Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3139302e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3139302e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          LYy3w7F1aZFCV3/eWWsrYqdhjyl/8+Px3wZUsIYNBIE=
Subject key identifier:   50:C4:59:58:8E:D9:61:C9:EA:71:43:67:EB:FC:35:DB:41:F8:AE:2D
Certificate issuer:       /CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
Certificate serial:       1D18AF347AD62ECB45386D56F1FA029EE3522992
Authority key identifier: 22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3139302e302f32342d3234203d3e203238353837.roa
Signing time:             Mon 15 Jul 2024 00:15:42 +0000
ROA not before:           Mon 15 Jul 2024 00:10:42 +0000
ROA not after:            Mon 14 Jul 2025 00:15:42 +0000
asID:                     28587
IP address blocks:        177.128.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:18:af:34:7a:d6:2e:cb:45:38:6d:56:f1:fa:02:9e:e3:52:29:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2288FF0341950A63A6215C01F2FF9D9291FEB946
        Validity
            Not Before: Jul 15 00:10:42 2024 GMT
            Not After : Jul 14 00:15:42 2025 GMT
        Subject: CN=50C459588ED961C9EA714367EBFC35DB41F8AE2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5e:99:61:86:60:af:8f:ea:bd:bc:22:1b:e8:
                    83:ba:4b:02:b2:28:22:5c:b3:dc:fb:28:47:1e:78:
                    9d:e0:f2:94:36:7c:36:c7:2f:f6:97:16:f3:f6:d1:
                    3e:88:b5:fc:5b:d8:88:2f:30:2d:b1:62:d5:ce:bf:
                    3b:79:dd:dc:2a:e3:89:f0:f2:5c:80:aa:bf:bb:5b:
                    c9:07:bc:7a:ea:5e:6f:e6:23:ed:f4:e2:dc:b7:32:
                    c7:fb:c5:80:be:bc:47:69:4c:da:f2:d8:47:28:8c:
                    92:14:b9:f4:1e:a2:c2:fc:13:7f:2e:b9:fa:dd:fe:
                    6a:e0:3c:b4:d6:f3:8a:32:f5:36:e0:72:6d:88:0b:
                    b0:13:ec:4f:cb:80:e9:52:4b:10:bb:67:9f:fe:ae:
                    37:dc:cf:56:40:78:f1:95:a8:8f:b8:e7:91:c9:fe:
                    94:6d:7a:66:ad:98:6d:2a:9e:01:ce:fb:5c:5c:7a:
                    22:e3:75:fc:ab:c2:ec:f1:73:af:b5:ee:1a:df:04:
                    59:6b:9b:5e:bf:7e:6e:e4:ac:9d:6f:6f:18:7b:ba:
                    87:b0:ac:5d:0e:6a:11:33:44:18:0c:a5:b7:af:7e:
                    24:2d:eb:78:12:00:52:0e:e0:d2:d6:a4:13:3b:c6:
                    6e:e9:ab:52:e3:c1:77:17:2b:4d:47:96:98:12:68:
                    e2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C4:59:58:8E:D9:61:C9:EA:71:43:67:EB:FC:35:DB:41:F8:AE:2D
            X509v3 Authority Key Identifier:
                keyid:22:88:FF:03:41:95:0A:63:A6:21:5C:01:F2:FF:9D:92:91:FE:B9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/2288FF0341950A63A6215C01F2FF9D9291FEB946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2288FF0341950A63A6215C01F2FF9D9291FEB946.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pEeBi3Dx4fRqNbFbbPW45SsqCCBMSM7fBkyGQNHCy3z/0/3137372e3132382e3139302e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:ce:97:3a:6f:61:b6:8d:24:55:19:74:b9:3b:7a:b1:46:da:
         19:cb:3c:f4:58:80:d9:14:d9:94:e4:82:cd:c0:1e:f5:23:e7:
         2f:08:b6:2f:6e:4f:06:e6:bb:35:7c:e2:02:37:96:3b:51:95:
         07:6f:2d:86:16:77:52:45:e0:d9:e7:3f:1b:cf:43:bc:c3:31:
         70:f6:55:97:cb:aa:61:ff:0b:b1:69:c4:a6:fc:28:64:a2:f9:
         b9:ef:6c:6b:6f:35:5f:fc:78:1f:15:3d:65:26:4a:5a:1b:a0:
         7b:6d:3c:13:69:b8:15:08:37:87:6f:4d:1d:cb:a1:86:ab:91:
         e9:11:38:d2:40:c9:15:dc:f9:9a:08:64:bd:22:17:18:27:1b:
         dd:40:3f:9a:ef:28:32:53:a3:d3:b2:aa:b5:ee:ea:6a:b0:a2:
         ee:84:cb:ee:e8:07:39:37:9d:0a:07:1d:b7:1f:34:49:8e:17:
         62:5e:26:f6:23:3b:e6:a2:1a:50:a3:8a:4c:d8:6d:68:1e:a4:
         93:26:a9:60:b4:0e:7e:d7:76:37:a3:01:68:a1:73:bd:95:64:
         33:8c:2e:88:07:99:30:23:04:00:f7:e7:85:bb:ec:81:dc:94:
         3c:7a:e8:88:bf:d2:b9:0c:80:0a:70:01:51:4f:48:29:ae:5b:
         72:57:9f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:41 2025 by rpki-client