:70:e6:cb:95:8a:
                    64:e5:74:f2:a4:a1:ac:78:22:84:1a:af:35:66:ce:
                    d9:7e:0c:81:da:b0:91:c2:5f:4e:5e:2c:a4:a8:41:
                    d5:fb:3d:4f:a8:7a:be:21:34:21:f2:9e:29:4b:26:
                    39:50:9b:dc:eb:8a:85:1e:c4:2f:72:20:42:f7:f0:
                    04:5d:51:81:e3:f2:12:72:a9:22:20:58:72:4c:57:
                    0f:1b:22:f5:de:b2:44:0f:36:bf:82:0a:eb:a7:29:
                    6c:75:27:a7:4f:53:08:83:5d:95:ff:9c:bf:76:14:
                    e8:80:c3:86:fe:02:de:21:8f:22:cb:ac:16:fe:79:
                    e6:36:d0:10:b2:09:5c:a0:99:57:f4:ec:0a:e0:4b:
                    7b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9F:7E:09:F0:6E:F0:9E:A1:5C:71:3B:C3:3B:DD:E1:46:7F:32:8E
            X509v3 Authority Key Identifier:
                keyid:BF:DB:D7:35:37:1A:40:93:C0:8B:E2:0E:D8:C0:37:01:11:4B:A7:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/BFDBD735371A4093C08BE20ED8C03701114BA75E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFDBD735371A4093C08BE20ED8C03701114BA75E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/3137372e39312e3134322e302f32342d3234203d3e20323633323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:fc:c5:6e:e5:51:6f:28:44:f7:71:dd:f9:7d:5a:d8:d7:8e:
         98:74:d3:37:47:66:88:1e:2a:2b:53:59:1f:78:11:a5:92:b0:
         a7:2b:7a:4c:c3:1e:d3:39:92:53:7c:28:1c:4e:c4:d3:41:f5:
         75:9e:8b:53:20:3d:9b:bb:3e:eb:4a:d4:15:b8:5d:20:bc:71:
         fb:0f:36:9c:f8:25:cf:04:0b:24:ac:5d:e7:93:3a:bb:98:96:
         c6:ea:d0:10:89:b1:3b:5d:2f:5d:8d:74:85:29:6b:fa:74:fb:
         de:aa:d7:ed:06:a9:22:b5:f2:15:16:22:51:8c:c3:f8:20:82:
         32:60:90:9f:67:9e:f8:12:51:47:ba:4b:53:1e:1f:66:94:f6:
         82:9d:01:62:3c:01:b3:6a:8b:62:33:2a:c6:07:c8:6b:ae:e9:
         48:6e:37:41:e9:3c:9f:ca:6d:5e:fb:80:8b:c6:e4:35:f4:5b:
         32:8e:74:ea:5b:72:fe:66:2a:11:fe:18:ed:f6:06:75:2d:83:
         f7:d2:66:28:c1:b4:cf:55:d7:86:c5:b0:16:93:67:4b:19:04:
         02:30:65:e4:ec:c6:ea:96:2f:e0:36:a0:52:11:81:aa:e4:5e:
         51:1a:7f:6b:c9:32:aa:13:31:2f:00:86:f2:95:ab:af:06:2b:
         f4:9d:7c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:41 2025 by rpki-client