Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e39312e3133362e302f32322d3232203d3e20323632393038.roa
File:                     3137372e39312e3133362e302f32322d3232203d3e20323632393038.roa (raw, json)
Hash identifier:          gJA3ZR0CSN3tAByMIksJA6p2ENEo23VXuzkb9dA/0P8=
Subject key identifier:   C7:16:18:0A:C5:6A:08:77:E0:42:E0:F8:34:0D:F3:7B:AC:50:22:25
Certificate issuer:       /CN=380AE62845C4468F9462327C41A0D22DA68054FD
Certificate serial:       41FE22B88AD595AA2E914F33C04F9208E9D14C43
Authority key identifier: 38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e39312e3133362e302f32322d3232203d3e20323632393038.roa
Signing time:             Mon 22 Jan 2024 19:49:31 +0000
ROA not before:           Mon 22 Jan 2024 19:44:31 +0000
ROA not after:            Mon 20 Jan 2025 19:49:31 +0000
asID:                     262908
IP address blocks:        177.91.136.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fe:22:b8:8a:d5:95:aa:2e:91:4f:33:c0:4f:92:08:e9:d1:4c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380AE62845C4468F9462327C41A0D22DA68054FD
        Validity
            Not Before: Jan 22 19:44:31 2024 GMT
            Not After : Jan 20 19:49:31 2025 GMT
        Subject: CN=C716180AC56A0877E042E0F8340DF37BAC502225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:6d:5c:43:79:16:72:08:d3:2b:e2:8c:14:
                    8e:8c:09:58:52:85:d9:54:51:7f:4b:c6:0d:8d:a6:
                    52:ee:55:28:4d:19:4a:f7:bc:52:24:88:d8:48:6a:
                    0a:a8:de:c1:18:95:f4:ed:18:a1:b0:b3:2e:69:e1:
                    07:5b:04:73:c0:16:33:2b:a3:9c:c9:67:bf:c9:34:
                    9d:1e:25:4a:2d:ff:a4:f7:60:f0:9d:86:a9:62:c8:
                    1b:f9:ac:c0:f8:ab:97:bd:a1:5a:94:f0:4d:07:84:
                    59:55:38:d3:d2:f3:73:6e:25:b6:db:77:02:4b:06:
                    d9:03:9a:c8:e5:3d:98:49:ec:98:9f:5e:5e:1c:84:
                    4c:27:9c:c8:ef:4c:5b:a0:f6:56:97:a6:b6:70:03:
                    2f:3c:7e:bc:12:df:77:5a:49:8a:48:ac:5e:1d:65:
                    ae:11:da:3c:52:b7:6a:ee:0e:f0:73:a2:a7:54:1a:
                    10:55:38:cc:c5:35:4f:b0:25:28:aa:43:d6:f5:b1:
                    b8:90:96:b4:ef:8c:4d:00:60:b6:ce:df:f6:cd:0e:
                    63:1c:1e:08:2b:6a:0a:75:7d:1f:6e:4e:ed:f8:36:
                    3f:ea:03:04:6e:0f:65:ef:12:1c:a0:8d:89:74:cb:
                    d6:8e:cc:77:f0:49:2f:06:c9:d5:f0:e5:b4:cb:4c:
                    3b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:16:18:0A:C5:6A:08:77:E0:42:E0:F8:34:0D:F3:7B:AC:50:22:25
            X509v3 Authority Key Identifier:
                keyid:38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/380AE62845C4468F9462327C41A0D22DA68054FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e39312e3133362e302f32322d3232203d3e20323632393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:1a:6e:df:b3:63:3e:bc:8a:72:d1:33:85:82:79:2f:5d:fb:
         15:82:d5:3b:27:ee:82:d8:d9:e8:cc:e8:76:c7:68:04:c5:1d:
         8f:e1:fc:42:2a:65:db:8c:7d:66:04:9d:9c:80:7e:e3:f6:0e:
         48:d4:99:c5:10:27:38:b2:1c:4e:88:f9:85:98:34:25:d8:f6:
         6f:1f:dd:01:16:bf:ed:ba:95:4a:dc:fd:28:c9:92:0e:7a:f3:
         4c:ac:e1:12:0f:66:6f:23:2d:f4:45:6a:79:41:39:81:7b:2b:
         e2:9c:94:b9:a2:13:51:d5:90:2a:65:4e:f9:c5:c6:f1:b8:84:
         0c:68:27:c8:69:24:7d:fc:97:40:f9:0c:8b:a8:21:16:d8:67:
         65:7e:56:b4:a5:7c:b6:59:0f:70:ac:bb:30:21:93:83:13:aa:
         3a:44:d1:12:c0:85:72:3f:8c:af:71:b3:5f:16:6f:b1:65:b1:
         c6:26:12:45:cf:ce:5f:5f:15:12:8c:2f:5c:a3:13:7e:b5:01:
         22:69:6e:a1:44:af:62:d7:ab:15:b5:b2:8f:c9:55:fc:00:b7:
         26:6d:be:00:e5:ac:e4:72:9a:3d:dc:71:68:c8:9e:fa:a0:c5:
         d7:9f:72:5e:19:fa:14:71:eb:ab:2b:18:17:5a:64:8f:95:fb:
         6e:a1:74:ec
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQf4iuIrVlaoukU8zwE+SCOnRTEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgwQUU2Mjg0NUM0NDY4Rjk0NjIzMjdDNDFBMEQyMkRB
NjgwNTRGRDAeFw0yNDAxMjIxOTQ0MzFaFw0yNTAxMjAxOTQ5MzFaMDMxMTAvBgNV
BAMTKEM3MTYxODBBQzU2QTA4NzdFMDQyRTBGODM0MERGMzdCQUM1MDIyMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTn21cQ3kWcgjTK+KMFI6MCVhS
hdlUUX9Lxg2NplLuVShNGUr3vFIkiNhIagqo3sEYlfTtGKGwsy5p4QdbBHPAFjMr
o5zJZ7/JNJ0eJUot/6T3YPCdhqliyBv5rMD4q5e9oVqU8E0HhFlVONPS83NuJbbb
dwJLBtkDmsjlPZhJ7JifXl4chEwnnMjvTFug9laXprZwAy88frwS33daSYpIrF4d
Za4R2jxSt2ruDvBzoqdUGhBVOMzFNU+wJSiqQ9b1sbiQlrTvjE0AYLbO3/bNDmMc
Hggragp1fR9uTu34Nj/qAwRuD2XvEhygjYl0y9aOzHfwSS8GydXw5bTLTDsLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxxYYCsVqCHfgQuD4NA3ze6xQIiUwHwYDVR0j
BBgwFoAUOArmKEXERo+UYjJ8QaDSLaaAVP0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXBoN3pEWVpHOG5yQXJmS1Jjb25ZcWlMSzRxU1M5dlEzOWZWMm82UlBr
UWUvMC8zODBBRTYyODQ1QzQ0NjhGOTQ2MjMyN0M0MUEwRDIyREE2ODA1NEZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM4MEFFNjI4NDVDNDQ2OEY5
NDYyMzI3QzQxQTBEMjJEQTY4MDU0RkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlwaDd6RFlaRzhuckFyZktSY29uWXFpTEs0cVNTOXZRMzlmVjJvNlJQa1FlLzAv
MzEzNzM3MmUzOTMxMmUzMTMzMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzOTMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxW4gwDQYJKoZIhvcNAQELBQADggEBAHkabt+z
Yz68inLRM4WCeS9d+xWC1Tsn7oLY2ejM6HbHaATFHY/h/EIqZduMfWYEnZyAfuP2
DkjUmcUQJziyHE6I+YWYNCXY9m8f3QEWv+26lUrc/SjJkg5680ys4RIPZm8jLfRF
anlBOYF7K+KclLmiE1HVkCplTvnFxvG4hAxoJ8hpJH38l0D5DIuoIRbYZ2V+VrSl
fLZZD3CsuzAhk4MTqjpE0RLAhXI/jK9xs18Wb7FlscYmEkXPzl9fFRKML1yjE361
ASJpbqFEr2LXqxW1so/JVfwAtyZtvgDlrORymj3ccWjInvqgxdefcl4Z+hRx66sr
GBdaZI+V+26hdOw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:36:19 2025 by rpki-client