Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e3132382e3137302e302f32342d3234203d3e20323632333736.roa
File:                     3137372e3132382e3137302e302f32342d3234203d3e20323632333736.roa (raw, json)
Hash identifier:          8GUyVLh0NyjnJts5VX1tDKHcoUKnh3naG7qWU+yN18o=
Subject key identifier:   F5:BA:01:1E:C0:5D:A0:0A:A4:0C:A4:3F:3C:02:34:65:7C:D3:4A:A0
Certificate issuer:       /CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Certificate serial:       5B99B51CFB99CA910E8124AAA810FBA1B6CD952D
Authority key identifier: C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e3132382e3137302e302f32342d3234203d3e20323632333736.roa
Signing time:             Tue 04 Jun 2024 17:35:32 +0000
ROA not before:           Tue 04 Jun 2024 17:30:32 +0000
ROA not after:            Tue 03 Jun 2025 17:35:32 +0000
asID:                     262376
IP address blocks:        177.128.170.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:99:b5:1c:fb:99:ca:91:0e:81:24:aa:a8:10:fb:a1:b6:cd:95:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
        Validity
            Not Before: Jun  4 17:30:32 2024 GMT
            Not After : Jun  3 17:35:32 2025 GMT
        Subject: CN=F5BA011EC05DA00AA40CA43F3C0234657CD34AA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:b5:91:1b:6a:67:e7:65:2b:dd:7c:35:18:
                    ab:2f:3d:90:4a:35:b6:9e:e1:fa:70:87:12:09:b0:
                    bc:ad:94:0d:af:25:97:16:12:7e:44:60:6e:c8:62:
                    4b:ef:7a:ca:b3:ac:eb:cb:d3:d0:dd:6b:9a:f1:3b:
                    38:26:ab:3f:f9:98:0f:08:29:6e:91:66:04:dd:d6:
                    0d:2d:b6:d4:4e:bc:09:06:64:ca:b9:f9:7b:12:47:
                    0f:47:5a:f7:b9:8a:cf:54:7f:a4:ec:d3:d8:09:80:
                    48:6c:85:1f:62:d8:91:23:b9:43:43:d3:90:33:7c:
                    74:57:a4:28:c9:6c:1d:2a:4f:5d:68:1f:19:2d:5e:
                    e3:1d:df:23:03:0c:f5:92:38:4a:6d:ca:bc:0c:dc:
                    56:33:2f:2f:94:6b:b8:4e:a1:e1:d4:27:69:51:43:
                    56:57:3e:f6:7e:23:d2:eb:0b:05:29:3f:36:a0:9f:
                    1b:a9:27:94:31:22:06:53:2f:22:6e:8b:fd:1a:53:
                    58:c6:d4:15:29:0e:82:1b:1d:e8:f2:6d:03:ed:02:
                    a5:8b:28:60:f0:a8:8a:bf:25:26:a2:63:23:8a:83:
                    5b:b2:e8:b4:fb:f3:a2:3b:78:4f:9d:9c:cc:78:cb:
                    a7:21:fe:a4:f5:e3:62:70:41:db:8f:70:c4:08:39:
                    b2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BA:01:1E:C0:5D:A0:0A:A4:0C:A4:3F:3C:02:34:65:7C:D3:4A:A0
            X509v3 Authority Key Identifier:
                keyid:C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3137372e3132382e3137302e302f32342d3234203d3e20323632333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:e0:53:58:98:56:a9:55:eb:ad:7e:b0:3c:bf:2a:1b:6d:07:
         f4:df:ac:cd:31:b3:86:4c:cc:f7:74:7a:34:a8:48:f6:c0:3e:
         e2:a0:d9:01:60:9c:e9:9b:da:99:6c:ea:17:98:e7:42:d6:5f:
         5c:ac:e5:2a:6d:83:85:ed:7a:27:8e:b1:32:d3:0d:e9:51:43:
         d1:54:0d:28:56:35:86:7d:24:fb:99:32:6e:8f:eb:da:f8:40:
         7b:02:65:a5:41:1c:f2:98:3a:63:e3:a6:85:ce:92:51:c8:cd:
         fb:21:b1:90:77:da:23:69:66:cf:9d:35:66:92:90:e7:dd:3a:
         f7:4b:d4:ef:4e:0f:fc:07:38:c2:c0:fb:dc:02:97:9b:20:74:
         14:9e:a2:dd:27:e7:7a:ba:69:91:de:ca:ea:30:23:08:d3:2b:
         b3:e6:59:9e:f0:3d:29:56:36:66:ca:1d:56:cf:0e:05:b9:57:
         23:72:51:de:72:f0:9a:25:dd:06:9c:0f:fe:02:c8:70:1e:30:
         94:5d:dd:6c:5a:9d:ac:b6:35:d8:6a:84:f7:32:f8:44:72:11:
         5e:6d:f8:20:99:6d:a4:58:78:8a:02:ee:ef:b3:ab:db:bb:3f:
         2e:4c:45:3e:d3:be:3f:f8:ff:da:45:d4:8a:70:50:3a:92:fc:
         c8:5f:e1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:46:28 2025 by rpki-client