Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32322d3232203d3e20323633343435.roa
File:                     3137372e39312e3136342e302f32322d3232203d3e20323633343435.roa (raw, json)
Hash identifier:          svqmQkDERhvGpvtm0S+57b48XWnkD41eWp23HGiOvv8=
Subject key identifier:   D2:26:D5:15:9E:FC:03:C3:86:D5:08:B1:AE:DD:60:9D:22:5A:77:C5
Certificate issuer:       /CN=F1076108B5AD0183155EEC96C47E216B36ED588E
Certificate serial:       6985F1F4CDCC27A2372ED37138C911A6FCDAD71F
Authority key identifier: F1:07:61:08:B5:AD:01:83:15:5E:EC:96:C4:7E:21:6B:36:ED:58:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1076108B5AD0183155EEC96C47E216B36ED588E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32322d3232203d3e20323633343435.roa
Signing time:             Thu 04 Jan 2024 14:41:50 +0000
ROA not before:           Thu 04 Jan 2024 14:36:50 +0000
ROA not after:            Thu 02 Jan 2025 14:41:50 +0000
asID:                     263445
IP address blocks:        177.91.164.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:85:f1:f4:cd:cc:27:a2:37:2e:d3:71:38:c9:11:a6:fc:da:d7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1076108B5AD0183155EEC96C47E216B36ED588E
        Validity
            Not Before: Jan  4 14:36:50 2024 GMT
            Not After : Jan  2 14:41:50 2025 GMT
        Subject: CN=D226D5159EFC03C386D508B1AEDD609D225A77C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:f6:d6:c4:ed:dd:b3:8b:21:db:d6:d2:ea:
                    20:76:1a:25:ee:9f:ca:6b:3c:f8:93:7e:f8:f9:ea:
                    97:84:5a:1d:f9:e6:95:aa:ff:8e:47:01:c0:26:43:
                    16:ff:01:91:e8:cf:0c:b5:62:40:26:80:62:13:89:
                    65:89:be:3a:c2:99:f1:c8:3d:50:08:68:ec:30:3b:
                    91:19:d9:b0:33:04:91:73:91:72:61:d7:bf:e4:9e:
                    3c:e3:fb:2d:8e:b3:22:cf:fd:6a:c6:b4:2a:8b:e4:
                    38:cb:d7:de:6e:af:ae:65:12:62:f6:fe:48:48:42:
                    e9:fc:44:c7:18:29:eb:40:7b:0d:c8:57:89:56:53:
                    f8:97:45:73:be:e1:bc:29:6f:a8:e6:72:58:63:b0:
                    54:ec:c8:c2:b3:4e:99:ba:31:dd:bc:ef:a5:76:e8:
                    c6:b0:91:4e:50:1b:26:3f:4c:ef:fa:f7:0a:5d:6c:
                    a9:c9:8e:96:f2:64:aa:01:d1:f8:7f:33:23:17:5a:
                    25:b6:43:b2:c2:ee:14:51:44:5e:2d:e5:ee:ba:11:
                    52:06:be:17:15:9f:5c:72:bd:86:f8:3a:c6:80:ae:
                    5d:a9:56:50:41:f7:ae:52:d1:5b:25:01:a5:14:2f:
                    d7:a5:1c:97:b8:2f:f6:17:db:50:35:69:b4:93:7a:
                    a5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:26:D5:15:9E:FC:03:C3:86:D5:08:B1:AE:DD:60:9D:22:5A:77:C5
            X509v3 Authority Key Identifier:
                keyid:F1:07:61:08:B5:AD:01:83:15:5E:EC:96:C4:7E:21:6B:36:ED:58:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/F1076108B5AD0183155EEC96C47E216B36ED588E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1076108B5AD0183155EEC96C47E216B36ED588E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32322d3232203d3e20323633343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:55:8b:7c:45:09:bb:88:ee:10:a7:59:53:fa:6d:2e:59:88:
         90:42:52:57:cf:46:a0:ae:b7:a2:9e:a9:d8:53:95:2d:59:01:
         38:2b:88:b1:2c:7b:db:69:dd:85:9d:5c:5e:27:45:3c:e0:b2:
         68:99:9e:43:96:8c:7e:55:d1:f0:58:6a:92:f2:b9:34:89:80:
         7a:77:41:e8:45:1b:3c:ba:c1:08:2a:fd:29:35:eb:6b:a4:58:
         94:4f:ae:7c:01:83:f6:25:28:af:52:c3:9d:8f:1f:c1:3f:6d:
         59:89:76:b6:0b:52:6f:ba:fc:13:f3:13:5e:85:7a:ec:94:75:
         b2:ed:78:f5:8e:7e:c2:8f:49:b6:0f:77:46:ef:32:9e:d4:04:
         26:28:a3:ab:33:a0:b2:03:83:75:a7:ee:f6:d1:d9:c9:3b:ec:
         1b:33:cd:ea:0b:93:fe:5f:ce:77:31:71:e5:e8:80:68:38:77:
         54:66:99:ee:44:ed:ea:3d:ff:00:07:e6:07:e1:af:79:41:56:
         fa:99:4e:66:80:71:ec:19:20:73:a7:3f:b6:0d:be:ca:e9:a8:
         fb:db:36:fe:03:a8:b0:05:60:f3:fe:20:3d:54:e4:96:e8:d1:
         a9:65:f5:1a:08:7e:65:56:98:39:b0:80:56:b2:3d:08:ce:a3:
         67:09:fb:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaYXx9M3MJ6I3LtNxOMkRpvza1x8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjEwNzYxMDhCNUFEMDE4MzE1NUVFQzk2QzQ3RTIxNkIz
NkVENTg4RTAeFw0yNDAxMDQxNDM2NTBaFw0yNTAxMDIxNDQxNTBaMDMxMTAvBgNV
BAMTKEQyMjZENTE1OUVGQzAzQzM4NkQ1MDhCMUFFREQ2MDlEMjI1QTc3QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2/bWxO3ds4sh29bS6iB2GiXu
n8prPPiTfvj56peEWh355pWq/45HAcAmQxb/AZHozwy1YkAmgGITiWWJvjrCmfHI
PVAIaOwwO5EZ2bAzBJFzkXJh17/knjzj+y2OsyLP/WrGtCqL5DjL195ur65lEmL2
/khIQun8RMcYKetAew3IV4lWU/iXRXO+4bwpb6jmclhjsFTsyMKzTpm6Md2876V2
6MawkU5QGyY/TO/69wpdbKnJjpbyZKoB0fh/MyMXWiW2Q7LC7hRRRF4t5e66EVIG
vhcVn1xyvYb4OsaArl2pVlBB965S0VslAaUUL9elHJe4L/YX21A1abSTeqV7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0ibVFZ78A8OG1Qixrt1gnSJad8UwHwYDVR0j
BBgwFoAU8QdhCLWtAYMVXuyWxH4hazbtWI4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZE
bXgvMC9GMTA3NjEwOEI1QUQwMTgzMTU1RUVDOTZDNDdFMjE2QjM2RUQ1ODhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YxMDc2MTA4QjVBRDAxODMx
NTVFRUM5NkM0N0UyMTZCMzZFRDU4OEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o5b3NwV2JWcXRZTllrUGJma3hWYmljS2RNRFhXSmdEQnFSTlV5SFM2RG14LzAv
MzEzNzM3MmUzOTMxMmUzMTM2MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzNDM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxW6QwDQYJKoZIhvcNAQELBQADggEBAJpVi3xF
CbuI7hCnWVP6bS5ZiJBCUlfPRqCut6KeqdhTlS1ZATgriLEse9tp3YWdXF4nRTzg
smiZnkOWjH5V0fBYapLyuTSJgHp3QehFGzy6wQgq/Sk162ukWJRPrnwBg/YlKK9S
w52PH8E/bVmJdrYLUm+6/BPzE16FeuyUdbLtePWOfsKPSbYPd0bvMp7UBCYoo6sz
oLIDg3Wn7vbR2ck77BszzeoLk/5fzncxceXogGg4d1Rmme5E7eo9/wAH5gfhr3lB
VvqZTmaAcewZIHOnP7YNvsrpqPvbNv4DqLAFYPP+ID1U5Jbo0all9RoIfmVWmDmw
gFayPQjOo2cJ+0g=
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:59:36 2025 by rpki-client