Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BJqrt6RCHtySujTSUqinqVWGqH419kbuo3QXhddNeYs/0/3137372e33392e3131322e302f32312d3234203d3e20323632343233.roa
File:                     3137372e33392e3131322e302f32312d3234203d3e20323632343233.roa (raw, json)
Hash identifier:          CSdMD7v2V/lw4NvIe8DSpg1trh8kMsDJvP8iRp8z7UA=
Subject key identifier:   42:0F:00:EB:85:A1:9E:44:F4:C4:76:8D:58:AC:79:5A:24:1D:16:71
Certificate issuer:       /CN=C55C88F6D7F7C0E194133AA0C055A48CA99AE9D9
Certificate serial:       63C9EB823604BEF6C6492581EDED9485D968988C
Authority key identifier: C5:5C:88:F6:D7:F7:C0:E1:94:13:3A:A0:C0:55:A4:8C:A9:9A:E9:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C55C88F6D7F7C0E194133AA0C055A48CA99AE9D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BJqrt6RCHtySujTSUqinqVWGqH419kbuo3QXhddNeYs/0/3137372e33392e3131322e302f32312d3234203d3e20323632343233.roa
Signing time:             Sat 29 Jul 2023 17:48:57 +0000
ROA not before:           Sat 29 Jul 2023 17:43:57 +0000
ROA not after:            Sat 27 Jul 2024 17:48:57 +0000
asID:                     262423
IP address blocks:        177.39.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c9:eb:82:36:04:be:f6:c6:49:25:81:ed:ed:94:85:d9:68:98:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C55C88F6D7F7C0E194133AA0C055A48CA99AE9D9
        Validity
            Not Before: Jul 29 17:43:57 2023 GMT
            Not After : Jul 27 17:48:57 2024 GMT
        Subject: CN=420F00EB85A19E44F4C4768D58AC795A241D1671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:4f:57:aa:93:f0:99:2c:dd:ef:3e:ee:30:
                    36:65:f9:b2:6f:79:bd:22:25:e8:79:75:39:d8:04:
                    c4:27:eb:48:dc:e4:6e:53:ee:65:0a:40:47:56:55:
                    7c:d8:5c:23:cb:40:46:83:ab:e1:a0:3e:d9:c4:b5:
                    41:25:d0:76:64:01:59:8e:c1:37:c9:00:53:1c:93:
                    0f:90:3e:aa:0d:1d:0d:ed:60:ff:4c:c2:40:c5:c0:
                    ad:9a:63:bf:da:e0:9f:11:43:6d:b7:7a:0c:78:b7:
                    96:22:81:b1:60:33:39:d1:ff:66:a7:d7:95:9f:b4:
                    59:6b:87:8d:62:58:a3:e7:4c:e7:bf:8c:20:cb:94:
                    eb:95:4f:2c:1a:cd:d8:55:87:43:60:4b:c1:f5:a7:
                    2d:1b:6a:83:0a:23:28:84:bc:40:68:d5:f0:fd:b2:
                    70:d7:ba:37:1b:b9:df:fd:63:79:64:69:c2:ac:b2:
                    e5:e5:b6:d7:a5:22:3e:54:6c:09:e7:eb:e4:6f:0f:
                    1b:1a:a8:43:c8:a7:ab:a9:9a:c0:b8:e1:33:24:60:
                    b1:4f:b1:dd:8e:44:3e:97:42:10:28:45:13:e3:d6:
                    43:40:6b:28:3d:1e:c6:d3:d1:8d:0f:a9:3d:8f:37:
                    7f:b4:a4:4b:55:3f:16:06:97:14:9d:11:86:0e:1c:
                    0f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0F:00:EB:85:A1:9E:44:F4:C4:76:8D:58:AC:79:5A:24:1D:16:71
            X509v3 Authority Key Identifier:
                keyid:C5:5C:88:F6:D7:F7:C0:E1:94:13:3A:A0:C0:55:A4:8C:A9:9A:E9:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BJqrt6RCHtySujTSUqinqVWGqH419kbuo3QXhddNeYs/0/C55C88F6D7F7C0E194133AA0C055A48CA99AE9D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C55C88F6D7F7C0E194133AA0C055A48CA99AE9D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BJqrt6RCHtySujTSUqinqVWGqH419kbuo3QXhddNeYs/0/3137372e33392e3131322e302f32312d3234203d3e20323632343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:07:16:53:1a:75:15:b5:57:1f:50:2c:84:7c:b0:51:41:1d:
         bf:70:f4:77:e0:73:29:9f:6b:d1:88:57:34:92:78:48:7e:b1:
         28:8c:19:bb:61:61:e2:f6:7c:95:5a:ec:07:87:f5:95:5a:fa:
         41:c8:30:28:30:c2:93:17:02:ba:2c:30:9c:1e:db:73:92:97:
         97:83:7f:aa:f3:0f:a8:26:18:00:20:cc:9e:d8:d9:3c:69:57:
         6e:d9:30:b4:c8:a2:92:9d:51:b9:af:94:5d:bc:f1:8a:0f:ba:
         73:46:ee:86:40:22:2a:6c:5d:80:50:b8:36:09:f0:f8:ea:8a:
         35:63:1b:bc:38:7d:05:f0:f0:35:9f:99:15:dd:4c:3c:63:df:
         b1:9a:56:00:6b:4b:6f:d1:2b:7d:29:d2:1a:ba:3b:e6:0a:53:
         ee:b2:26:1d:26:57:11:e3:a6:63:bf:ac:44:3c:06:f3:e5:52:
         a4:d2:bc:d8:50:7f:7f:5b:b1:11:62:19:20:a5:9c:30:8d:bc:
         4f:ef:a6:0d:b3:b7:f8:42:d9:10:50:83:d5:b2:c3:2c:c3:e5:
         5e:93:3c:9b:3e:ed:e2:b9:67:f2:2c:ed:49:4c:3c:99:f1:5a:
         40:67:e9:e9:7b:66:b2:8e:08:7a:40:7f:9a:62:79:0f:a7:06:
         99:22:78:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:41 2025 by rpki-client