Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3137372e3132362e3135322e302f32322d3232203d3e20323633353230.roa
File:                     3137372e3132362e3135322e302f32322d3232203d3e20323633353230.roa (raw, json)
Hash identifier:          aFwmQN9vV1DS4n/g8xRxKmKBkLV9sBdk4+pw3czitAI=
Subject key identifier:   DE:25:96:0A:87:79:A4:DD:58:0D:9B:2F:06:E6:7C:FC:63:4D:06:7D
Certificate issuer:       /CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
Certificate serial:       6168F2CEDB2B7F3B6C52A398AF8ED5A4571E68E3
Authority key identifier: DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3137372e3132362e3135322e302f32322d3232203d3e20323633353230.roa
Signing time:             Thu 15 Aug 2024 18:40:31 +0000
ROA not before:           Thu 15 Aug 2024 18:35:31 +0000
ROA not after:            Thu 14 Aug 2025 18:40:31 +0000
asID:                     263520
IP address blocks:        177.126.152.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:68:f2:ce:db:2b:7f:3b:6c:52:a3:98:af:8e:d5:a4:57:1e:68:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
        Validity
            Not Before: Aug 15 18:35:31 2024 GMT
            Not After : Aug 14 18:40:31 2025 GMT
        Subject: CN=DE25960A8779A4DD580D9B2F06E67CFC634D067D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:89:20:88:55:2a:9e:4f:d5:03:7f:bb:e4:
                    ed:45:d1:4f:40:40:3a:b0:0c:98:bf:d8:3f:9b:fa:
                    ce:f5:bf:e0:bf:39:ea:18:59:bd:87:f9:fc:6e:2c:
                    5a:d4:3f:18:cc:2a:07:d3:7f:0c:14:6c:3f:6a:45:
                    e7:00:f9:13:b9:e0:bb:80:b4:e2:12:a7:6d:96:c1:
                    3d:bf:7d:4f:5c:98:4e:f0:13:f2:a1:49:31:3b:f3:
                    55:76:8c:34:83:e8:55:30:2e:5e:d7:47:a3:58:33:
                    b7:cb:e5:f2:3f:43:44:8f:d9:63:34:aa:31:12:5f:
                    ed:92:66:6e:5c:27:e4:5d:cd:f7:40:76:eb:40:50:
                    e7:85:ec:53:8d:b9:41:45:ea:e3:7a:e4:10:be:77:
                    96:15:3d:cb:ad:c6:83:e9:20:09:d8:e4:0d:6a:7c:
                    d9:8d:e5:ce:8a:4e:38:a1:84:b8:78:bf:82:3a:6f:
                    9a:19:e6:f3:e9:0c:42:3f:5f:f0:ad:a7:6e:8d:05:
                    0d:aa:20:af:81:ed:85:04:b3:d0:9c:c1:a8:3d:bc:
                    95:1c:03:42:77:38:6a:c5:d1:e6:60:ae:c4:2a:15:
                    cb:9a:f3:68:cb:4d:75:ec:09:67:c0:28:ee:7e:33:
                    58:a0:43:ad:7b:df:05:8f:46:1a:de:54:87:f7:c2:
                    ed:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:25:96:0A:87:79:A4:DD:58:0D:9B:2F:06:E6:7C:FC:63:4D:06:7D
            X509v3 Authority Key Identifier:
                keyid:DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3137372e3132362e3135322e302f32322d3232203d3e20323633353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:e5:a4:0c:ae:d8:80:31:33:0a:13:ad:d4:5b:9a:66:2b:74:
         38:cb:54:7c:83:d0:e4:49:22:d4:d6:d1:7b:4a:e8:15:eb:02:
         d9:5f:f4:74:86:05:c6:25:b8:ba:65:d1:71:75:2b:60:ba:27:
         69:0d:f5:ff:8f:3f:6b:cf:07:a8:fe:5f:1c:a4:db:1c:cf:bf:
         2f:a0:72:4b:33:9d:99:7a:50:b0:a0:f2:7a:10:98:d1:3a:73:
         89:2c:1a:e2:8d:87:24:71:a1:0d:1c:60:ae:fe:c1:d4:57:2c:
         e5:97:bb:b1:94:ff:6b:65:71:d5:a1:b0:03:c9:f1:2c:06:ae:
         a2:f1:9c:70:31:42:f8:96:fe:0c:bf:33:79:2a:c1:d7:07:38:
         18:66:7f:48:3d:65:d9:48:a1:c6:6c:3a:24:64:68:8c:42:34:
         ec:81:08:e2:01:c8:f9:29:4a:87:7b:46:9e:77:26:9e:ab:87:
         a9:a0:2c:83:66:67:57:b2:64:ef:5b:dc:3f:e2:45:c1:56:8e:
         bd:9e:8b:69:66:14:85:16:c2:c7:c4:82:52:5c:b2:0b:b8:cf:
         79:fe:54:ee:d5:83:99:93:6f:1d:7b:36:25:d7:8d:97:42:ef:
         42:82:2e:79:77:e2:83:6a:09:e9:51:ea:9c:04:0f:b1:53:63:
         c9:7a:c5:2c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYWjyztsrfztsUqOYr47VpFceaOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREFCMjYyRjFDREUwRDY1NkQxRUQyRjk0OTU1QkRBMkI4
QzgxNEU3MjAeFw0yNDA4MTUxODM1MzFaFw0yNTA4MTQxODQwMzFaMDMxMTAvBgNV
BAMTKERFMjU5NjBBODc3OUE0REQ1ODBEOUIyRjA2RTY3Q0ZDNjM0RDA2N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGTokgiFUqnk/VA3+75O1F0U9A
QDqwDJi/2D+b+s71v+C/OeoYWb2H+fxuLFrUPxjMKgfTfwwUbD9qRecA+RO54LuA
tOISp22WwT2/fU9cmE7wE/KhSTE781V2jDSD6FUwLl7XR6NYM7fL5fI/Q0SP2WM0
qjESX+2SZm5cJ+RdzfdAdutAUOeF7FONuUFF6uN65BC+d5YVPcutxoPpIAnY5A1q
fNmN5c6KTjihhLh4v4I6b5oZ5vPpDEI/X/Ctp26NBQ2qIK+B7YUEs9Ccwag9vJUc
A0J3OGrF0eZgrsQqFcua82jLTXXsCWfAKO5+M1igQ6173wWPRhreVIf3wu2ZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3iWWCod5pN1YDZsvBuZ8/GNNBn0wHwYDVR0j
BBgwFoAU2rJi8c3g1lbR7S+UlVvaK4yBTnIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjl0Wnd5cHlFRHZFeVhKa0dXeGJUTlVIcnZiZ2kzaEdwQ0xxcXBUSDZy
ZXkvMC9EQUIyNjJGMUNERTBENjU2RDFFRDJGOTQ5NTVCREEyQjhDODE0RTcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBQjI2MkYxQ0RFMEQ2NTZE
MUVEMkY5NDk1NUJEQTJCOEM4MTRFNzIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o5dFp3eXB5RUR2RXlYSmtHV3hiVE5VSHJ2YmdpM2hHcENMcXFwVEg2cmV5LzAv
MzEzNzM3MmUzMTMyMzYyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM1MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArF+mDANBgkqhkiG9w0BAQsFAAOCAQEAGOWk
DK7YgDEzChOt1FuaZit0OMtUfIPQ5Eki1NbRe0roFesC2V/0dIYFxiW4umXRcXUr
YLonaQ31/48/a88HqP5fHKTbHM+/L6BySzOdmXpQsKDyehCY0TpziSwa4o2HJHGh
DRxgrv7B1Fcs5Ze7sZT/a2Vx1aGwA8nxLAauovGccDFC+Jb+DL8zeSrB1wc4GGZ/
SD1l2Uihxmw6JGRojEI07IEI4gHI+SlKh3tGnncmnquHqaAsg2ZnV7Jk71vcP+JF
wVaOvZ6LaWYUhRbCx8SCUlyyC7jPef5U7tWDmZNvHXs2JdeNl0LvQoIueXfig2oJ
6VHqnAQPsVNjyXrFLA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:03 2025 by rpki-client