Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233322e302f32322d3332203d3e20323633343530.roa
File:                     3137372e39312e3233322e302f32322d3332203d3e20323633343530.roa (raw, json)
Hash identifier:          5OntlO5he05wjQ31exQDXaGboW3/a7/8ne58YQn/E28=
Subject key identifier:   A8:70:1F:F6:6F:17:F4:4E:35:84:A3:9A:A9:9E:CD:3C:B5:65:B6:2E
Certificate issuer:       /CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Certificate serial:       040CF98269B7A3B7C7CDBBE67EDC75EF9AAAE72F
Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233322e302f32322d3332203d3e20323633343530.roa
Signing time:             Wed 12 Feb 2025 16:51:03 +0000
ROA not before:           Wed 12 Feb 2025 16:46:03 +0000
ROA not after:            Wed 11 Feb 2026 16:51:03 +0000
asID:                     263450
IP address blocks:        177.91.232.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0c:f9:82:69:b7:a3:b7:c7:cd:bb:e6:7e:dc:75:ef:9a:aa:e7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71
        Validity
            Not Before: Feb 12 16:46:03 2025 GMT
            Not After : Feb 11 16:51:03 2026 GMT
        Subject: CN=A8701FF66F17F44E3584A39AA99ECD3CB565B62E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3c:6e:16:53:bb:12:6d:ea:b0:e9:03:09:f5:
                    86:74:82:85:39:39:f9:09:c6:3b:fa:bd:ec:6c:15:
                    ff:4f:df:d2:70:7c:21:d6:1d:c4:8b:92:13:fd:fe:
                    c7:e4:3a:d7:93:9d:84:d5:26:a6:9b:40:b2:90:75:
                    16:75:2d:73:fa:01:c4:f3:5b:93:ff:1b:af:77:93:
                    4b:09:21:3a:eb:a6:48:50:07:3e:b8:35:2d:a7:28:
                    cc:c0:09:be:1b:57:c2:21:1b:5e:a9:89:0f:72:e9:
                    32:27:4e:ac:15:f5:a6:e1:a4:e5:d5:1f:7f:24:f3:
                    4b:9d:95:b6:23:78:43:3e:d4:31:c6:f1:e2:f6:a7:
                    fc:16:ac:9b:d8:28:99:91:93:7d:81:2c:89:85:29:
                    25:3f:be:cf:f9:b4:0a:87:1a:85:1a:23:cf:e5:cf:
                    30:24:63:ce:e2:d9:5e:5c:f0:63:70:33:44:e9:05:
                    a3:af:9d:4b:1a:35:48:01:69:3c:cf:7f:0c:5f:33:
                    55:7b:7f:f6:09:60:3e:8c:9c:20:c6:ef:66:17:39:
                    6b:12:e4:76:c9:fc:fd:49:7b:49:bb:b5:d1:4e:00:
                    dd:f4:70:29:af:f2:f6:3c:54:ae:35:b8:eb:7d:94:
                    74:46:d5:e6:55:f8:5d:0e:68:df:3e:df:76:9c:66:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:70:1F:F6:6F:17:F4:4E:35:84:A3:9A:A9:9E:CD:3C:B5:65:B6:2E
            X509v3 Authority Key Identifier:
                keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233322e302f32322d3332203d3e20323633343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:a1:17:a2:28:a5:dc:37:80:0d:0c:80:31:f9:0c:c4:0f:1d:
         ce:b1:f4:39:cf:7a:c5:5c:b6:e1:bb:77:a7:e9:32:ba:c1:c5:
         96:17:70:be:06:8a:5d:39:64:e1:7f:8f:00:a4:b1:41:b6:20:
         10:84:a6:54:69:39:48:11:b4:d8:b0:7f:db:ed:1d:2e:e7:69:
         5b:77:84:32:cc:f3:10:2f:ae:d8:e2:5d:8d:48:04:20:a0:07:
         75:ad:6c:08:1b:53:1c:30:9a:c0:dc:79:3b:55:77:d4:4f:dd:
         d5:ee:75:a5:df:6b:42:54:18:d8:e6:97:6f:6d:6d:c2:ed:57:
         44:b0:2d:a3:db:35:96:bd:88:34:38:4d:15:10:3c:69:f0:4c:
         41:6c:0e:53:c8:2f:21:24:b7:1e:50:cf:dd:dd:11:bd:97:e6:
         76:2e:39:31:36:8b:c9:81:e3:a2:fc:19:27:69:29:39:e5:7b:
         7c:5d:88:d0:5a:2c:ad:01:25:d9:b2:3a:d9:ed:6a:c8:97:8e:
         fe:c0:9d:65:34:39:78:ef:ee:07:a2:b1:96:cd:97:ad:9b:46:
         37:41:dc:8a:1c:3b:14:9f:be:77:42:0d:01:1d:90:9f:2b:5e:
         47:7d:ea:bf:cd:e6:3b:01:40:ce:9c:64:f3:27:d1:0a:3c:17:
         b1:02:81:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:19:58 2025 by rpki-client