Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3137372e3132362e3135342e302f32332d3233203d3e20323633353230.roa
File:                     3137372e3132362e3135342e302f32332d3233203d3e20323633353230.roa (raw, json)
Hash identifier:          Alnvqfb2oiyvohoC+t/5wDYcDtAQ6Gb/JUdqHH2VJmM=
Subject key identifier:   33:68:7E:01:18:A6:DD:A5:7E:BF:D8:67:12:53:D6:02:40:C9:BE:B1
Certificate issuer:       /CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
Certificate serial:       265D512C1FDC47B3DAA0F880ECD67F90F64E2AC7
Authority key identifier: DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3137372e3132362e3135342e302f32332d3233203d3e20323633353230.roa
Signing time:             Thu 15 Aug 2024 18:40:32 +0000
ROA not before:           Thu 15 Aug 2024 18:35:32 +0000
ROA not after:            Thu 14 Aug 2025 18:40:32 +0000
asID:                     263520
IP address blocks:        177.126.154.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5d:51:2c:1f:dc:47:b3:da:a0:f8:80:ec:d6:7f:90:f6:4e:2a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
        Validity
            Not Before: Aug 15 18:35:32 2024 GMT
            Not After : Aug 14 18:40:32 2025 GMT
        Subject: CN=33687E0118A6DDA57EBFD8671253D60240C9BEB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:92:30:e7:c6:09:8f:d2:8d:c1:39:45:94:
                    6e:6e:25:98:59:44:1d:00:28:8f:1b:58:05:2f:f9:
                    82:27:6a:75:c7:44:01:f1:aa:59:56:d9:f3:78:c9:
                    66:9b:af:f4:fd:2a:a4:80:0a:a0:94:e5:3c:31:eb:
                    7e:c7:84:d1:2b:00:de:3a:3e:bd:c4:44:75:32:ef:
                    03:ea:97:cb:09:20:0b:02:b3:6f:58:c1:81:b6:78:
                    dd:49:6f:6b:42:aa:53:65:86:77:e4:86:0f:a7:56:
                    58:92:f1:75:76:db:e0:15:21:d0:75:26:31:0a:cd:
                    8d:a7:9e:d7:68:30:42:f0:f2:39:c3:29:d3:6e:61:
                    b2:35:35:fc:07:1f:4e:52:fe:49:df:8c:c5:7f:18:
                    4a:cd:68:49:ee:49:1e:30:f6:47:fd:d0:a4:ef:8b:
                    89:07:ba:de:c7:eb:2a:d2:25:c8:af:df:f3:57:c2:
                    bc:a9:92:31:1c:bf:91:dc:7f:bc:80:48:46:7d:5d:
                    c7:e9:b5:4b:d9:62:87:5f:17:94:c9:73:9d:d1:75:
                    46:b0:47:c2:26:53:36:da:71:2d:c1:e1:41:b6:15:
                    12:10:cb:e8:1d:e6:06:a8:67:44:97:12:e6:17:e3:
                    63:7b:db:6d:4e:7b:03:b1:6a:bd:29:e4:ad:1c:55:
                    89:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:68:7E:01:18:A6:DD:A5:7E:BF:D8:67:12:53:D6:02:40:C9:BE:B1
            X509v3 Authority Key Identifier:
                keyid:DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3137372e3132362e3135342e302f32332d3233203d3e20323633353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:eb:a6:05:b6:10:bf:cd:87:1b:e0:3d:aa:f1:5f:50:1b:11:
         27:e9:ec:d6:2f:2a:6a:ed:5d:c7:4b:b3:92:53:70:e6:02:b4:
         96:d7:62:31:1b:83:cd:36:64:3b:f4:52:04:df:24:7d:74:6b:
         3f:6c:a8:e0:a9:bf:7c:c7:31:f3:18:3f:e3:62:c8:86:4e:68:
         e4:f7:03:ed:58:63:71:0b:2f:4e:28:ed:f6:d8:d9:3e:28:fe:
         a4:0c:72:a3:bd:f9:e6:9d:cd:4b:41:87:21:87:5b:b1:76:d8:
         44:5d:6e:df:a5:3e:38:df:af:e6:0a:21:08:8b:b7:35:09:b1:
         b1:c3:a2:ad:67:6d:f5:92:f2:be:f2:14:9b:fa:d4:8f:12:8a:
         a7:f9:06:ee:df:a1:7d:b9:38:fe:ee:9b:3f:61:37:45:85:fd:
         75:e1:75:18:db:40:b4:38:84:c5:30:49:e5:9b:74:86:7a:62:
         04:bd:af:2e:ef:cc:e0:92:29:dd:b3:75:78:a6:12:23:28:11:
         90:fd:4c:15:d5:5c:a7:bf:cc:55:c2:e3:a6:cb:fb:5c:f7:11:
         bb:dd:ce:b2:ec:55:4d:fd:cd:4d:75:3e:f0:5b:21:22:10:f1:
         f0:78:6a:a6:9b:91:04:29:c3:74:04:45:a4:71:b9:2f:8a:35:
         71:33:42:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:10 2025 by rpki-client