Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231362e302f32312d3234203d3e203532383438.roa
File:                     3137372e38352e3231362e302f32312d3234203d3e203532383438.roa (raw, json)
Hash identifier:          5vhOlcEWasU0eeFJrrzB8hZgh9OWA744jicDCrVQuG8=
Subject key identifier:   C1:3E:FC:D4:D9:14:9E:1C:66:1F:E1:B3:DE:08:56:C2:43:9A:37:E8
Certificate issuer:       /CN=F805B6A0C0363F0117691C0481A12D30CEF456BF
Certificate serial:       4B6A1F76B09F4CF804F96FE958B9F86083C66175
Authority key identifier: F8:05:B6:A0:C0:36:3F:01:17:69:1C:04:81:A1:2D:30:CE:F4:56:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805B6A0C0363F0117691C0481A12D30CEF456BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231362e302f32312d3234203d3e203532383438.roa
Signing time:             Wed 18 Dec 2024 17:19:39 +0000
ROA not before:           Wed 18 Dec 2024 17:14:39 +0000
ROA not after:            Wed 17 Dec 2025 17:19:39 +0000
asID:                     52848
IP address blocks:        177.85.216.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6a:1f:76:b0:9f:4c:f8:04:f9:6f:e9:58:b9:f8:60:83:c6:61:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F805B6A0C0363F0117691C0481A12D30CEF456BF
        Validity
            Not Before: Dec 18 17:14:39 2024 GMT
            Not After : Dec 17 17:19:39 2025 GMT
        Subject: CN=C13EFCD4D9149E1C661FE1B3DE0856C2439A37E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1c:08:5d:4b:89:fe:e1:6f:90:cb:56:22:31:
                    64:ba:14:b8:69:be:cd:f1:98:c0:f7:8a:4e:3c:3c:
                    11:26:64:72:7f:c8:3c:16:0a:6b:74:a6:30:63:36:
                    b6:c3:48:88:53:96:fc:67:16:20:17:11:f9:10:fc:
                    47:36:50:15:0f:8f:d5:91:1d:64:4d:0c:5e:4c:1c:
                    23:9d:53:3e:6f:2d:33:4f:2c:d5:a5:43:94:42:4f:
                    57:20:8f:94:12:ad:f3:c7:ae:ce:96:9d:d3:79:71:
                    f1:bb:2c:98:cc:55:ef:ac:a5:b4:37:c0:5e:b0:25:
                    55:f8:e0:1b:7a:ac:67:78:ed:fb:81:82:52:fe:25:
                    c9:d7:ff:de:df:b5:02:67:8b:7d:c5:c2:f2:51:4f:
                    2a:26:97:c6:26:20:d2:ce:2d:b2:d1:31:19:e3:69:
                    b2:96:fb:6a:60:27:82:a2:e3:b4:06:9d:9e:d5:52:
                    a9:04:5d:39:e7:79:58:58:e4:a7:79:9f:93:c6:f3:
                    db:51:7a:17:ea:13:18:89:86:69:18:23:08:31:04:
                    17:c0:72:03:93:cc:88:d5:e9:0f:e1:90:b4:17:86:
                    27:0c:b5:7f:f3:48:82:f9:e5:5c:9e:4d:f1:d9:6f:
                    8d:a9:c4:aa:40:71:7e:d1:87:81:01:8c:13:57:27:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3E:FC:D4:D9:14:9E:1C:66:1F:E1:B3:DE:08:56:C2:43:9A:37:E8
            X509v3 Authority Key Identifier:
                keyid:F8:05:B6:A0:C0:36:3F:01:17:69:1C:04:81:A1:2D:30:CE:F4:56:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/F805B6A0C0363F0117691C0481A12D30CEF456BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805B6A0C0363F0117691C0481A12D30CEF456BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231362e302f32312d3234203d3e203532383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:49:59:25:d5:3d:8a:0f:e4:16:36:65:39:c0:50:54:df:bc:
         2e:4e:f9:77:4f:8a:64:ea:28:fa:d0:ed:4e:91:9f:10:e9:ef:
         f3:d2:b2:56:bb:3a:e8:90:b0:c1:db:a7:da:ff:87:40:d9:15:
         3f:82:d8:f5:75:d4:76:05:ac:69:ea:3e:9d:aa:cb:4f:c5:3c:
         9e:11:46:85:83:9f:72:72:a9:e9:ab:4f:b5:b0:41:54:ca:87:
         3e:e2:e0:7f:db:bc:49:9f:c1:ac:2b:f1:1f:70:1e:b2:16:88:
         11:40:ec:bf:26:ae:60:ca:df:52:f0:35:b1:5a:33:06:4e:7a:
         80:27:d6:23:3a:d7:e4:a9:b8:8a:50:5b:c4:43:8b:5f:ca:e0:
         da:91:71:84:59:bc:7e:45:95:21:c9:83:fb:92:4c:a1:18:62:
         4a:f5:aa:3e:ff:ad:c5:67:09:39:c2:47:51:af:e7:50:65:60:
         98:61:cc:aa:10:5b:6c:bd:f0:52:d3:f3:fe:f4:5f:d4:3c:fe:
         07:51:9a:02:d1:b4:b5:09:b2:07:69:a4:43:a5:2c:fc:b5:a4:
         ab:4c:bb:b8:83:12:7d:89:ca:02:3a:b2:c1:6a:05:c1:8e:8e:
         81:0b:b9:04:18:64:64:e2:89:e2:8b:f9:16:db:01:38:e7:40:
         dc:a6:b3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:28:00 2025 by rpki-client