Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e31372e302f32342d3234203d3e20323632363230.roa
File:                     3137372e38362e31372e302f32342d3234203d3e20323632363230.roa (raw, json)
Hash identifier:          wTJdwGMfKTkiHDRcvT+l6v3vKBCNOpTQIguMh6cuAvQ=
Subject key identifier:   F4:D0:9A:DF:D3:7B:24:17:03:B7:E2:6C:AE:D0:71:69:E9:62:FB:7D
Certificate issuer:       /CN=ACDBB0C3551B78F07CA1DEF548CADA00A4B07B49
Certificate serial:       33B041B94E0F1065D5B7CE9EF596CF26AC2B8F80
Authority key identifier: AC:DB:B0:C3:55:1B:78:F0:7C:A1:DE:F5:48:CA:DA:00:A4:B0:7B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACDBB0C3551B78F07CA1DEF548CADA00A4B07B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e31372e302f32342d3234203d3e20323632363230.roa
Signing time:             Mon 04 Dec 2023 12:45:02 +0000
ROA not before:           Mon 04 Dec 2023 12:40:02 +0000
ROA not after:            Mon 02 Dec 2024 12:45:02 +0000
asID:                     262620
IP address blocks:        177.86.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b0:41:b9:4e:0f:10:65:d5:b7:ce:9e:f5:96:cf:26:ac:2b:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACDBB0C3551B78F07CA1DEF548CADA00A4B07B49
        Validity
            Not Before: Dec  4 12:40:02 2023 GMT
            Not After : Dec  2 12:45:02 2024 GMT
        Subject: CN=F4D09ADFD37B241703B7E26CAED07169E962FB7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:83:f7:1e:51:9d:41:73:20:75:a8:7c:24:
                    42:fd:cd:be:ce:1d:f9:4a:59:0c:95:d0:7c:f4:53:
                    85:eb:01:d7:ae:ac:55:6c:a5:37:4e:a5:9f:2a:9f:
                    10:4b:1c:ee:07:cc:f9:f6:e5:f6:84:09:4f:cf:31:
                    4d:e4:67:d3:2d:46:75:58:59:e5:3d:c1:f2:30:09:
                    09:f1:cc:b3:74:ee:3e:f8:d4:54:0a:15:b6:e1:fd:
                    a3:64:84:f2:38:03:e0:c7:ae:d1:44:88:a9:f3:0d:
                    e1:57:2a:59:3e:eb:11:22:e9:33:0c:5c:a8:af:4f:
                    e6:2e:79:be:0b:97:01:9a:66:12:ac:b0:f0:77:e8:
                    f3:90:41:8e:54:ba:cd:a6:0e:02:64:09:d2:86:f0:
                    9c:36:df:f5:0e:81:ec:69:3a:8d:d8:a0:0f:0f:db:
                    14:48:65:a5:e8:b8:83:d3:d8:8c:32:a5:32:49:ad:
                    32:23:7c:5e:a2:03:05:b7:a1:a4:99:9e:bd:f6:9b:
                    e4:09:5b:49:a6:99:77:6f:fb:83:7a:b4:05:01:a2:
                    20:dc:30:db:fe:9a:8e:a7:19:03:e6:cd:da:59:64:
                    3d:76:16:91:cc:b4:f7:68:f3:89:e2:e1:23:fc:10:
                    0c:11:fd:45:b3:11:ae:64:de:84:ed:ae:20:cf:d9:
                    82:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D0:9A:DF:D3:7B:24:17:03:B7:E2:6C:AE:D0:71:69:E9:62:FB:7D
            X509v3 Authority Key Identifier:
                keyid:AC:DB:B0:C3:55:1B:78:F0:7C:A1:DE:F5:48:CA:DA:00:A4:B0:7B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/ACDBB0C3551B78F07CA1DEF548CADA00A4B07B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACDBB0C3551B78F07CA1DEF548CADA00A4B07B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e31372e302f32342d3234203d3e20323632363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:03:00:d6:9b:04:aa:88:fc:09:2a:7c:d1:de:5d:5e:0f:af:
         90:c1:00:b8:58:8b:3d:c6:1f:ae:39:c0:6b:0f:a1:4f:a8:03:
         73:c5:02:d3:66:a1:a0:a4:15:d8:72:0c:6a:ec:8e:2c:66:36:
         ca:40:ed:17:80:fb:0e:7e:da:22:83:77:08:1a:f9:2b:f7:d7:
         99:8c:a8:83:dc:f6:61:83:ce:bf:a3:f3:93:69:86:08:fa:be:
         eb:e4:aa:4b:ad:17:72:a7:80:54:18:0c:fd:fe:99:5b:ff:8e:
         35:f5:5c:e4:f7:60:65:55:e9:2c:eb:0d:9f:ca:64:5b:ab:46:
         6f:53:b9:7f:57:5d:94:e4:20:73:4d:b4:d3:1b:d9:bd:90:52:
         4b:c0:16:9d:2b:70:45:ff:9b:2b:3e:12:e3:5b:0e:27:7d:fe:
         e0:56:a7:ed:e6:cc:f9:6e:2b:38:39:f1:60:94:d2:d7:d8:bc:
         1e:ea:ec:ff:bd:29:5f:bf:1f:53:97:a8:7b:05:59:4a:16:4c:
         a9:57:ab:d5:b6:7d:38:4d:bf:64:37:f2:16:b0:eb:9f:96:15:
         05:e5:c9:64:1c:3f:a8:3f:75:ad:f9:9b:3f:00:8c:60:d5:6a:
         f2:bf:70:4d:e6:15:40:4c:29:0c:47:a5:1a:a5:cb:ef:d6:00:
         a1:68:3b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:43 2025 by rpki-client