Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/3137372e3132362e3234302e302f32302d3234203d3e20323632333633.roa
File:                     3137372e3132362e3234302e302f32302d3234203d3e20323632333633.roa (raw, json)
Hash identifier:          JhhP8GAs7yv6WV+HG/v6HwX4by6VFAPWB55RtnCHvE8=
Subject key identifier:   E4:26:B0:57:F0:27:FB:99:91:D5:15:0A:A0:3A:86:15:88:3A:BC:F8
Certificate issuer:       /CN=648C4362DD5346F387DB57D97560FBCD239648F1
Certificate serial:       33FBBFA41D0159B9F813269845926CF943B7138B
Authority key identifier: 64:8C:43:62:DD:53:46:F3:87:DB:57:D9:75:60:FB:CD:23:96:48:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/648C4362DD5346F387DB57D97560FBCD239648F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/3137372e3132362e3234302e302f32302d3234203d3e20323632333633.roa
Signing time:             Mon 25 Sep 2023 18:44:12 +0000
ROA not before:           Mon 25 Sep 2023 18:39:12 +0000
ROA not after:            Mon 23 Sep 2024 18:44:12 +0000
asID:                     262363
IP address blocks:        177.126.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fb:bf:a4:1d:01:59:b9:f8:13:26:98:45:92:6c:f9:43:b7:13:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=648C4362DD5346F387DB57D97560FBCD239648F1
        Validity
            Not Before: Sep 25 18:39:12 2023 GMT
            Not After : Sep 23 18:44:12 2024 GMT
        Subject: CN=E426B057F027FB9991D5150AA03A8615883ABCF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:47:d3:36:b9:98:b5:9a:ba:a5:55:4e:76:
                    c6:fe:6e:86:e5:75:b2:0b:e6:0a:87:3d:f9:cd:c3:
                    f6:a5:b7:ef:6f:d6:aa:7e:25:51:88:93:29:d4:95:
                    2f:9f:82:e8:c6:57:74:42:9d:45:9b:06:c0:e9:21:
                    9e:96:8f:64:68:13:69:e3:50:10:7d:9b:4e:5f:ee:
                    c4:64:1b:85:9d:16:6b:08:4f:1f:7d:af:c0:3d:5c:
                    01:4b:0a:84:c9:2b:4e:7a:80:7e:cc:60:44:22:ed:
                    0a:c1:ea:bf:37:ec:04:63:ea:df:72:27:bc:13:87:
                    9a:df:1a:b4:ef:74:6c:22:0d:56:d9:91:b9:89:ac:
                    c4:b7:db:8f:66:47:26:0f:a4:93:8c:3d:a1:5c:96:
                    79:36:a9:d3:c3:22:57:2a:66:ed:45:f2:78:d2:6a:
                    65:59:1d:a4:0c:53:d7:45:1a:03:92:22:5a:97:e6:
                    35:95:01:6e:83:27:82:34:bc:b3:e4:5f:07:57:94:
                    b4:e8:de:73:9c:9f:2d:63:f8:1f:2e:00:7f:07:f8:
                    04:28:c9:38:85:f3:62:09:c1:0b:5a:a1:7b:00:4e:
                    72:50:b0:84:a1:76:fd:c5:7e:e8:bb:54:bb:cf:04:
                    b8:56:c5:61:33:33:ff:7d:7d:25:b0:1e:01:73:c8:
                    c8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:26:B0:57:F0:27:FB:99:91:D5:15:0A:A0:3A:86:15:88:3A:BC:F8
            X509v3 Authority Key Identifier:
                keyid:64:8C:43:62:DD:53:46:F3:87:DB:57:D9:75:60:FB:CD:23:96:48:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/648C4362DD5346F387DB57D97560FBCD239648F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/648C4362DD5346F387DB57D97560FBCD239648F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/0/3137372e3132362e3234302e302f32302d3234203d3e20323632333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bf:65:67:75:6a:30:20:69:a8:65:77:31:95:b3:0f:51:bf:bc:
         28:c3:94:6d:58:ac:55:67:a0:7d:89:4e:96:d9:46:6f:31:fc:
         0f:88:89:89:bd:13:d8:65:c8:5e:7c:5c:97:17:be:92:12:fa:
         9f:ae:b5:e1:0d:1f:2e:bd:f5:ad:65:59:d5:70:60:8a:0c:4b:
         79:28:50:1c:76:c0:92:39:4a:5c:4e:8b:3a:3e:2c:e8:75:6e:
         9c:1e:d1:ec:e5:24:80:4b:b9:1d:ac:e0:7d:08:64:2c:c8:67:
         1a:5d:ca:58:9d:6b:23:d9:65:c5:95:ea:40:96:b4:38:e6:86:
         98:de:0f:94:b1:4c:69:f4:48:66:8d:c7:70:19:8c:af:e6:33:
         7c:6b:b0:fd:c5:68:de:be:6b:cd:ca:51:65:0d:c4:a1:58:5d:
         45:03:f9:17:02:f6:72:a6:c8:b7:1c:8b:35:8b:f0:f1:b3:30:
         44:d2:0b:6e:a2:07:28:86:48:95:bd:e0:81:5f:16:08:65:b9:
         ea:72:ed:f1:51:c4:bd:79:15:9d:d1:7c:b2:af:5b:ba:d7:4e:
         34:4a:df:df:39:05:69:87:bb:35:81:d6:86:fc:69:16:3c:b8:
         c3:eb:ab:ea:89:24:e0:b1:bd:67:07:b3:63:26:cb:8d:15:6a:
         c7:35:02:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:08:28 2025 by rpki-client