Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3137372e32332e36342e302f32322d3232203d3e20323632383931.roa
File:                     3137372e32332e36342e302f32322d3232203d3e20323632383931.roa (raw, json)
Hash identifier:          bgekcJMczpYzh01ZCBjkYl+mIocDvCSju1JtLVBxpiE=
Subject key identifier:   F9:62:43:5D:E4:A7:75:4E:C4:75:40:FD:6E:16:BF:4A:D3:52:CF:4C
Certificate issuer:       /CN=CD8207F50B5584700354C87E2FDD3EEDAABE3E9C
Certificate serial:       51DAFC4E365B18C5BBB764AD43F2CDF34940D582
Authority key identifier: CD:82:07:F5:0B:55:84:70:03:54:C8:7E:2F:DD:3E:ED:AA:BE:3E:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3137372e32332e36342e302f32322d3232203d3e20323632383931.roa
Signing time:             Thu 18 Aug 2022 21:14:08 +0000
ROA not before:           Thu 18 Aug 2022 21:09:08 +0000
ROA not after:            Thu 17 Aug 2023 21:14:08 +0000
asID:                     262891
IP address blocks:        177.23.64.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:da:fc:4e:36:5b:18:c5:bb:b7:64:ad:43:f2:cd:f3:49:40:d5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8207F50B5584700354C87E2FDD3EEDAABE3E9C
        Validity
            Not Before: Aug 18 21:09:08 2022 GMT
            Not After : Aug 17 21:14:08 2023 GMT
        Subject: CN=F962435DE4A7754EC47540FD6E16BF4AD352CF4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0a:45:8f:d8:7d:de:84:03:fd:24:de:39:89:
                    09:bf:42:ff:0c:39:4b:f2:36:b6:4a:32:2c:ee:a8:
                    bf:92:fd:79:81:79:05:a7:cf:8a:b7:7e:b6:a2:08:
                    2b:06:67:29:dd:3b:dd:f2:41:48:68:23:1f:55:b0:
                    eb:44:c2:0d:68:3d:55:6b:82:d6:2b:48:fb:e7:41:
                    d3:7a:5b:6c:17:43:4e:08:e8:68:e9:b2:94:c3:56:
                    82:87:e4:d1:dc:12:48:f7:da:d8:78:5b:3d:32:6e:
                    de:7e:38:5f:e5:e3:fc:c5:b8:b1:1c:c7:a9:93:83:
                    ce:42:c2:28:dc:cd:ae:3b:6b:1e:2f:23:2c:ea:37:
                    ce:4f:13:3b:fe:16:71:12:71:1c:85:0b:54:dc:8e:
                    3d:6e:75:90:2f:46:9c:4b:61:63:67:fc:41:86:fb:
                    79:e7:ed:af:d4:de:83:82:be:d9:34:1e:78:39:17:
                    36:18:08:69:c8:ec:b9:b4:b8:bf:41:65:e7:de:08:
                    47:ec:a2:0e:d0:c2:98:6a:fd:45:76:ba:9c:e9:72:
                    a4:0b:e9:b9:98:fb:db:d8:9d:5f:ac:3b:a9:48:8b:
                    ef:9e:98:87:63:88:cb:5a:ba:53:01:17:1e:be:bf:
                    7d:d3:5f:8f:1c:01:37:ad:7b:e5:3e:08:12:9e:6b:
                    d5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:62:43:5D:E4:A7:75:4E:C4:75:40:FD:6E:16:BF:4A:D3:52:CF:4C
            X509v3 Authority Key Identifier:
                keyid:CD:82:07:F5:0B:55:84:70:03:54:C8:7E:2F:DD:3E:ED:AA:BE:3E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD8207F50B5584700354C87E2FDD3EEDAABE3E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/0/3137372e32332e36342e302f32322d3232203d3e20323632383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:e4:a5:ca:8a:ca:a2:57:7c:92:c8:fe:ce:22:e6:e1:ae:97:
         7b:04:91:b7:3e:3e:95:dd:a1:19:eb:20:2d:4d:1e:db:36:99:
         95:92:f9:47:a1:22:15:e1:81:83:93:c3:4d:e5:13:3c:86:7c:
         44:e1:d6:96:a6:1c:7e:8f:fb:59:d3:0f:2a:b9:28:74:fd:a7:
         2d:9d:d1:19:1e:c7:a7:6b:06:24:b4:ac:d6:c3:a5:75:5b:57:
         e0:7e:b3:8b:9b:37:05:8c:9e:e7:36:45:39:ff:08:24:17:ce:
         8d:f7:25:b0:77:fc:8d:00:3e:cc:3b:a5:10:97:c7:34:25:88:
         d7:4e:99:79:66:59:92:0c:a7:b9:b1:fc:f4:44:e2:43:c1:98:
         d3:40:ea:64:b1:70:4e:2d:88:a4:8a:7a:7d:dc:1f:2c:62:3e:
         f9:7d:17:cf:6d:fa:37:1b:a9:67:91:79:8b:17:ee:67:5c:7a:
         85:b9:eb:0c:49:33:45:b0:a9:f1:2b:16:d7:d3:56:db:20:b4:
         10:fd:ff:3f:74:14:d0:07:7e:2b:68:99:2a:26:0c:ab:60:f5:
         6a:4c:12:98:9f:80:06:37:ed:67:58:3f:5b:08:66:43:34:78:
         f9:5c:d1:41:62:26:31:69:43:2b:40:7e:0b:0c:ab:01:07:eb:
         38:37:d7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:49 2025 by rpki-client