Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/3137372e3232332e35362e302f32322d3232203d3e20323633353030.roa
File:                     3137372e3232332e35362e302f32322d3232203d3e20323633353030.roa (raw, json)
Hash identifier:          2ys8MMSamMJqmDauIK7+qTuFnk3c0uypITONb8N+K8k=
Subject key identifier:   CC:AE:24:84:B4:87:66:8F:4C:9D:07:28:91:E6:F3:F3:FA:D2:02:D4
Certificate issuer:       /CN=26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C
Certificate serial:       2E556413FFF8E49B9559C071EEA1793FEE801F43
Authority key identifier: 26:C1:D1:ED:E7:3D:B7:10:A3:D5:18:83:ED:E9:5A:B0:2E:12:CE:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/3137372e3232332e35362e302f32322d3232203d3e20323633353030.roa
Signing time:             Wed 20 Mar 2024 01:44:51 +0000
ROA not before:           Wed 20 Mar 2024 01:39:51 +0000
ROA not after:            Wed 19 Mar 2025 01:44:51 +0000
asID:                     263500
IP address blocks:        177.223.56.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:55:64:13:ff:f8:e4:9b:95:59:c0:71:ee:a1:79:3f:ee:80:1f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C
        Validity
            Not Before: Mar 20 01:39:51 2024 GMT
            Not After : Mar 19 01:44:51 2025 GMT
        Subject: CN=CCAE2484B487668F4C9D072891E6F3F3FAD202D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d5:4c:26:e2:16:e7:41:92:4d:62:e0:2e:99:
                    c1:06:f0:0a:72:b7:02:5c:c3:fb:8e:1d:b4:88:e5:
                    e8:5d:dc:49:ac:27:b5:e5:59:7f:6f:5f:7b:30:65:
                    1e:2e:58:cf:06:6d:c9:a6:5f:fd:a5:0d:f1:55:6a:
                    10:db:45:7c:66:47:1b:65:d1:27:ad:ba:20:36:8d:
                    db:95:b1:78:df:00:17:fe:de:66:38:ae:8d:f9:97:
                    b5:4c:cd:a3:18:ce:91:ba:f6:da:6d:b9:fd:88:32:
                    fd:c5:ea:17:4e:df:6f:29:51:89:99:d3:01:ab:c1:
                    5e:24:7f:e2:7d:1f:b6:b8:32:3b:27:12:73:0d:1a:
                    b9:44:42:fd:8a:8b:f0:10:6d:54:29:99:ee:28:1c:
                    4e:e7:46:17:3b:27:21:7b:c5:13:68:bb:94:28:59:
                    3a:8b:48:ba:bd:72:de:66:c6:76:5c:00:41:f2:4a:
                    d9:6d:57:56:4b:6c:de:a5:03:79:0a:39:3c:56:eb:
                    ba:5a:6a:e1:bc:e7:19:13:f4:1c:0f:3e:d4:1c:fc:
                    62:7d:7d:72:78:5e:64:58:0f:d9:79:a3:52:41:f0:
                    5f:d2:6a:29:3b:6b:94:96:a6:b8:6c:d6:f8:ef:19:
                    5e:d4:b5:53:8a:82:e7:32:8f:9e:3b:1e:fd:e5:95:
                    19:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AE:24:84:B4:87:66:8F:4C:9D:07:28:91:E6:F3:F3:FA:D2:02:D4
            X509v3 Authority Key Identifier:
                keyid:26:C1:D1:ED:E7:3D:B7:10:A3:D5:18:83:ED:E9:5A:B0:2E:12:CE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/3137372e3232332e35362e302f32322d3232203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:6d:1d:f8:70:f6:d0:07:2e:87:58:37:d5:0b:a6:f5:ef:4e:
         a2:bd:91:a4:58:7b:d1:b0:5b:e5:62:57:e0:e0:e9:a4:96:31:
         e6:12:3f:3b:17:fb:4c:b9:93:17:df:40:78:f4:26:cd:52:61:
         06:f8:2f:00:3f:5e:a9:15:19:1d:c8:5c:d2:bc:dc:97:8f:f9:
         c9:8f:d8:cf:bf:76:87:c2:26:27:5f:c0:2e:e2:eb:7c:20:1e:
         9e:08:ff:10:27:94:8b:12:3c:41:69:22:8f:1e:97:d7:aa:ec:
         b7:c7:87:d2:c1:32:8c:be:88:e6:ad:b6:c5:0b:e6:dd:17:d8:
         a8:06:a0:0a:91:3b:5c:2c:56:bb:7d:0b:45:da:a8:39:7b:f0:
         ed:21:ce:21:17:fe:7a:11:3b:4c:ef:e8:90:23:22:38:3c:54:
         b9:5f:c9:78:72:4a:ce:0f:75:75:e7:32:1a:01:61:09:7d:09:
         1c:81:36:96:ef:57:5f:2e:41:81:cc:ae:66:99:36:06:72:21:
         4a:6b:6c:46:b6:c6:d6:52:16:33:61:be:6f:03:5d:d0:08:82:
         3c:06:7d:ab:7f:3d:bb:c6:66:1f:ba:d3:02:83:79:30:dc:64:
         6f:4a:31:4c:a7:a9:72:77:e1:52:77:10:56:6a:84:a6:2c:2b:
         3e:a7:9f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:44 2025 by rpki-client