Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/1/3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa
File:                     3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa (raw, json)
Hash identifier:          or8n//gCNW6mJoFoTembTnSBINwEkRQf+aSZWzqvScs=
Subject key identifier:   8F:EB:5B:98:58:94:DC:86:27:C9:96:EE:E4:09:FC:DC:05:7E:38:8B
Certificate issuer:       /CN=85BB5D7EFD8AA7F5C34CB843FAEBBB8ED11403F0
Certificate serial:       4E1DFC38C8B89F62D2B35C63CF96A2EE910ED7C2
Authority key identifier: 85:BB:5D:7E:FD:8A:A7:F5:C3:4C:B8:43:FA:EB:BB:8E:D1:14:03:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85BB5D7EFD8AA7F5C34CB843FAEBBB8ED11403F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/1/3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa
Signing time:             Fri 15 Sep 2023 22:18:08 +0000
ROA not before:           Fri 15 Sep 2023 22:13:08 +0000
ROA not after:            Fri 13 Sep 2024 22:18:08 +0000
asID:                     28665
IP address blocks:        177.136.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1d:fc:38:c8:b8:9f:62:d2:b3:5c:63:cf:96:a2:ee:91:0e:d7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85BB5D7EFD8AA7F5C34CB843FAEBBB8ED11403F0
        Validity
            Not Before: Sep 15 22:13:08 2023 GMT
            Not After : Sep 13 22:18:08 2024 GMT
        Subject: CN=8FEB5B985894DC8627C996EEE409FCDC057E388B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ef:ba:7a:db:5b:21:48:e2:c3:95:ae:c9:13:
                    ac:c3:aa:29:23:bf:ba:2f:c8:dc:fb:10:a3:48:2c:
                    22:68:7d:18:df:ef:02:0f:37:e6:b0:cb:81:4b:eb:
                    a5:2a:f6:e7:4a:7b:1e:d4:9d:37:cb:f2:be:a9:e1:
                    83:5f:d3:d9:c1:c3:62:7f:2f:cd:6e:99:d2:0c:c9:
                    6d:a4:16:c8:a5:04:43:51:36:b6:72:aa:3e:b4:b6:
                    66:17:55:1d:b2:b7:e6:ee:d9:6d:6a:37:ea:7c:3a:
                    31:cf:f9:49:23:bd:7e:f1:1c:e1:62:29:17:85:71:
                    bf:80:08:33:52:67:2c:e5:0c:1f:48:21:66:99:40:
                    99:2d:b4:29:4d:b7:63:71:ce:32:15:ee:7a:b0:01:
                    f6:a0:e5:35:d8:a3:79:74:82:4c:f4:93:4c:4b:f8:
                    d9:f9:94:f7:6d:cc:fd:c3:0f:5a:eb:6a:b9:66:73:
                    94:0f:a7:29:15:6c:57:dc:33:8e:3a:23:9d:be:c4:
                    b8:24:7b:3c:94:94:05:c8:7c:3b:89:37:6c:90:54:
                    45:77:ca:0a:d9:94:c0:08:30:38:73:bc:36:be:94:
                    c0:cb:cd:15:0c:88:8b:f0:85:73:f4:c1:18:63:d6:
                    ae:14:07:f9:3f:9f:d2:d5:66:27:07:84:37:f1:da:
                    fa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EB:5B:98:58:94:DC:86:27:C9:96:EE:E4:09:FC:DC:05:7E:38:8B
            X509v3 Authority Key Identifier:
                keyid:85:BB:5D:7E:FD:8A:A7:F5:C3:4C:B8:43:FA:EB:BB:8E:D1:14:03:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/1/85BB5D7EFD8AA7F5C34CB843FAEBBB8ED11403F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85BB5D7EFD8AA7F5C34CB843FAEBBB8ED11403F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/1/3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:cc:2e:ec:a6:ff:51:9a:5b:69:74:69:04:0c:d8:74:d7:f2:
         2b:b1:7a:9a:97:ca:ad:40:4c:67:49:2d:d0:bd:6c:f0:80:bc:
         44:c7:4e:2d:9a:e0:94:1a:8a:bc:28:11:45:5f:36:cc:25:8e:
         50:cd:37:2a:ec:24:5a:ba:94:5e:99:62:b7:51:21:b8:43:5e:
         59:48:38:fe:bc:2f:54:f0:c5:3f:de:7a:d4:41:a4:47:4b:69:
         89:2b:17:66:d5:9f:a0:9f:c2:6c:c7:d1:27:40:3b:9e:f2:07:
         13:7a:4a:01:8a:9b:cb:aa:fa:23:00:aa:d5:7c:b5:6e:e3:ed:
         00:77:e4:1f:9a:03:b3:80:dc:c2:8c:89:f7:5e:4d:35:b7:4e:
         8d:d2:85:6b:b5:47:87:bc:ce:99:76:36:69:31:8b:00:ce:79:
         2a:2a:02:fc:2e:58:62:09:8c:f5:de:8e:31:e5:b9:0e:bf:4e:
         ab:21:3c:1d:c4:74:9b:2e:84:de:99:92:2a:93:85:da:f0:76:
         6d:5a:29:48:1f:9e:9a:39:85:fc:58:5d:2a:2f:a2:18:e2:60:
         55:66:0b:ce:f2:fb:84:b7:d1:c7:13:16:fe:ba:e4:71:4f:27:
         ce:21:03:a7:dd:7d:99:3b:d3:19:2b:38:a4:46:a1:95:e2:22:
         3c:e0:5d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:04 2025 by rpki-client