Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2B8nEJ9v3a8XxAjxWnsDvtv6qxTrAbfKF6GwJ6xRGkyv/0/3137372e31322e38342e302f32322d3232203d3e20323633303331.roa
File:                     3137372e31322e38342e302f32322d3232203d3e20323633303331.roa (raw, json)
Hash identifier:          UmB2pHznHFDX/KAI2+4miJn/dkpvurBHi8ufzlKTUHU=
Subject key identifier:   B9:1E:45:1A:1E:1B:1E:4A:F2:F1:70:A7:FE:93:43:2E:94:8E:CE:38
Certificate issuer:       /CN=0F0B5D8555E819DF9D409EF98A2B34F26DAA8BC6
Certificate serial:       6AB205DD4FAD99271723A8241645BDCE258DC51B
Authority key identifier: 0F:0B:5D:85:55:E8:19:DF:9D:40:9E:F9:8A:2B:34:F2:6D:AA:8B:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F0B5D8555E819DF9D409EF98A2B34F26DAA8BC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2B8nEJ9v3a8XxAjxWnsDvtv6qxTrAbfKF6GwJ6xRGkyv/0/3137372e31322e38342e302f32322d3232203d3e20323633303331.roa
Signing time:             Thu 10 Nov 2022 17:09:15 +0000
ROA not before:           Thu 10 Nov 2022 17:04:15 +0000
ROA not after:            Thu 09 Nov 2023 17:09:15 +0000
asID:                     263031
IP address blocks:        177.12.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b2:05:dd:4f:ad:99:27:17:23:a8:24:16:45:bd:ce:25:8d:c5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F0B5D8555E819DF9D409EF98A2B34F26DAA8BC6
        Validity
            Not Before: Nov 10 17:04:15 2022 GMT
            Not After : Nov  9 17:09:15 2023 GMT
        Subject: CN=B91E451A1E1B1E4AF2F170A7FE93432E948ECE38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:85:88:41:56:c1:9d:e6:13:d2:2f:bf:bf:
                    31:19:f0:dc:5f:d2:58:71:49:9a:b1:13:a3:d8:6e:
                    ba:02:7c:e7:02:dd:33:06:f2:1a:4f:be:fd:a8:b9:
                    b9:ca:38:1f:d5:75:a8:cc:46:ed:60:53:4e:9b:ff:
                    86:a1:4c:7a:f6:a1:d2:72:33:f7:6e:de:e5:8f:d6:
                    00:67:b6:3f:76:62:e3:3c:36:a4:03:18:17:5b:fc:
                    22:4f:ce:db:dc:00:41:fa:6a:53:0c:c8:d2:9e:55:
                    35:a5:98:30:83:b0:18:71:16:9c:b6:30:08:3b:25:
                    c6:33:b9:6b:a9:66:ab:52:6a:21:af:58:29:c8:1c:
                    16:2d:fc:7c:58:c9:83:97:05:63:08:3d:0d:26:2f:
                    ca:e8:27:f1:e7:d6:c6:0b:1b:12:59:94:03:c5:c4:
                    ad:bf:a3:ff:6e:c7:b5:17:89:68:f4:4f:fe:bf:db:
                    d9:c2:f0:4e:cc:09:a6:d1:38:88:6d:ae:cd:cf:cc:
                    b2:60:ff:35:a2:91:b9:44:e0:fd:b9:d7:db:cb:1d:
                    3c:eb:9e:fe:97:15:d6:7a:17:ea:28:18:51:c4:6f:
                    79:db:9c:13:b7:e1:fd:09:8f:f4:d6:9c:7d:4c:dd:
                    c5:75:69:f5:c9:73:3f:f1:e2:67:ad:19:8b:26:ca:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1E:45:1A:1E:1B:1E:4A:F2:F1:70:A7:FE:93:43:2E:94:8E:CE:38
            X509v3 Authority Key Identifier:
                keyid:0F:0B:5D:85:55:E8:19:DF:9D:40:9E:F9:8A:2B:34:F2:6D:AA:8B:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2B8nEJ9v3a8XxAjxWnsDvtv6qxTrAbfKF6GwJ6xRGkyv/0/0F0B5D8555E819DF9D409EF98A2B34F26DAA8BC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F0B5D8555E819DF9D409EF98A2B34F26DAA8BC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2B8nEJ9v3a8XxAjxWnsDvtv6qxTrAbfKF6GwJ6xRGkyv/0/3137372e31322e38342e302f32322d3232203d3e20323633303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:86:38:59:12:68:b3:13:c3:e5:84:0d:e3:f8:51:ae:3e:bb:
         5c:fd:3b:0e:a3:f4:5e:0a:03:41:73:6a:21:ac:d4:21:d8:bf:
         9b:d4:aa:ad:3f:78:3c:2a:27:40:e4:87:8e:85:a8:4c:01:34:
         ff:0e:0f:3f:23:51:50:75:ca:48:ec:61:c2:76:3d:65:b8:92:
         d6:91:5d:04:df:55:45:df:fe:21:cb:ec:dc:d3:07:6e:86:2d:
         03:92:05:9b:0d:4a:f7:f8:9d:02:42:f0:a4:b8:04:05:7c:3e:
         9a:8e:e3:49:4a:10:73:c0:48:53:7b:03:d8:c3:ef:2a:94:87:
         30:eb:52:de:69:a3:f9:b6:b2:9e:64:98:87:ff:7c:67:61:ab:
         a7:ee:d8:a4:bf:0f:63:12:07:f2:e4:4a:00:2d:9d:44:a5:51:
         40:a7:7d:81:4a:0b:73:c4:dc:04:58:a3:31:97:48:b4:d4:9c:
         b9:43:8f:9f:f0:b7:d0:3d:ed:23:41:53:2e:84:92:fc:ac:98:
         27:dd:d2:92:fc:ba:31:21:3a:36:fc:c8:c8:cb:a8:c7:c1:da:
         e5:ca:05:d1:60:68:59:75:8c:b0:77:77:99:1c:79:6e:06:60:
         a6:61:fd:54:fb:ec:a4:0b:fd:22:1c:d6:83:69:a0:80:c5:6e:
         c6:3d:eb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:24 2025 by rpki-client