Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138372e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3138372e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          nRvzU6P92PytxeRv3zdziS+vGh5CeB8xYHVsVC161yw=
Subject key identifier:   CF:35:19:30:3D:C0:5B:67:9F:D5:E9:0A:98:70:51:90:99:F0:D5:03
Certificate issuer:       /CN=ACCC0F5DCF06D085FDFED520EB02F87054728167
Certificate serial:       4AF177CF4FE974F3D9465C75CC722542BD170A85
Authority key identifier: AC:CC:0F:5D:CF:06:D0:85:FD:FE:D5:20:EB:02:F8:70:54:72:81:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACCC0F5DCF06D085FDFED520EB02F87054728167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138372e302f32342d3234203d3e203238353837.roa
Signing time:             Fri 26 Jul 2024 22:08:37 +0000
ROA not before:           Fri 26 Jul 2024 22:03:37 +0000
ROA not after:            Fri 25 Jul 2025 22:08:37 +0000
asID:                     28587
IP address blocks:        177.128.187.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f1:77:cf:4f:e9:74:f3:d9:46:5c:75:cc:72:25:42:bd:17:0a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACCC0F5DCF06D085FDFED520EB02F87054728167
        Validity
            Not Before: Jul 26 22:03:37 2024 GMT
            Not After : Jul 25 22:08:37 2025 GMT
        Subject: CN=CF3519303DC05B679FD5E90A9870519099F0D503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:9c:ed:02:90:2d:17:37:fc:a7:1f:ae:64:
                    91:fb:6a:75:38:85:79:3e:e3:96:80:4d:a1:77:e9:
                    b0:7f:9d:b5:ca:44:2c:f2:77:f6:e2:b2:40:e3:9c:
                    73:6c:c7:30:14:d5:0f:6c:db:d4:cd:ec:dd:06:61:
                    b3:ca:ef:b3:3f:35:5e:1a:37:9d:a4:34:95:e5:b5:
                    1b:be:8d:4e:73:15:3e:e0:f3:44:ec:ef:c4:a7:98:
                    ac:5c:36:7b:e7:ca:8a:a4:bb:36:27:d8:53:09:2e:
                    7d:83:b1:d6:23:55:23:24:ef:e0:da:1e:2c:84:c8:
                    83:80:05:a2:46:b3:06:13:fa:57:15:21:6c:4f:ee:
                    6e:75:f4:ae:6c:5f:a3:15:f7:1b:f4:b7:9f:51:72:
                    f5:f1:d0:9c:a1:db:38:09:3f:95:82:d1:92:1e:aa:
                    95:4a:6c:6f:90:1a:5f:00:28:b5:fd:7b:c1:4b:71:
                    1c:66:42:79:a2:b1:d2:56:7f:4b:3a:de:74:2c:06:
                    39:c9:5b:fe:f0:07:fe:e5:33:2d:5f:68:2e:d9:47:
                    4c:27:9e:39:63:10:0d:f8:36:9d:62:e7:70:6a:f5:
                    a7:72:f0:b6:78:88:e1:48:39:ca:97:53:3d:b4:1a:
                    e6:69:71:80:6e:c7:53:91:ef:59:07:98:2a:be:2f:
                    24:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:35:19:30:3D:C0:5B:67:9F:D5:E9:0A:98:70:51:90:99:F0:D5:03
            X509v3 Authority Key Identifier:
                keyid:AC:CC:0F:5D:CF:06:D0:85:FD:FE:D5:20:EB:02:F8:70:54:72:81:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/ACCC0F5DCF06D085FDFED520EB02F87054728167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACCC0F5DCF06D085FDFED520EB02F87054728167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138372e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ff:89:1e:cc:f3:f5:33:49:ae:82:f2:9d:2a:f4:d4:17:73:
         22:fc:38:2f:1f:71:39:01:e8:cd:9e:58:93:4a:03:81:f5:27:
         ed:3c:30:92:c8:8f:19:88:57:d9:8e:76:03:1a:3c:3c:fc:4b:
         56:88:5d:2e:31:78:a6:c7:31:7d:ad:3f:b0:71:4f:90:b9:b2:
         70:39:e5:30:3b:1f:a7:ba:f4:5c:57:ea:f6:d4:fe:f4:1a:5d:
         2b:4f:d7:1c:db:14:ac:39:c3:c5:46:e2:f5:ff:23:07:b8:92:
         25:14:d9:4e:1b:e9:cb:e7:e0:ce:d4:20:4d:30:65:04:67:e4:
         c3:40:b8:f0:fe:18:89:e4:91:f5:1d:23:96:aa:95:ea:c1:53:
         0b:19:21:12:8a:1e:57:68:e6:78:be:3a:54:c4:1b:2e:d0:dc:
         c8:8b:8e:d9:1f:9a:d1:24:f1:04:7b:0d:a8:bf:fb:2e:e4:f7:
         5a:a9:3d:83:ba:4c:e5:4f:8c:f4:04:fb:97:c1:f3:aa:99:b4:
         f3:29:db:e5:64:a0:e2:91:d3:96:d1:e4:01:80:d7:88:19:36:
         cc:cd:fd:71:ae:0b:62:6d:4d:2c:20:b3:cf:64:9e:d7:e1:01:
         02:ac:61:7c:9a:06:0f:62:32:ba:0e:d6:c8:25:cc:ba:ab:3a:
         55:d6:4c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:36 2025 by rpki-client