Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/3230312e37372e382e302f32322d3234203d3e20323634303936.roa
File:                     3230312e37372e382e302f32322d3234203d3e20323634303936.roa (raw, json)
Hash identifier:          gz4KBQGqQNQ3ysFd+8DJW5wU25xgngaNv5rz0ra+XrA=
Subject key identifier:   F1:4F:D7:78:77:77:58:E5:CE:C7:6B:C4:98:CD:80:DA:F9:39:8B:7D
Certificate issuer:       /CN=BD9063ADADF748EEA58A242F1668AF322657ABD1
Certificate serial:       0D5FC1D32EF67C0F6361E4C445AFBFA0CEE7FB70
Authority key identifier: BD:90:63:AD:AD:F7:48:EE:A5:8A:24:2F:16:68:AF:32:26:57:AB:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/3230312e37372e382e302f32322d3234203d3e20323634303936.roa
Signing time:             Fri 28 Jul 2023 20:00:00 +0000
ROA not before:           Fri 28 Jul 2023 19:55:00 +0000
ROA not after:            Fri 26 Jul 2024 20:00:00 +0000
asID:                     264096
IP address blocks:        201.77.8.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5f:c1:d3:2e:f6:7c:0f:63:61:e4:c4:45:af:bf:a0:ce:e7:fb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9063ADADF748EEA58A242F1668AF322657ABD1
        Validity
            Not Before: Jul 28 19:55:00 2023 GMT
            Not After : Jul 26 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:91:1c:18:8b:7c:8e:84:73:5b:b7:97:64:
                    47:eb:97:ea:8e:9b:85:54:6f:69:ab:3c:f8:e9:10:
                    48:d4:f8:b9:22:62:f8:e3:a4:b2:5e:f0:bc:ee:ce:
                    5b:28:dc:5d:35:de:42:bf:fc:bc:45:98:a5:98:9d:
                    0d:82:52:40:a9:85:b5:28:40:b8:68:90:83:71:fb:
                    be:d8:a9:5a:06:95:06:eb:88:f1:3b:bd:87:c4:2a:
                    af:9e:31:4e:3c:5c:92:28:18:fd:05:82:a7:31:a2:
                    8f:4b:c1:4c:ba:06:df:58:4d:66:52:1e:62:1b:ca:
                    c7:a1:d2:11:a3:7e:41:d1:77:ae:16:ed:8f:71:be:
                    31:33:cb:de:35:90:0f:ec:59:e0:59:a8:dc:b1:81:
                    6d:6c:31:b1:71:b9:de:93:ef:36:ac:91:8e:40:b0:
                    76:b1:15:76:4f:9a:ed:a2:2e:aa:4e:1b:ed:83:7f:
                    94:c5:33:a4:0a:65:d9:5b:73:c3:e6:79:1c:86:92:
                    dc:11:9a:65:c7:54:c5:29:88:7d:8a:43:32:ae:40:
                    91:15:48:42:1f:e2:b4:a8:5c:af:02:8c:55:91:11:
                    bf:02:b1:48:42:e0:20:5f:fe:4f:1c:25:55:b1:4b:
                    5e:7b:15:b5:9e:5e:25:6f:a8:3b:69:3f:8f:09:45:
                    2a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4F:D7:78:77:77:58:E5:CE:C7:6B:C4:98:CD:80:DA:F9:39:8B:7D
            X509v3 Authority Key Identifier:
                keyid:BD:90:63:AD:AD:F7:48:EE:A5:8A:24:2F:16:68:AF:32:26:57:AB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BD9063ADADF748EEA58A242F1668AF322657ABD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/3230312e37372e382e302f32322d3234203d3e20323634303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:61:92:b9:65:ba:a0:d6:12:9b:96:46:00:8a:4e:bd:09:7f:
         3a:60:8e:27:09:40:fa:03:f6:e2:b5:8d:91:1b:2b:e3:ca:6d:
         2d:e9:85:50:8a:2f:a6:c5:90:24:fa:bf:66:b4:c2:32:61:96:
         9c:e2:ca:92:b0:6d:a9:fc:7f:ca:f3:35:f3:4c:84:42:63:fd:
         ab:5a:78:84:97:bd:6d:31:54:be:a1:b2:d4:26:1f:80:57:21:
         48:35:ba:85:f8:ad:cb:be:67:c2:02:78:d9:5b:b3:e6:87:f6:
         63:22:41:f5:78:e4:8c:e5:8f:28:74:04:0f:9a:f9:73:71:5a:
         57:23:db:61:c6:b4:9b:da:d5:04:2e:f7:ac:66:85:a6:4f:a0:
         35:52:f2:71:01:3f:b0:a8:1a:6a:af:ef:12:c1:b4:ca:9c:db:
         5e:17:79:31:66:da:44:57:8c:73:96:b3:2d:2a:9a:fe:33:77:
         24:60:97:7b:35:96:2c:f8:7f:36:5f:20:bb:96:ba:a5:94:0a:
         ec:19:88:1a:4c:7e:6a:8d:14:e2:a9:7e:a7:ed:38:3e:f1:85:
         b8:2c:d9:9c:fb:e3:28:8e:e5:2c:f0:ad:f3:42:d2:00:ef:38:
         04:f3:db:1e:eb:a0:62:a7:7a:26:a1:7e:37:c9:27:a0:9e:c1:
         9d:d9:88:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:41 2025 by rpki-client