Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/1/3138372e31372e3136302e302f32302d3234203d3e203238323633.roa
File:                     3138372e31372e3136302e302f32302d3234203d3e203238323633.roa (raw, json)
Hash identifier:          NyMYyEoJn5FoM77/0x05e+FYRMxcoVeKAFSCykdSF0c=
Subject key identifier:   74:D7:E8:BB:A4:CC:1D:B8:29:BA:D3:54:90:41:BB:5F:A5:E9:4E:77
Certificate issuer:       /CN=EDDDDFE49BBF506DDE4C0DF6337BE4A05DCD12B8
Certificate serial:       659DA51B6882B6AD03DEE81DC0E4DB3AFB684614
Authority key identifier: ED:DD:DF:E4:9B:BF:50:6D:DE:4C:0D:F6:33:7B:E4:A0:5D:CD:12:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDDDDFE49BBF506DDE4C0DF6337BE4A05DCD12B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/1/3138372e31372e3136302e302f32302d3234203d3e203238323633.roa
Signing time:             Wed 12 Jun 2024 13:04:29 +0000
ROA not before:           Wed 12 Jun 2024 12:59:29 +0000
ROA not after:            Wed 11 Jun 2025 13:04:29 +0000
asID:                     28263
IP address blocks:        187.17.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9d:a5:1b:68:82:b6:ad:03:de:e8:1d:c0:e4:db:3a:fb:68:46:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDDDDFE49BBF506DDE4C0DF6337BE4A05DCD12B8
        Validity
            Not Before: Jun 12 12:59:29 2024 GMT
            Not After : Jun 11 13:04:29 2025 GMT
        Subject: CN=74D7E8BBA4CC1DB829BAD3549041BB5FA5E94E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:dc:2e:30:33:88:73:ab:fb:ea:d3:bc:5b:
                    c0:43:6e:a1:ff:c9:91:e2:0f:ca:af:40:f8:fe:a7:
                    0a:51:d8:a6:7a:a0:dc:bd:4f:cc:9e:46:28:3a:91:
                    75:f4:81:a3:c3:3b:06:5f:8a:e4:0f:69:df:d5:a7:
                    e6:f0:3b:80:49:4e:64:18:79:da:76:e1:6a:b9:e1:
                    ec:04:47:9c:03:2c:97:d2:cc:5c:cc:4c:4a:14:5f:
                    e6:85:3d:25:7e:ab:b4:60:43:53:27:8e:cc:e4:2d:
                    cd:bf:9d:ea:b7:7c:ae:c3:4d:1c:91:3b:80:d3:bb:
                    35:fb:2a:9e:4d:41:6b:51:d7:83:55:cb:a9:5a:4f:
                    c0:f5:51:61:12:2b:1a:52:5a:9b:64:89:01:3d:63:
                    d2:a1:b7:55:55:c2:36:d0:44:62:3b:28:9e:01:b5:
                    d7:e9:6e:7f:b7:ed:1b:48:6f:52:f8:14:fa:17:ab:
                    2f:49:cf:f8:c8:4f:c3:86:6a:9e:43:ff:01:37:c8:
                    fd:7f:5a:11:9c:4a:5a:8a:95:16:4f:38:06:d5:31:
                    6b:f8:ad:ed:5c:72:96:2c:29:56:dd:50:69:46:13:
                    8a:eb:e2:27:65:3d:79:f5:ad:07:1a:93:70:ea:40:
                    4f:ee:72:50:9c:aa:6a:b6:d5:32:a7:0d:09:c1:a9:
                    05:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D7:E8:BB:A4:CC:1D:B8:29:BA:D3:54:90:41:BB:5F:A5:E9:4E:77
            X509v3 Authority Key Identifier:
                keyid:ED:DD:DF:E4:9B:BF:50:6D:DE:4C:0D:F6:33:7B:E4:A0:5D:CD:12:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/1/EDDDDFE49BBF506DDE4C0DF6337BE4A05DCD12B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDDDDFE49BBF506DDE4C0DF6337BE4A05DCD12B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/1/3138372e31372e3136302e302f32302d3234203d3e203238323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:40:a4:2a:f9:58:52:1b:83:d9:1e:10:b1:c2:c5:81:6c:82:
         1c:bf:c4:b5:a5:0e:3a:00:01:02:a4:12:20:a6:05:19:4c:41:
         e0:51:7a:a7:49:af:15:5d:e7:5d:6a:51:e4:a7:da:54:ff:4a:
         41:c6:77:00:92:8d:19:0f:6b:4a:13:19:f3:99:d4:b6:e4:cc:
         1a:ba:55:f7:fb:43:fe:38:81:9c:85:9e:d1:f1:21:17:e5:b4:
         f0:43:c4:bf:c0:0b:2d:bb:d4:aa:00:34:f7:be:25:68:b7:64:
         76:ad:dd:40:9d:e1:7b:02:78:6c:eb:b9:16:5b:f9:af:43:20:
         d7:9a:a0:ca:b0:cf:92:a8:15:06:59:89:1d:68:19:0b:35:5f:
         ea:2d:af:39:96:92:75:28:c4:a1:38:f4:27:b0:e4:79:ad:8f:
         1f:0e:9c:a9:5e:8d:b9:c8:2d:97:f5:a5:f6:75:b0:54:1d:cc:
         30:71:fb:91:04:35:87:bf:70:fd:ec:f1:0b:ea:67:4b:dd:63:
         d2:ad:55:34:b4:9f:5c:c5:d0:d0:50:96:e3:4b:bb:b3:e8:b3:
         9e:b5:85:c0:75:3b:78:73:24:0d:cd:9f:79:0f:d4:30:cb:cd:
         70:5f:e1:3a:b7:71:8e:f5:99:1e:0d:92:9d:f8:22:6f:56:f5:
         ff:48:bf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:44:17 2025 by rpki-client