Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/0/3137372e35342e38382e302f32322d3234203d3e20323632323932.roa
File:                     3137372e35342e38382e302f32322d3234203d3e20323632323932.roa (raw, json)
Hash identifier:          bpKR7QRbINS6sERG8vO/qqYTPueIJN8B4cKRePztros=
Subject key identifier:   CE:90:1F:75:C7:93:D2:F0:84:E2:3A:B3:52:D0:BE:21:4D:CA:0F:F4
Certificate issuer:       /CN=826A3AA9AA962E4CFF954588EB5BE6A26A3816EA
Certificate serial:       1EFAAD190C0BEA242BFEABDCB3FEB52DD27B24E5
Authority key identifier: 82:6A:3A:A9:AA:96:2E:4C:FF:95:45:88:EB:5B:E6:A2:6A:38:16:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/826A3AA9AA962E4CFF954588EB5BE6A26A3816EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/0/3137372e35342e38382e302f32322d3234203d3e20323632323932.roa
Signing time:             Wed 28 Feb 2024 21:31:01 +0000
ROA not before:           Wed 28 Feb 2024 21:26:01 +0000
ROA not after:            Wed 26 Feb 2025 21:31:01 +0000
asID:                     262292
IP address blocks:        177.54.88.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fa:ad:19:0c:0b:ea:24:2b:fe:ab:dc:b3:fe:b5:2d:d2:7b:24:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826A3AA9AA962E4CFF954588EB5BE6A26A3816EA
        Validity
            Not Before: Feb 28 21:26:01 2024 GMT
            Not After : Feb 26 21:31:01 2025 GMT
        Subject: CN=CE901F75C793D2F084E23AB352D0BE214DCA0FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:69:02:1d:92:61:97:7c:07:29:7f:93:49:
                    11:e8:6d:c7:8e:c2:45:f7:71:99:96:42:8a:7d:85:
                    56:f8:21:1b:88:10:91:14:c1:bb:b1:2f:d9:84:6f:
                    04:68:59:57:c7:f7:6f:73:a2:fa:6d:fa:d7:ca:2c:
                    75:4b:a7:d7:93:43:1c:c7:c7:c5:e4:44:6d:28:6b:
                    38:fd:13:ad:53:68:ce:84:0f:f2:c3:1e:8f:e7:b3:
                    94:62:54:92:fa:25:10:2b:9c:86:bb:71:eb:02:10:
                    2b:34:4e:56:4b:05:98:8b:67:8e:e7:e3:e1:b2:74:
                    64:b2:bb:97:f4:c2:87:10:1f:e0:7c:97:6f:8c:28:
                    ea:b4:86:7c:d4:b1:fb:79:8a:9c:be:3b:83:e8:af:
                    6f:58:e2:82:e1:11:c0:e0:e7:27:2c:e8:2f:0d:19:
                    5f:be:62:ba:01:ad:2f:49:54:80:94:2b:cd:14:f1:
                    d8:13:99:37:8d:81:96:ba:c7:7c:39:9d:87:7f:6a:
                    db:90:12:b2:6f:fa:50:f6:65:69:92:e4:df:fa:6d:
                    9d:42:77:43:de:c7:85:e2:52:2c:91:6d:f4:42:fc:
                    97:36:fa:2f:1e:06:38:97:a4:64:3d:66:71:51:3d:
                    b7:b0:01:3c:60:41:98:21:29:fd:1e:81:46:5a:96:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:90:1F:75:C7:93:D2:F0:84:E2:3A:B3:52:D0:BE:21:4D:CA:0F:F4
            X509v3 Authority Key Identifier:
                keyid:82:6A:3A:A9:AA:96:2E:4C:FF:95:45:88:EB:5B:E6:A2:6A:38:16:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/0/826A3AA9AA962E4CFF954588EB5BE6A26A3816EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/826A3AA9AA962E4CFF954588EB5BE6A26A3816EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/0/3137372e35342e38382e302f32322d3234203d3e20323632323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:3f:f5:d6:ea:28:07:50:02:ea:96:0b:93:da:35:07:09:74:
         c6:21:d0:6a:3f:4f:04:2e:26:07:4c:af:38:d6:7c:33:cb:54:
         c9:5d:51:e6:17:74:5d:c5:9b:26:c5:b3:eb:5e:68:df:2b:e5:
         96:bf:40:70:6a:91:a7:13:65:6e:ed:7a:f6:20:2e:fa:a8:0c:
         3d:22:5a:fd:3f:f8:fe:4d:46:a1:50:32:f0:2b:3a:2a:f2:1a:
         4d:c7:0b:c3:2c:fb:e9:8b:a3:bf:b4:0d:48:63:be:2e:89:7b:
         c6:92:b8:1e:15:d6:39:05:37:e9:ac:3a:92:97:1d:17:b7:e1:
         52:5c:f0:dd:74:50:37:a8:03:3b:b0:d1:83:5a:6c:db:78:48:
         7a:db:6f:f7:41:f5:5b:88:e7:e2:9a:84:e5:8e:0e:2b:2a:0f:
         75:e6:ba:11:49:6a:65:e8:63:56:be:c5:1f:6f:3f:15:bf:79:
         c7:67:9b:3a:cd:0e:30:f2:df:f4:c1:71:fa:60:e6:02:44:92:
         2d:16:40:25:22:a6:71:b1:af:bc:f2:ae:42:55:57:35:d1:c7:
         9f:0e:67:34:ce:f4:ae:e8:c6:8f:c9:2a:60:9a:ec:9c:db:d3:
         4b:02:a0:27:21:0f:b2:5b:55:e7:23:46:46:04:76:47:41:12:
         30:be:80:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:40 2025 by rpki-client