Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e36302e302f32332d3233203d3e203532353637.roa
File:                     3137372e38362e36302e302f32332d3233203d3e203532353637.roa (raw, json)
Hash identifier:          cDLZr3ryt4owZlxK3rzYhEWWEry/ZcKE1EIO1XpcIxA=
Subject key identifier:   A3:64:B5:1E:D4:F6:0F:63:A5:14:A6:8D:0F:50:80:C7:10:F7:48:5B
Certificate issuer:       /CN=67EB2BACF43158300326528278D92ACE7CF7EB92
Certificate serial:       094FAF51B705CC455965C5EE1A8F03209E3BAAA1
Authority key identifier: 67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e36302e302f32332d3233203d3e203532353637.roa
Signing time:             Mon 03 Apr 2023 18:17:29 +0000
ROA not before:           Mon 03 Apr 2023 18:12:29 +0000
ROA not after:            Mon 01 Apr 2024 18:17:29 +0000
asID:                     52567
IP address blocks:        177.86.60.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4f:af:51:b7:05:cc:45:59:65:c5:ee:1a:8f:03:20:9e:3b:aa:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EB2BACF43158300326528278D92ACE7CF7EB92
        Validity
            Not Before: Apr  3 18:12:29 2023 GMT
            Not After : Apr  1 18:17:29 2024 GMT
        Subject: CN=A364B51ED4F60F63A514A68D0F5080C710F7485B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:28:ae:5e:c7:ef:aa:b7:42:58:82:f0:58:
                    73:b1:32:77:70:70:45:dd:16:fc:84:fd:91:aa:54:
                    14:c1:31:a5:88:c9:f8:3c:11:c2:bb:ce:34:d3:ed:
                    f3:d0:c2:5d:02:e4:59:65:ef:2e:3c:d6:5d:ae:1f:
                    1d:30:7f:1a:1a:fe:e3:dd:7a:b5:83:9a:95:94:f8:
                    c4:d3:19:e5:6b:b2:c9:85:ca:6c:7c:88:33:95:13:
                    11:ca:41:4d:28:33:33:05:30:9c:2b:b5:f8:23:8e:
                    a2:27:94:e2:7f:43:b4:c5:b0:31:02:49:e9:96:d5:
                    87:53:23:ae:74:dd:fd:a4:f4:df:d0:7c:fb:e5:a4:
                    f5:2e:38:68:91:85:47:28:b1:a0:85:ec:c2:d2:98:
                    b6:17:5d:f3:4b:1d:24:99:de:45:9f:77:52:85:bc:
                    24:db:90:d6:b0:9a:fb:a7:9e:f7:c2:e2:31:39:85:
                    59:4e:2e:fc:e9:1f:bf:2f:70:d8:f4:0a:67:d7:cb:
                    89:37:1d:c4:e7:36:b2:ca:50:21:2a:1f:16:1c:04:
                    30:a1:b5:5c:1f:c5:43:f0:f7:e0:2a:3e:5b:dc:23:
                    08:a6:13:62:36:0a:b4:07:4e:7b:31:43:8a:0a:9f:
                    88:0a:ab:88:28:02:32:04:d1:42:9d:ca:a1:04:b7:
                    03:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:64:B5:1E:D4:F6:0F:63:A5:14:A6:8D:0F:50:80:C7:10:F7:48:5B
            X509v3 Authority Key Identifier:
                keyid:67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/67EB2BACF43158300326528278D92ACE7CF7EB92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e36302e302f32332d3233203d3e203532353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:c7:84:54:d5:e8:4a:8e:ab:da:57:8e:11:ae:f1:37:c1:e6:
         14:25:75:23:a4:5f:ed:a9:91:3f:0e:6d:8c:bd:61:eb:39:b4:
         d3:b1:0f:0e:ad:94:c3:ca:76:ac:28:67:86:a8:d5:14:b7:dd:
         15:32:dd:63:63:57:f0:7e:87:59:0a:e8:38:93:8b:d2:d2:62:
         01:1f:f5:6d:bc:97:33:03:f1:79:da:37:94:54:46:da:41:66:
         dc:36:b3:23:5f:dd:7f:79:1f:6a:d7:99:e5:7c:25:a5:d8:86:
         d2:ed:4d:81:d7:8a:06:dd:46:78:cc:be:d8:a6:e8:5a:5f:5d:
         5e:10:44:b1:26:d4:28:89:6d:a9:c2:ff:7a:c1:43:66:a6:f5:
         26:49:de:f8:18:62:e8:d0:47:1e:fe:ee:60:13:37:c9:e8:ec:
         b0:f5:20:ac:4c:68:ab:9c:04:81:00:7c:9c:97:21:09:4a:17:
         95:d6:5f:12:02:24:ac:02:31:82:c8:96:e9:63:fe:f6:6d:00:
         3d:15:f5:58:12:83:3f:21:ef:4a:cc:a9:22:dc:d6:4b:ea:09:
         32:f6:15:83:42:8d:b3:ff:45:22:47:a2:c3:0a:03:e2:bf:ab:
         e3:3b:cb:74:0a:f9:83:39:38:84:13:2d:db:ec:b7:f8:b6:1c:
         00:9f:b0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:14 2025 by rpki-client