Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/3137372e3232332e35372e302f32342d3234203d3e20323633353030.roa
File:                     3137372e3232332e35372e302f32342d3234203d3e20323633353030.roa (raw, json)
Hash identifier:          kDsPZl+Gl9UjzoRMBre5CDCS74idiDZ5ljLSKHv4JzY=
Subject key identifier:   BE:36:C7:AA:A8:FA:81:82:F3:82:F8:6B:EE:E5:52:40:A9:B5:7D:6B
Certificate issuer:       /CN=26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C
Certificate serial:       1C353D741BAECEB3B6D38A67981B5272AE9FC82A
Authority key identifier: 26:C1:D1:ED:E7:3D:B7:10:A3:D5:18:83:ED:E9:5A:B0:2E:12:CE:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/3137372e3232332e35372e302f32342d3234203d3e20323633353030.roa
Signing time:             Wed 20 Mar 2024 01:44:51 +0000
ROA not before:           Wed 20 Mar 2024 01:39:51 +0000
ROA not after:            Wed 19 Mar 2025 01:44:51 +0000
asID:                     263500
IP address blocks:        177.223.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:35:3d:74:1b:ae:ce:b3:b6:d3:8a:67:98:1b:52:72:ae:9f:c8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C
        Validity
            Not Before: Mar 20 01:39:51 2024 GMT
            Not After : Mar 19 01:44:51 2025 GMT
        Subject: CN=BE36C7AAA8FA8182F382F86BEEE55240A9B57D6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:eb:93:b1:0a:49:ce:96:eb:3e:6b:73:e0:
                    05:1d:30:32:e5:ef:4c:95:03:8c:91:11:99:54:0d:
                    63:99:c7:61:0b:ce:7d:92:76:b3:ff:76:74:f5:0a:
                    85:ec:d5:a8:2c:34:38:2f:7d:b9:cd:0b:21:33:3f:
                    0a:30:6e:da:6c:d3:3f:38:5b:95:90:de:64:eb:d1:
                    bf:9c:ca:5a:ad:62:77:53:f0:72:e6:f7:81:1f:78:
                    8f:b7:18:86:2d:df:15:6d:30:b0:e1:25:21:55:ce:
                    2e:37:8a:f2:d6:b2:4d:ee:ce:3a:07:01:b7:1a:b6:
                    ba:4a:38:ac:d9:3e:3b:a6:88:a4:e9:45:0a:a8:a9:
                    d2:e6:f3:08:9a:86:b4:ae:d3:d0:e0:d1:36:e8:4b:
                    4f:14:55:d6:4a:bb:fa:05:31:1f:c9:01:23:9e:ad:
                    1f:bd:85:db:61:3f:4f:cf:90:00:14:f3:1c:03:23:
                    7f:7f:e1:73:83:62:38:20:0b:f4:5d:f4:d9:2e:10:
                    f5:ca:ef:25:48:08:dd:2a:2d:aa:fc:3b:d8:4c:e3:
                    22:ca:3f:50:20:79:01:0a:8c:b5:61:ac:7f:87:81:
                    0f:6e:ae:b5:71:e5:32:26:98:d4:ea:d8:ed:c6:cf:
                    e3:24:8f:e9:3f:e6:15:78:c7:cc:9b:50:64:1f:3c:
                    86:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:36:C7:AA:A8:FA:81:82:F3:82:F8:6B:EE:E5:52:40:A9:B5:7D:6B
            X509v3 Authority Key Identifier:
                keyid:26:C1:D1:ED:E7:3D:B7:10:A3:D5:18:83:ED:E9:5A:B0:2E:12:CE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26C1D1EDE73DB710A3D51883EDE95AB02E12CE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/0/3137372e3232332e35372e302f32342d3234203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:38:d1:ac:55:24:17:69:d0:16:2f:ed:30:e1:62:de:3d:7b:
         30:c1:e2:17:33:0f:11:8f:ed:6e:42:07:90:8e:cb:1e:00:6a:
         88:14:94:cd:00:a7:f1:6c:42:40:4f:d0:88:da:5d:a4:87:3e:
         02:a2:7e:7e:35:17:1f:e3:0b:78:41:87:0e:40:45:76:f1:d2:
         c0:03:26:2a:75:48:37:13:a1:71:37:ed:80:fa:5f:92:3d:0d:
         c6:c3:db:8a:22:09:2a:42:f7:5a:d1:8c:f6:67:91:6e:87:94:
         17:31:45:51:60:4d:92:4e:60:bd:06:d4:1e:6a:1b:d5:1d:d7:
         1a:b7:06:5a:e1:53:ac:56:95:79:94:4a:1e:9a:99:b3:3c:6c:
         c4:35:92:a4:fd:bf:c8:5d:8e:a3:e8:64:55:18:7b:2f:dc:7d:
         f0:94:dc:69:ba:b4:1e:bc:76:1a:67:fb:96:57:5f:9c:db:51:
         4f:18:11:41:90:2f:e2:30:f0:c9:cf:79:da:76:76:cd:93:2b:
         05:b3:6d:30:30:15:8e:c0:94:5e:6b:f3:6f:05:ff:da:1f:34:
         a9:81:79:7a:d3:64:e3:be:e1:e2:0a:d7:05:7c:e6:71:16:6f:
         6e:52:83:1c:77:92:41:92:e1:4f:cb:9e:8e:58:28:6e:8a:2b:
         c6:ad:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org