Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134302e302f32322d3332203d3e20323633313331.roa
File:                     3137372e3132382e3134302e302f32322d3332203d3e20323633313331.roa (raw, json)
Hash identifier:          ZoxWvcWhvPMfZzZ9KKwP+KK8rYjaVBIXZPTbFMpZBlc=
Subject key identifier:   14:D7:FE:2F:23:BA:28:78:2D:E5:6C:6C:94:F5:B0:19:E8:4E:3B:EA
Certificate issuer:       /CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
Certificate serial:       67AAD2E012D3401CC8C54735E6772D7B2D4F86DA
Authority key identifier: C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134302e302f32322d3332203d3e20323633313331.roa
Signing time:             Tue 25 Jul 2023 20:08:08 +0000
ROA not before:           Tue 25 Jul 2023 20:03:08 +0000
ROA not after:            Tue 23 Jul 2024 20:08:08 +0000
asID:                     263131
IP address blocks:        177.128.140.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:aa:d2:e0:12:d3:40:1c:c8:c5:47:35:e6:77:2d:7b:2d:4f:86:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
        Validity
            Not Before: Jul 25 20:03:08 2023 GMT
            Not After : Jul 23 20:08:08 2024 GMT
        Subject: CN=14D7FE2F23BA28782DE56C6C94F5B019E84E3BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1d:bc:ff:0f:04:29:9c:ed:02:cb:dd:53:51:
                    89:87:66:52:a8:64:f2:af:af:31:8c:6d:26:dc:12:
                    78:51:62:8d:fb:45:ae:cd:88:da:c4:a0:84:6d:a5:
                    c4:3e:b8:be:33:35:71:3c:73:9a:43:1d:7d:ad:8d:
                    01:6c:80:4d:96:5e:bb:7d:65:a0:7c:bc:c4:ce:eb:
                    3e:0b:62:4f:2b:94:34:84:2b:4a:53:16:fa:d7:a8:
                    d5:53:5b:ed:d7:07:30:1e:01:45:37:cf:c0:8b:9f:
                    cf:88:8a:22:81:45:32:05:52:08:8c:62:9f:06:7e:
                    64:36:d6:7b:46:58:82:ae:0b:a9:1d:76:d3:bc:6f:
                    d4:ef:dc:25:8e:30:1e:12:3c:37:f9:8f:4f:8f:65:
                    e4:d4:7c:82:d9:ad:1f:be:26:32:bb:57:78:19:88:
                    35:40:cd:af:b5:e4:24:6f:ab:3a:93:e8:eb:02:94:
                    cc:a6:56:2d:e5:8a:52:41:2d:d0:b1:55:19:e2:d2:
                    eb:98:28:48:ee:e7:de:d0:cf:ad:33:4f:44:3f:88:
                    69:be:c0:71:3a:23:e5:0b:65:cd:b8:e1:04:e9:74:
                    05:16:ff:4e:7c:a6:75:18:4e:6e:6a:e8:8d:ff:98:
                    fa:00:ba:a7:12:d7:6d:e3:fd:49:bc:78:6f:a2:6f:
                    e6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D7:FE:2F:23:BA:28:78:2D:E5:6C:6C:94:F5:B0:19:E8:4E:3B:EA
            X509v3 Authority Key Identifier:
                keyid:C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/3137372e3132382e3134302e302f32322d3332203d3e20323633313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:30:a6:23:9f:ca:b8:12:71:06:ee:14:46:2c:7b:a2:64:33:
         b9:85:9d:40:f3:3a:32:5e:12:8f:14:d0:b9:34:cd:76:ef:a6:
         ed:a3:f1:dd:39:dd:d3:f2:7f:62:48:d7:44:2b:a3:aa:c8:73:
         21:7e:9e:19:75:73:37:3a:55:05:9b:52:9b:bc:47:92:6a:61:
         5e:5e:d0:2e:05:ed:60:c7:fe:68:7b:d4:02:e7:71:38:8b:14:
         1d:5f:56:e1:5e:c8:f4:93:ef:56:f3:66:0f:b2:a4:67:02:de:
         68:45:cc:8b:01:62:b3:a8:0c:41:15:56:38:d1:a3:85:3a:f0:
         e5:09:df:c8:1c:ef:55:00:c9:87:d6:44:b6:4e:bf:99:24:55:
         00:62:ff:fe:31:c9:e7:67:1c:d0:53:19:8e:4c:d5:05:05:f8:
         39:d4:b6:f5:3d:e6:99:15:e7:2e:a6:b0:c2:23:25:e1:5c:b9:
         32:07:17:9c:28:99:4e:df:cd:8a:3e:a6:9a:49:70:f5:f5:81:
         97:d2:8d:ea:b0:c6:a1:62:dc:c2:bb:2e:a5:f6:ee:1b:b0:9f:
         b7:22:b9:fb:ae:36:c9:76:37:14:59:f1:5b:3a:bc:53:fb:a5:
         ff:57:b1:2c:82:81:9e:ba:c9:49:1a:fd:51:33:1d:d7:fb:c2:
         0f:9e:cc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:47 2025 by rpki-client