Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e36302e302f32322d3234203d3e203532353637.roa
File:                     3137372e38362e36302e302f32322d3234203d3e203532353637.roa (raw, json)
Hash identifier:          xbfj0mmXCQxCuEog/WJ6LQ/RIogPfjNNodJWmVOZrE0=
Subject key identifier:   1A:03:AB:BF:D1:97:4F:B8:74:02:F0:96:0C:0A:28:3A:E3:2D:5E:DF
Certificate issuer:       /CN=67EB2BACF43158300326528278D92ACE7CF7EB92
Certificate serial:       66B9BFF793AAB8DFEA2028ABB985BBF4BC2FB0E6
Authority key identifier: 67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e36302e302f32322d3234203d3e203532353637.roa
Signing time:             Fri 31 Mar 2023 15:23:06 +0000
ROA not before:           Fri 31 Mar 2023 15:18:06 +0000
ROA not after:            Fri 29 Mar 2024 15:23:06 +0000
asID:                     52567
IP address blocks:        177.86.60.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b9:bf:f7:93:aa:b8:df:ea:20:28:ab:b9:85:bb:f4:bc:2f:b0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EB2BACF43158300326528278D92ACE7CF7EB92
        Validity
            Not Before: Mar 31 15:18:06 2023 GMT
            Not After : Mar 29 15:23:06 2024 GMT
        Subject: CN=1A03ABBFD1974FB87402F0960C0A283AE32D5EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:3a:f0:20:54:3d:bf:c1:dc:8e:98:cf:fc:
                    4e:93:3a:e2:c3:f1:b1:c4:2c:67:45:92:5c:36:aa:
                    92:ac:c4:a2:a8:ea:32:3b:d8:34:5a:9e:a9:71:69:
                    60:52:c5:2f:ec:96:5d:77:55:f6:f3:46:4a:49:ac:
                    8e:98:bc:a9:6b:87:60:b5:d0:25:e7:b1:e1:9f:c4:
                    b3:c0:da:14:4b:12:f6:65:92:a4:69:26:56:4d:71:
                    aa:e4:9d:c0:19:f3:25:54:62:f8:d7:07:17:50:e1:
                    a4:88:3c:1d:ca:b2:09:dc:fb:72:ea:37:0b:0f:d1:
                    5c:76:e6:be:9b:44:7f:ef:53:7e:10:48:9f:81:04:
                    89:75:57:93:68:55:0e:5e:5b:a2:9e:67:0a:2b:3d:
                    75:6e:5d:13:58:fe:a8:d1:fa:b6:fa:0e:73:28:02:
                    7c:b9:ad:34:fc:16:2d:d7:28:8a:ce:9c:00:32:c4:
                    fb:9c:d2:ad:81:f1:15:da:1f:3f:eb:82:34:02:5b:
                    40:de:ea:83:f8:b4:9c:7a:fd:70:42:80:2e:73:2b:
                    08:1d:0d:56:c0:99:d9:5a:6f:5c:75:61:d0:60:a2:
                    b7:7e:bf:a5:28:ef:3f:08:cc:d4:12:ec:10:81:80:
                    c5:a9:af:41:f9:87:22:09:c1:0a:db:88:70:78:43:
                    5e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:03:AB:BF:D1:97:4F:B8:74:02:F0:96:0C:0A:28:3A:E3:2D:5E:DF
            X509v3 Authority Key Identifier:
                keyid:67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/67EB2BACF43158300326528278D92ACE7CF7EB92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e36302e302f32322d3234203d3e203532353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:fc:bf:35:24:57:eb:9f:a8:bf:d7:95:df:ad:5e:c8:c2:d7:
         2d:65:fb:bb:45:8b:f6:33:0d:0c:c1:40:7c:b3:2a:04:72:8d:
         3c:9a:3d:b0:8e:35:17:8c:36:ee:56:26:8c:61:ca:72:0f:bf:
         7b:c7:26:23:80:ca:4e:cb:da:0c:4e:93:66:1b:4c:45:8d:62:
         01:39:fa:26:33:c7:df:0f:a6:26:e3:19:9e:fa:76:7f:6a:76:
         40:55:f6:dd:40:c0:1f:15:d0:08:55:4a:00:79:e2:f2:6d:e4:
         29:33:d4:11:7f:4c:bf:8c:50:a7:d7:e2:2b:06:2d:9f:ac:49:
         53:46:0d:1b:8b:ac:a7:41:c8:20:7f:34:60:0e:e6:47:55:93:
         b0:90:73:5e:bc:66:0d:52:82:13:7f:02:69:53:11:19:7d:1f:
         c4:2a:06:f2:86:af:77:f6:22:3d:84:b6:8a:52:80:83:16:96:
         73:5f:fc:65:e0:41:7f:ae:35:5d:4f:52:66:2d:65:c4:17:8e:
         d4:05:36:0c:fa:7c:b2:46:91:b6:74:ff:77:4f:2b:69:90:db:
         09:8b:52:eb:fd:20:8a:55:8a:fa:dc:fd:d7:bd:b9:46:db:3d:
         09:a6:28:4e:0d:73:ca:6d:79:54:75:f1:d2:4a:f7:ca:50:1e:
         e3:8f:b4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:17 2025 by rpki-client