Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231302e302f32342d3234203d3e203532383438.roa
File:                     3137372e38352e3231302e302f32342d3234203d3e203532383438.roa (raw, json)
Hash identifier:          KHH6GgvFbPC5GDU/Oevlb0h3F+Y+ni2Z3lleFNgtoxU=
Subject key identifier:   5D:89:43:31:14:D1:DD:4D:97:E8:E1:96:2B:1E:05:50:32:AB:B8:BE
Certificate issuer:       /CN=F805B6A0C0363F0117691C0481A12D30CEF456BF
Certificate serial:       03466935F5DF751449D16F9203C2C641F9D2ACF0
Authority key identifier: F8:05:B6:A0:C0:36:3F:01:17:69:1C:04:81:A1:2D:30:CE:F4:56:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805B6A0C0363F0117691C0481A12D30CEF456BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231302e302f32342d3234203d3e203532383438.roa
Signing time:             Thu 13 Feb 2025 11:34:48 +0000
ROA not before:           Thu 13 Feb 2025 11:29:48 +0000
ROA not after:            Thu 12 Feb 2026 11:34:48 +0000
asID:                     52848
IP address blocks:        177.85.210.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:46:69:35:f5:df:75:14:49:d1:6f:92:03:c2:c6:41:f9:d2:ac:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F805B6A0C0363F0117691C0481A12D30CEF456BF
        Validity
            Not Before: Feb 13 11:29:48 2025 GMT
            Not After : Feb 12 11:34:48 2026 GMT
        Subject: CN=5D89433114D1DD4D97E8E1962B1E055032ABB8BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:35:a0:b1:b4:ad:e3:a3:8e:ef:11:f5:61:
                    93:2f:c1:69:ac:4b:58:c4:28:26:8b:03:74:e0:45:
                    ec:69:ed:31:5a:dc:0d:c1:81:be:c0:59:8f:a0:c4:
                    d0:a1:ff:e9:45:07:8e:59:a6:4e:3e:a4:c0:33:a7:
                    4d:ec:5d:07:9b:9a:b2:b0:9a:af:e8:da:fa:b1:23:
                    1a:d3:8f:89:92:aa:4d:64:f4:3f:19:7e:09:b0:42:
                    43:7a:c6:4c:3a:d6:1c:3e:a2:7b:7b:ff:8f:fb:f6:
                    ad:61:66:02:cd:42:99:f3:7a:f8:72:95:2e:38:6b:
                    49:ae:c4:da:a4:9d:7e:68:d3:7b:0d:13:0a:62:58:
                    fb:ac:96:72:3c:bb:03:33:37:cd:01:1c:2b:ac:f6:
                    0a:b9:38:d7:3a:b7:5f:13:48:c1:a1:69:c5:25:a1:
                    37:f6:ec:59:7c:14:48:ff:6b:9a:44:4d:9c:9f:94:
                    43:67:65:d7:1f:ed:c3:61:c5:d1:95:34:b4:4d:a6:
                    ed:bd:6c:bc:7a:4f:65:62:60:1a:72:c0:15:31:3b:
                    30:44:2b:46:40:e5:33:22:15:e1:b8:ac:ba:3d:ba:
                    ef:54:86:9c:e2:a4:e7:51:6b:02:dd:af:4b:88:10:
                    14:8c:66:0a:e7:a0:61:0b:6b:9c:84:82:bd:a0:d8:
                    b0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:89:43:31:14:D1:DD:4D:97:E8:E1:96:2B:1E:05:50:32:AB:B8:BE
            X509v3 Authority Key Identifier:
                keyid:F8:05:B6:A0:C0:36:3F:01:17:69:1C:04:81:A1:2D:30:CE:F4:56:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/F805B6A0C0363F0117691C0481A12D30CEF456BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805B6A0C0363F0117691C0481A12D30CEF456BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231302e302f32342d3234203d3e203532383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:6a:82:35:c3:21:e7:10:c5:ab:a4:63:e4:b1:15:9a:89:f8:
         0c:77:18:cd:55:3b:8c:71:da:0d:6d:f5:d7:c0:89:12:c0:d9:
         fa:d2:e4:ad:d8:d3:36:19:d7:01:78:74:4b:e4:e1:f5:11:f4:
         1a:b1:40:a8:a3:70:4d:89:0a:40:a9:0c:3a:e1:a7:7f:b0:f9:
         61:21:e9:bd:3d:62:78:46:83:23:7b:87:dc:9f:75:29:57:db:
         58:89:97:dd:71:a7:d1:08:a6:77:eb:e5:66:a6:d5:16:74:17:
         b7:5d:3e:1d:af:25:4b:da:c6:e7:d7:1b:a5:04:22:89:be:92:
         d0:09:f8:7a:37:a0:26:6c:40:ef:fe:ab:71:13:ae:89:dc:a6:
         8e:ca:7e:06:a3:02:d4:6c:85:87:b7:08:10:7c:cc:75:39:37:
         49:1b:1f:f1:82:01:8c:7e:82:d6:1f:92:3d:40:0b:8b:02:07:
         82:10:37:77:7f:91:33:40:18:90:46:de:36:a7:21:54:d9:92:
         61:45:86:88:88:5f:73:a3:aa:c8:d9:a4:f4:21:02:26:d4:81:
         9a:f7:05:f5:02:f8:8f:ae:32:6f:49:46:73:55:75:29:58:db:
         6d:a6:a6:83:39:b0:4a:5d:2c:93:39:50:6f:14:e7:12:9b:e5:
         2b:7d:05:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:11:19 2025 by rpki-client