Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e382e302f32332d3233203d3e20323639303936.roa
File:                     3137372e33392e382e302f32332d3233203d3e20323639303936.roa (raw, json)
Hash identifier:          q7Oq9lj46jB/52Fs1EWPakXxxWZqK6JLCcUEl8VuY0M=
Subject key identifier:   26:C3:35:BF:77:8F:62:E1:82:CA:F1:DF:30:43:36:1A:5F:29:0D:63
Certificate issuer:       /CN=22AF7B01A71F10F6C4EB165BE13AE51E261E5B49
Certificate serial:       5B92ADC2B3BFF022EF45962DBC8C8AB3D2114612
Authority key identifier: 22:AF:7B:01:A7:1F:10:F6:C4:EB:16:5B:E1:3A:E5:1E:26:1E:5B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF7B01A71F10F6C4EB165BE13AE51E261E5B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e382e302f32332d3233203d3e20323639303936.roa
Signing time:             Tue 03 Dec 2024 18:40:22 +0000
ROA not before:           Tue 03 Dec 2024 18:35:22 +0000
ROA not after:            Tue 02 Dec 2025 18:40:22 +0000
asID:                     269096
IP address blocks:        177.39.8.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:92:ad:c2:b3:bf:f0:22:ef:45:96:2d:bc:8c:8a:b3:d2:11:46:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AF7B01A71F10F6C4EB165BE13AE51E261E5B49
        Validity
            Not Before: Dec  3 18:35:22 2024 GMT
            Not After : Dec  2 18:40:22 2025 GMT
        Subject: CN=26C335BF778F62E182CAF1DF3043361A5F290D63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f1:27:19:80:b6:1c:b5:9d:8b:46:df:cc:3a:
                    31:45:50:0e:70:1f:12:d9:c9:3e:88:c8:8a:26:da:
                    90:40:14:e2:c5:90:94:b5:7d:6e:88:2d:c7:21:e7:
                    88:56:68:06:b7:8f:99:be:43:d4:f4:4f:35:b7:a7:
                    7a:a1:de:c9:2a:97:7e:8e:30:06:dd:6b:db:b5:8a:
                    bc:8d:af:b2:6f:63:27:56:82:a0:cb:34:2a:41:a6:
                    e6:56:8c:38:61:fd:dd:b9:6e:b7:22:c4:9c:a7:fe:
                    d9:b4:d7:32:15:7a:e8:41:f4:ad:54:e0:87:df:7e:
                    47:98:59:10:be:06:17:87:21:0d:73:a5:80:23:be:
                    55:88:9c:9f:31:23:ac:50:27:37:83:eb:1e:98:df:
                    eb:07:42:fe:7a:45:8d:e9:22:1d:7d:b8:09:57:f6:
                    b6:66:eb:ba:c6:7f:0b:fe:d9:9e:33:cd:7f:f3:62:
                    20:92:d5:ee:55:1c:eb:52:1e:29:65:8e:3a:2d:9a:
                    36:67:bc:83:52:c3:31:58:67:cd:fa:0b:f9:bc:5b:
                    bc:24:b1:6a:d8:0c:af:b5:bc:ae:34:84:7a:8d:ab:
                    f2:68:29:c1:f2:0b:f2:e7:ec:59:31:10:1b:18:5e:
                    10:4b:4b:3e:3f:73:72:9e:22:02:12:fb:1f:b3:a0:
                    6e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C3:35:BF:77:8F:62:E1:82:CA:F1:DF:30:43:36:1A:5F:29:0D:63
            X509v3 Authority Key Identifier:
                keyid:22:AF:7B:01:A7:1F:10:F6:C4:EB:16:5B:E1:3A:E5:1E:26:1E:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/22AF7B01A71F10F6C4EB165BE13AE51E261E5B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF7B01A71F10F6C4EB165BE13AE51E261E5B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e382e302f32332d3233203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:53:ec:dd:9f:f7:39:5e:1f:8f:7d:60:2c:00:b7:12:b2:35:
         aa:81:b4:db:e5:b5:97:56:78:21:4f:83:8e:df:06:31:27:5f:
         75:4b:0b:f9:44:bc:b8:69:3c:58:e3:45:88:0d:cd:fd:06:58:
         2b:c3:5e:ab:94:c7:6b:69:fa:cf:9b:92:2e:71:cb:4b:7b:fe:
         cc:ed:ec:14:fc:63:b9:49:82:55:02:cf:7d:d2:3d:85:2d:c2:
         1a:4e:5c:16:42:94:78:e2:ec:dc:75:47:58:06:80:83:e3:9c:
         1e:2c:c8:73:d7:b8:8f:9f:52:41:27:34:25:d6:71:4e:45:53:
         e9:02:5d:46:0e:3b:10:31:0f:1f:28:da:08:39:01:95:65:5e:
         7a:c7:72:2b:f8:de:28:ea:f8:67:d8:9d:6f:25:a6:28:93:3e:
         08:6e:a0:c6:b2:3f:ba:45:dd:8d:65:36:32:c8:1d:63:a5:aa:
         0a:83:5d:19:6c:a8:b9:a0:71:a9:ea:e7:3d:ee:dc:ab:ee:2f:
         8b:14:b0:7c:ad:c3:c6:e8:cb:e1:af:d2:ab:ca:ff:98:88:50:
         d8:cc:42:06:8f:c4:2c:2f:ac:be:e9:db:87:2f:ca:3d:2c:0b:
         79:b6:6e:88:8a:ef:21:92:41:09:05:1e:9d:58:72:30:4c:dc:
         08:16:db:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:23:19 2025 by rpki-client