Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131322e302f32332d3233203d3e20323632343934.roa
File:                     3137372e36362e3131322e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          +8akd5/hnHhhFqY/hlkV/qeApAOixJ/ukSBNO47m1vg=
Subject key identifier:   41:E6:7B:C6:52:57:52:FD:1F:80:E8:5C:E7:3E:86:2A:54:0A:FD:79
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       4F7F065AEA44B176AD36E9D8DE93FB5E016EDA
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131322e302f32332d3233203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:51 +0000
ROA not before:           Thu 19 Sep 2024 14:06:51 +0000
ROA not after:            Thu 18 Sep 2025 14:11:51 +0000
asID:                     262494
IP address blocks:        177.66.112.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7f:06:5a:ea:44:b1:76:ad:36:e9:d8:de:93:fb:5e:01:6e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:51 2024 GMT
            Not After : Sep 18 14:11:51 2025 GMT
        Subject: CN=41E67BC6525752FD1F80E85CE73E862A540AFD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:17:68:a3:0d:4b:79:68:17:24:d7:22:d2:
                    8d:cb:76:bf:7f:4f:eb:e7:99:ab:73:3e:d2:be:f1:
                    1d:b3:48:ba:ec:18:cd:ee:7a:39:c0:3d:1d:49:77:
                    ad:a2:f9:71:43:93:8a:1e:08:cf:fe:f0:ec:01:1a:
                    2e:34:65:e4:f5:7e:df:88:39:a9:c0:63:23:55:21:
                    63:78:25:09:32:4d:43:8e:02:33:18:2e:6a:23:fa:
                    8d:3b:d1:ad:fe:5c:99:12:14:8f:6f:fe:cb:dc:a8:
                    c2:5e:07:47:2a:f6:71:02:29:54:d0:ed:00:67:3c:
                    f0:47:1d:15:85:f8:20:b9:8a:e5:b5:20:d9:70:a8:
                    fe:e9:e0:ab:36:55:c5:2a:96:c6:c1:38:00:0b:ab:
                    22:0c:98:39:6f:9d:b0:9b:9c:d6:36:1e:c4:f8:29:
                    60:2f:e8:04:bb:1e:7c:9f:a2:e7:77:50:3c:65:b0:
                    26:47:60:1d:c3:5b:7b:17:6f:25:99:5e:5e:b6:1c:
                    6f:2b:cc:7e:53:6e:76:c9:2d:a4:e0:d6:36:58:18:
                    2e:37:d2:c6:6d:87:aa:50:e0:2b:49:5e:6a:84:d1:
                    db:4f:8b:1b:f9:5d:e6:03:28:67:11:75:17:b8:36:
                    b3:53:c4:df:1c:5b:0b:3f:83:5c:9f:40:6a:0f:d5:
                    b8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E6:7B:C6:52:57:52:FD:1F:80:E8:5C:E7:3E:86:2A:54:0A:FD:79
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131322e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:df:f3:fe:ae:b5:cf:e9:d4:06:72:4d:59:f6:8a:15:29:9c:
         05:45:e1:1a:b9:7d:ad:14:a6:4d:86:3d:36:58:2a:30:00:99:
         d9:c0:d7:07:e1:3b:41:6d:d4:a5:c5:a4:13:bf:72:e8:15:e1:
         70:28:59:e1:67:94:09:31:fc:79:6c:65:cc:bf:e2:56:56:98:
         b6:01:3b:36:2c:72:64:13:73:8b:ce:a8:a5:e9:3b:a4:77:32:
         df:7b:95:d0:57:7e:f4:e3:5b:11:3a:4a:cc:67:1f:1a:c8:ec:
         ca:7a:3a:fa:6d:c9:3c:21:f3:e6:36:ab:6f:84:4e:a0:b8:87:
         23:b2:0d:43:6a:8a:ba:b0:56:cd:e5:4d:36:69:1e:26:63:55:
         3e:31:93:44:33:9f:90:72:cd:47:ef:f0:4e:59:50:ac:0a:c0:
         38:bb:28:42:78:87:74:71:8e:cc:19:bf:59:0b:f7:3f:7f:89:
         29:58:ba:72:18:63:d9:0b:16:7b:20:35:80:d7:c5:5b:cc:39:
         ce:ef:db:e2:5d:98:9a:f8:b2:ea:bc:92:d4:5e:40:69:58:4a:
         57:01:c1:70:d4:ff:3d:8b:17:76:02:81:af:a2:70:bd:59:2c:
         2e:90:19:03:b7:fb:16:f1:62:f5:a8:0f:93:a3:83:02:70:1e:
         51:24:9d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:15 2025 by rpki-client