Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/3137372e3232332e34382e302f32342d3234203d3e20323633353030.roa
File:                     3137372e3232332e34382e302f32342d3234203d3e20323633353030.roa (raw, json)
Hash identifier:          YnWlHrcZqulkYuWVbd9/1THrDrxfsR9P4X7/DwwCQeo=
Subject key identifier:   CA:A4:84:0F:6C:61:04:38:E4:A6:83:84:8D:DA:B8:84:55:20:07:D0
Certificate issuer:       /CN=26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C
Certificate serial:       4C09247C6B127A9CEEF0511A22D61E255B2BA6DE
Authority key identifier: 26:C1:D1:ED:E7:3D:B7:10:A3:D5:18:83:ED:E9:5A:B0:2E:12:CE:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/3137372e3232332e34382e302f32342d3234203d3e20323633353030.roa
Signing time:             Wed 20 Mar 2024 01:44:52 +0000
ROA not before:           Wed 20 Mar 2024 01:39:52 +0000
ROA not after:            Wed 19 Mar 2025 01:44:52 +0000
asID:                     263500
IP address blocks:        177.223.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:09:24:7c:6b:12:7a:9c:ee:f0:51:1a:22:d6:1e:25:5b:2b:a6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C
        Validity
            Not Before: Mar 20 01:39:52 2024 GMT
            Not After : Mar 19 01:44:52 2025 GMT
        Subject: CN=CAA4840F6C610438E4A683848DDAB884552007D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:0f:b0:3f:0d:f2:81:4c:be:20:60:b4:df:
                    1c:68:2a:a4:0c:e4:f3:05:30:90:b0:c2:51:0f:cd:
                    62:cc:69:bc:4c:d1:5c:c6:44:41:d0:f6:dd:56:a9:
                    be:88:b7:a8:b5:b6:54:6e:ad:58:1e:9d:ad:b0:d3:
                    94:54:7b:65:f7:c1:0a:aa:68:43:cf:42:74:91:eb:
                    a3:30:a2:74:6f:37:0b:67:f5:a7:71:1a:21:05:4b:
                    3b:e8:a7:76:e0:e9:bb:4d:41:90:3d:d2:0e:f7:8a:
                    1f:d8:a3:4d:17:79:db:4a:b2:4d:7e:f2:a0:e8:e5:
                    b1:e8:a2:10:96:2d:c1:06:b9:48:a8:d2:bf:3a:89:
                    ac:1f:0d:51:20:51:c9:91:72:dc:24:14:f5:07:3a:
                    32:c5:27:f7:33:e1:a8:fa:f1:01:f7:eb:62:ba:cd:
                    86:8f:12:b7:7f:3e:e4:3d:a2:e7:a6:1c:5c:ee:4a:
                    0d:17:0a:68:a9:05:dc:68:d1:1a:56:27:cb:c4:81:
                    29:a0:9e:d5:25:d0:f4:85:8d:b9:5f:f0:00:82:ff:
                    c3:73:71:0e:ec:70:bd:03:98:51:50:f6:9d:48:aa:
                    59:31:ba:13:57:39:df:8b:a4:e7:f0:3c:6b:8f:93:
                    1d:1c:92:f8:cf:ae:09:e6:74:15:22:04:32:9d:ac:
                    44:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A4:84:0F:6C:61:04:38:E4:A6:83:84:8D:DA:B8:84:55:20:07:D0
            X509v3 Authority Key Identifier:
                keyid:26:C1:D1:ED:E7:3D:B7:10:A3:D5:18:83:ED:E9:5A:B0:2E:12:CE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/3137372e3232332e34382e302f32342d3234203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:92:d3:90:96:4d:83:ed:39:bf:74:29:3a:9f:d6:3c:9d:f3:
         5d:7d:b1:de:2e:b0:8e:b1:c4:b3:cd:27:88:2a:2e:82:9b:7c:
         3a:ab:93:15:ae:67:87:ee:e3:20:5c:f9:32:2c:88:00:dc:7c:
         4c:b6:20:14:40:69:cb:08:5f:a3:20:78:58:f6:53:a2:37:df:
         74:8a:57:19:39:c4:01:47:cb:64:d1:e6:0c:a9:20:6e:3f:d9:
         78:43:42:68:df:f7:be:f2:8a:82:37:ce:d7:a0:a4:20:2e:3e:
         7b:68:63:7c:5b:b8:bb:f0:f8:d0:20:4e:5a:6c:f2:3f:5f:f8:
         b2:fd:b9:f6:c2:30:4a:fa:9b:7b:f1:39:cc:99:31:c8:6b:84:
         dc:16:95:2d:2f:b1:93:e5:fd:60:43:91:b2:5f:88:1c:fa:2f:
         63:7a:9b:41:17:9e:6d:e1:c5:45:b8:5f:e6:04:24:78:99:7a:
         15:4a:9e:8f:9c:54:98:f4:e2:2c:bb:07:80:e0:e8:ba:2b:76:
         c3:e2:aa:d9:97:bd:a1:b1:de:f7:95:30:58:55:7a:64:85:0b:
         ab:80:5b:36:2e:2c:f1:05:ee:00:2a:d9:08:06:d7:97:01:46:
         8b:bc:45:cf:e5:51:4d:67:3f:9e:cc:44:af:3a:90:d9:e3:37:
         a7:a6:5d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:06 2025 by rpki-client