Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32302e302f32332d3233203d3e203238333630.roa
File:                     3137372e382e32302e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          5AqqMP+0TM4NVTWjrocM6OVA/pecp0HOCf0ovAmVJXk=
Subject key identifier:   AD:BC:93:6A:29:0E:22:98:0E:36:14:97:CE:46:7A:13:E3:88:88:BC
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       340F5230F01EC4EA46CC815AA5AD52F249BE3004
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32302e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:42 +0000
ROA not before:           Sat 06 Apr 2024 02:40:42 +0000
ROA not after:            Sat 05 Apr 2025 02:45:42 +0000
asID:                     28360
IP address blocks:        177.8.20.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0f:52:30:f0:1e:c4:ea:46:cc:81:5a:a5:ad:52:f2:49:be:30:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:42 2024 GMT
            Not After : Apr  5 02:45:42 2025 GMT
        Subject: CN=ADBC936A290E22980E361497CE467A13E38888BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c4:df:c1:50:58:a0:6b:b8:4e:b2:ed:ab:96:
                    96:a7:e6:09:5a:87:1c:69:5f:6f:06:31:b7:67:01:
                    30:a8:84:4e:4d:97:53:9e:99:06:41:70:e9:c6:57:
                    82:2f:9d:bc:2d:0f:52:e1:39:34:a0:ea:db:75:53:
                    4c:67:cf:43:ad:82:6b:38:8a:bc:e5:92:57:89:7f:
                    6b:c8:a2:c7:5e:ae:04:89:1f:7e:f0:d6:8e:5a:58:
                    74:30:f1:8f:27:5a:38:a1:14:ea:cc:5b:b7:bb:84:
                    de:38:84:3c:b8:7a:00:69:47:ca:67:4b:7b:cd:be:
                    bd:7f:56:92:14:91:d6:17:a2:03:cf:59:9a:3d:1e:
                    e1:cb:58:de:1c:96:cc:f8:42:58:07:a8:72:c2:a9:
                    9b:2b:4a:a1:c3:7b:ba:6e:f2:be:ba:8a:d9:f8:6d:
                    51:7c:79:d6:58:7b:e2:9c:30:01:94:b6:ef:05:bd:
                    c4:43:2d:f6:64:da:39:49:b3:aa:39:bb:e6:37:57:
                    47:61:26:f5:b4:8b:12:97:e2:e4:78:a6:96:8a:39:
                    55:77:bd:bb:39:0f:4b:ea:b0:f1:8d:6a:aa:1f:8a:
                    81:d2:ae:24:da:c5:29:50:33:f3:bf:c7:37:00:4c:
                    35:25:1e:df:6c:53:23:c5:6e:b2:b2:75:03:2b:eb:
                    8b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BC:93:6A:29:0E:22:98:0E:36:14:97:CE:46:7A:13:E3:88:88:BC
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32302e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:f0:6b:38:5b:d1:da:37:02:ba:d2:f9:65:f2:63:7a:4b:2c:
         31:18:2b:43:df:7f:c3:7e:d3:d8:ea:62:e2:6f:ef:2a:0a:32:
         ba:ee:37:12:48:4b:d9:36:e7:9c:f7:59:02:91:30:87:a6:a7:
         3d:2c:d6:c8:49:68:23:7e:b4:a0:23:7b:26:31:ab:6d:3c:30:
         51:19:f2:9b:58:54:8a:b2:ad:3c:b0:a6:b4:a2:70:45:a6:40:
         41:06:ed:56:8a:29:86:13:77:3b:80:32:83:98:d7:ef:d4:15:
         cc:2c:0e:d6:52:5a:7d:78:63:cd:9a:e2:3f:6a:e5:0f:30:1f:
         30:b4:26:57:1b:7e:06:e7:9b:ba:46:ad:1d:89:b7:be:dc:72:
         78:bc:d5:6e:21:56:f5:e6:6e:a7:11:d2:f3:b6:55:55:b4:04:
         3e:e9:2d:ea:66:4e:fa:ee:b3:aa:c7:52:e6:22:7e:0a:b4:4c:
         9c:5c:5a:7d:12:67:aa:89:f7:09:91:32:9c:94:2a:d8:68:df:
         d3:f6:48:0e:6d:d3:b9:c9:58:e8:e0:73:ac:6d:fd:fd:ff:18:
         41:c1:61:a2:f1:10:3e:4e:07:58:b7:05:fa:ea:33:1e:a7:92:
         e5:1b:ba:75:61:3c:30:85:da:39:e4:46:6b:8a:bc:01:2c:a8:
         9c:a0:6e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:38:46 2025 by rpki-client