Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e31362e302f32322d3232203d3e20323632363230.roa
File:                     3137372e38362e31362e302f32322d3232203d3e20323632363230.roa (raw, json)
Hash identifier:          YF1WKyCmnlEpYtOGkoTdzIssWG78yxdP/H4mr5/1MlM=
Subject key identifier:   22:6A:49:E0:2A:65:8C:3C:9E:77:CE:F5:C2:A3:39:63:9B:21:D0:67
Certificate issuer:       /CN=D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1
Certificate serial:       54362DB1DC85587BE584C5957AE91BB70CC093DB
Authority key identifier: D5:D1:3C:A4:5D:DA:9F:FF:B2:CC:93:AF:53:52:30:F2:3F:BE:01:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e31362e302f32322d3232203d3e20323632363230.roa
Signing time:             Thu 05 Sep 2024 11:38:43 +0000
ROA not before:           Thu 05 Sep 2024 11:33:43 +0000
ROA not after:            Thu 04 Sep 2025 11:38:43 +0000
asID:                     262620
IP address blocks:        177.86.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:36:2d:b1:dc:85:58:7b:e5:84:c5:95:7a:e9:1b:b7:0c:c0:93:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1
        Validity
            Not Before: Sep  5 11:33:43 2024 GMT
            Not After : Sep  4 11:38:43 2025 GMT
        Subject: CN=226A49E02A658C3C9E77CEF5C2A339639B21D067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:6e:d6:2b:4b:d7:d5:ab:1a:52:8e:25:5f:
                    20:d6:3d:bb:03:ae:a3:06:27:cd:8d:39:1f:03:f5:
                    22:24:c6:39:1e:56:a3:fb:df:b3:d8:6e:61:06:00:
                    38:94:88:8d:5e:ff:b4:97:d2:89:4a:b8:6d:96:48:
                    a6:b6:f3:b5:bf:ed:7f:17:13:0e:77:25:8d:4a:d8:
                    61:a6:d1:f7:03:2b:b0:63:4b:1a:51:0d:bc:3f:54:
                    46:6d:21:f5:ca:25:7d:a4:29:03:15:89:72:9a:eb:
                    49:be:0c:56:fe:e0:ed:4b:af:7b:54:95:db:80:58:
                    6e:53:ae:40:50:b9:77:41:08:24:26:9d:64:89:bf:
                    05:83:45:a2:2d:e7:c5:a6:da:ca:f4:62:a7:67:21:
                    81:fa:c3:bb:39:f2:b7:75:4a:75:d6:27:0a:eb:5e:
                    f5:62:fb:9b:01:55:c0:35:b9:9e:5c:20:c9:48:0b:
                    b4:94:20:8c:f7:6a:a9:0e:90:32:16:a1:87:64:36:
                    7e:5a:02:81:7e:64:b0:d4:27:35:60:d3:2d:1e:6c:
                    4b:7e:a0:c1:54:b8:13:72:7a:db:2b:33:cc:06:b8:
                    70:1c:5d:e4:5c:82:a8:07:54:b6:14:d5:e6:c4:ad:
                    e1:68:e7:c8:85:14:30:f0:4b:d1:17:fb:8a:ad:02:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6A:49:E0:2A:65:8C:3C:9E:77:CE:F5:C2:A3:39:63:9B:21:D0:67
            X509v3 Authority Key Identifier:
                keyid:D5:D1:3C:A4:5D:DA:9F:FF:B2:CC:93:AF:53:52:30:F2:3F:BE:01:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e31362e302f32322d3232203d3e20323632363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:99:79:53:08:1a:73:92:db:1d:7e:86:64:f8:04:30:9e:8a:
         b2:7f:63:68:af:0b:db:1b:a0:16:08:3d:98:3d:98:2f:37:26:
         06:4a:e8:f1:88:85:aa:b2:1b:87:33:87:57:79:40:c2:3e:88:
         b8:bc:fc:9f:2c:12:d3:06:72:72:75:cb:87:6c:e7:43:c9:e8:
         cd:5f:97:7c:66:04:b5:76:6d:00:69:f2:4d:28:fe:49:c3:51:
         dd:5e:dc:a1:60:95:91:c5:ae:7d:ab:d4:a6:46:a1:35:8e:d2:
         96:c5:bf:bd:96:a6:48:26:22:67:89:bb:e5:f3:4b:a3:1f:5e:
         c4:2a:1d:0f:85:3f:45:d0:80:ee:cb:fd:a7:b5:2d:8f:bc:da:
         1a:25:02:65:ee:f8:6f:f6:f2:c0:e6:5c:6e:9d:9d:4c:99:2b:
         09:9c:c1:3b:6a:88:59:11:a0:e3:fc:76:a2:d4:38:c3:e7:ad:
         40:88:03:9a:76:c0:af:7e:05:2f:dd:f6:c3:70:9f:e4:d8:22:
         fe:fe:b0:b9:8f:08:36:fd:94:b0:c6:82:13:9d:56:c1:61:98:
         5a:08:d9:bc:25:e9:be:f0:97:56:e0:76:c6:be:46:8b:ca:68:
         ad:e5:ce:3e:49:6d:33:24:f8:2d:fa:91:2e:56:3a:a5:06:84:
         3c:b2:2f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:30:00 2025 by rpki-client