Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2B8nEJ9v3a8XxAjxWnsDvtv6qxTrAbfKF6GwJ6xRGkyv/0/3137372e31322e38312e302f32342d3234203d3e203532393637.roa
File:                     3137372e31322e38312e302f32342d3234203d3e203532393637.roa (raw, json)
Hash identifier:          ZoStBbo9wAOWHgNDX/yhlHqEEG5l+7djkkVzUqHjAAc=
Subject key identifier:   25:F3:D1:B1:F4:60:2F:D1:AC:6B:DB:29:2C:E1:2E:02:3F:8A:0F:06
Certificate issuer:       /CN=0F0B5D8555E819DF9D409EF98A2B34F26DAA8BC6
Certificate serial:       35CF75FBE33EB20AFD16059B837C5E83082161EA
Authority key identifier: 0F:0B:5D:85:55:E8:19:DF:9D:40:9E:F9:8A:2B:34:F2:6D:AA:8B:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F0B5D8555E819DF9D409EF98A2B34F26DAA8BC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2B8nEJ9v3a8XxAjxWnsDvtv6qxTrAbfKF6GwJ6xRGkyv/0/3137372e31322e38312e302f32342d3234203d3e203532393637.roa
Signing time:             Thu 10 Nov 2022 17:09:32 +0000
ROA not before:           Thu 10 Nov 2022 17:04:32 +0000
ROA not after:            Thu 09 Nov 2023 17:09:32 +0000
asID:                     52967
IP address blocks:        177.12.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:cf:75:fb:e3:3e:b2:0a:fd:16:05:9b:83:7c:5e:83:08:21:61:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F0B5D8555E819DF9D409EF98A2B34F26DAA8BC6
        Validity
            Not Before: Nov 10 17:04:32 2022 GMT
            Not After : Nov  9 17:09:32 2023 GMT
        Subject: CN=25F3D1B1F4602FD1AC6BDB292CE12E023F8A0F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:0e:83:92:db:d5:52:5a:8e:d7:e1:42:84:
                    74:ed:ce:70:ff:7a:85:65:d7:f7:35:a4:19:8c:08:
                    6a:47:b1:5c:97:2d:ff:d1:3c:1b:8a:b5:1b:ab:cd:
                    95:59:03:6a:8b:c6:58:ef:51:11:06:5b:01:d9:22:
                    d3:90:51:77:65:23:8f:e4:7d:ce:f3:18:c0:0b:e2:
                    46:ad:22:5e:0e:5a:56:e0:d0:bd:67:ae:ea:0f:0e:
                    78:5c:3e:90:a5:41:fc:88:b8:74:12:81:64:f8:18:
                    f5:f9:b3:7a:57:a1:f6:c3:30:f0:0a:5b:e4:f4:f2:
                    8d:cb:78:6a:7d:db:6c:47:b0:1e:c6:05:fe:ed:52:
                    9c:19:5c:24:af:07:79:dc:16:53:fe:28:a0:e1:00:
                    b1:65:6b:19:83:27:91:93:63:d8:d3:69:a5:35:70:
                    ec:56:bf:50:a5:61:5d:f9:2f:00:5c:10:13:b8:80:
                    66:68:5b:2b:9c:f7:14:3b:2f:da:6e:05:5f:35:55:
                    0c:bb:6a:7c:95:31:e5:14:fd:19:dc:71:0d:4e:de:
                    33:c2:e2:ad:05:9e:35:51:6c:5d:65:73:7f:13:5f:
                    26:25:d9:41:9b:6b:bf:5d:87:2c:0c:5e:a6:82:79:
                    ef:f8:51:c4:31:43:28:1b:e3:38:29:4e:e5:14:4f:
                    97:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F3:D1:B1:F4:60:2F:D1:AC:6B:DB:29:2C:E1:2E:02:3F:8A:0F:06
            X509v3 Authority Key Identifier:
                keyid:0F:0B:5D:85:55:E8:19:DF:9D:40:9E:F9:8A:2B:34:F2:6D:AA:8B:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2B8nEJ9v3a8XxAjxWnsDvtv6qxTrAbfKF6GwJ6xRGkyv/0/0F0B5D8555E819DF9D409EF98A2B34F26DAA8BC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F0B5D8555E819DF9D409EF98A2B34F26DAA8BC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2B8nEJ9v3a8XxAjxWnsDvtv6qxTrAbfKF6GwJ6xRGkyv/0/3137372e31322e38312e302f32342d3234203d3e203532393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:98:53:70:c8:5a:83:ad:fa:7d:25:1c:b1:75:2f:57:bb:40:
         3b:8a:16:98:5e:8a:1f:83:bc:86:8a:48:13:d3:3b:44:7f:27:
         ee:5f:9b:c1:58:cb:b4:8f:fb:6f:e8:b4:21:ab:32:79:fc:0a:
         5c:e8:1a:4d:5e:e4:bf:7d:78:e3:22:38:b4:39:fa:76:93:07:
         c5:3c:bf:f9:2c:43:31:32:df:2d:ef:69:fd:0f:f2:ec:04:a2:
         0f:73:3a:17:62:b7:45:fb:e1:20:d1:52:33:2a:3d:9d:e4:53:
         e3:17:11:e0:21:75:62:57:36:92:1d:73:e4:b0:66:0e:21:59:
         16:36:1d:74:2b:88:f9:fe:9f:e3:0b:86:de:ab:14:eb:03:52:
         3d:01:29:23:b8:6d:86:6c:39:9a:96:ac:68:d4:de:85:d7:68:
         0b:0a:f1:14:b3:39:7d:59:9b:7e:82:3a:08:7b:6b:f5:b3:0f:
         02:26:fd:dd:00:46:51:74:21:86:37:8f:23:ec:6e:55:f1:79:
         9d:d2:d7:ae:1e:08:ad:ff:55:73:91:32:c4:2d:4f:11:91:c5:
         4a:17:a4:98:2b:70:e4:7c:cb:47:f1:a2:ef:1d:ec:2a:78:c9:
         59:ba:52:a6:3a:57:70:68:e8:0b:79:27:a2:a2:7e:5b:d6:4b:
         da:f4:da:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:07 2025 by rpki-client