Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3137372e38342e3234382e302f32312d3332203d3e203238323630.roa
File:                     3137372e38342e3234382e302f32312d3332203d3e203238323630.roa (raw, json)
Hash identifier:          Y0tOSA+qwQhBY0heVrPSrKZ+HyKoRUVeZpYSvW+t1No=
Subject key identifier:   CA:07:A5:C7:31:9C:64:F5:83:70:72:16:25:ED:DE:20:55:61:9A:99
Certificate issuer:       /CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
Certificate serial:       262E50FE9C767BDDD4B30C5FB1B5F600E2EB17D5
Authority key identifier: 8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3137372e38342e3234382e302f32312d3332203d3e203238323630.roa
Signing time:             Sat 11 Mar 2023 01:19:51 +0000
ROA not before:           Sat 11 Mar 2023 01:14:51 +0000
ROA not after:            Sat 09 Mar 2024 01:19:51 +0000
asID:                     28260
IP address blocks:        177.84.248.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2e:50:fe:9c:76:7b:dd:d4:b3:0c:5f:b1:b5:f6:00:e2:eb:17:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
        Validity
            Not Before: Mar 11 01:14:51 2023 GMT
            Not After : Mar  9 01:19:51 2024 GMT
        Subject: CN=CA07A5C7319C64F58370721625EDDE2055619A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:a2:d7:8a:5b:d8:24:80:8f:ba:76:04:47:
                    99:d7:6f:63:5b:2c:a2:6f:60:c5:3b:95:c8:9c:ce:
                    d7:51:21:e4:3b:24:9b:08:c1:4c:33:e0:1d:a2:7d:
                    30:8d:e7:93:84:59:a5:8b:27:a0:53:73:a7:d3:63:
                    7c:ad:d6:af:b2:d3:1a:4d:b4:2b:d4:49:11:03:34:
                    51:cd:d4:1b:de:3b:de:16:2e:e1:0a:3d:e8:30:13:
                    85:e4:ed:ae:51:4c:af:e7:91:c2:68:b4:b2:2f:a5:
                    02:eb:2c:83:3e:6a:6c:85:b2:ce:ba:08:7c:7e:47:
                    6f:8f:f0:19:7a:ba:e6:f3:52:41:ab:1d:74:ef:17:
                    51:54:3a:5a:88:ae:e0:90:26:eb:45:10:4f:88:97:
                    2a:4e:91:d2:57:9f:9d:37:e7:19:50:39:24:69:6b:
                    ae:de:72:97:ed:22:79:c0:10:42:f8:7e:c5:bd:8c:
                    07:0a:7d:8b:04:64:7d:83:86:24:6b:a6:c8:59:e5:
                    48:0a:b6:9b:95:22:e5:74:25:2d:79:0c:7a:92:80:
                    d6:eb:a0:16:de:90:c5:8c:28:d0:51:bd:73:02:97:
                    e0:ac:38:eb:59:f8:89:81:da:e8:78:09:9a:d4:24:
                    9c:b4:66:67:dd:0c:a3:98:40:f8:6e:6b:34:cc:53:
                    a8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:07:A5:C7:31:9C:64:F5:83:70:72:16:25:ED:DE:20:55:61:9A:99
            X509v3 Authority Key Identifier:
                keyid:8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3137372e38342e3234382e302f32312d3332203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:33:37:58:b8:a5:78:e0:b5:6f:3c:15:43:95:56:e5:29:1e:
         4c:07:dd:c6:22:71:07:13:03:8d:78:6b:2e:f3:33:00:42:75:
         28:b0:bd:9a:15:f6:bd:94:e6:a1:ac:fe:1c:fb:a0:10:ea:2f:
         7b:f1:87:11:dc:ce:40:e1:dc:f9:c0:42:4e:ef:d5:92:fc:57:
         a8:ee:07:5b:d7:84:41:de:24:84:96:20:e6:95:3d:5f:2b:32:
         6e:58:e9:9f:06:ec:b5:c2:58:b2:c1:6e:02:57:90:e2:60:83:
         01:cd:f2:af:f8:af:b3:11:9d:74:07:48:10:d1:da:c6:a0:f5:
         1e:2c:94:e4:aa:81:28:14:12:02:2d:8d:dd:16:4b:60:2c:5d:
         49:b3:b6:7d:4a:cf:bc:ba:06:2a:3a:33:f5:66:e2:11:1a:06:
         18:7a:9c:49:ca:52:7f:9e:e0:f9:8d:5d:36:e8:3b:6f:00:d4:
         79:32:92:2c:fe:20:c6:fb:3a:d0:4b:02:8b:92:45:50:41:35:
         e3:57:ee:66:f0:fd:ae:87:f2:a5:c6:62:c8:83:e4:ce:fc:0c:
         d7:60:73:e8:f1:9a:a2:c3:c2:9a:b0:1a:e1:92:18:00:d4:04:
         fd:14:33:81:79:87:43:a6:15:b0:cf:0d:e1:11:1c:c4:a8:69:
         05:72:06:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:36 2025 by rpki-client