Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa
File:                     3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          5uHtHewVelD2Uv93n692NuN2R3W3SysZqhEO/xVJdXE=
Subject key identifier:   57:37:E8:D2:CD:78:53:5B:CF:37:00:9C:09:21:B0:D2:68:F4:D6:7D
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       5EADD55C0504B8843785B692F8EF88B4C0399801
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa
Signing time:             Thu 06 Oct 2022 17:40:03 +0000
ROA not before:           Thu 06 Oct 2022 17:35:03 +0000
ROA not after:            Thu 05 Oct 2023 17:40:03 +0000
asID:                     271724
IP address blocks:        179.191.128.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ad:d5:5c:05:04:b8:84:37:85:b6:92:f8:ef:88:b4:c0:39:98:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:35:03 2022 GMT
            Not After : Oct  5 17:40:03 2023 GMT
        Subject: CN=5737E8D2CD78535BCF37009C0921B0D268F4D67D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fb:eb:ad:d8:8a:f1:ed:49:bd:26:93:5f:46:
                    d4:e4:77:b9:ec:cd:b0:44:88:ec:d2:15:ab:ce:2c:
                    45:1d:2f:f6:e7:96:c4:d2:d1:05:10:85:57:80:3d:
                    31:83:0a:d0:49:d1:d1:ac:34:c3:dd:85:dc:09:bc:
                    6f:9a:12:b1:82:48:04:43:8e:34:c2:35:fb:e3:8d:
                    e9:b1:7b:58:da:98:8b:5d:4f:61:a8:db:43:30:aa:
                    3e:b5:28:13:74:34:54:32:eb:c7:cb:8f:c0:ea:f3:
                    42:76:16:9e:a9:dd:02:25:ea:6a:c0:7e:00:53:a0:
                    03:a7:66:fe:b9:64:22:83:ad:96:f1:a4:5a:32:bd:
                    83:7a:3c:74:30:8f:67:ad:98:1e:a5:ba:4e:1a:32:
                    fb:30:ab:a7:29:4d:98:af:e5:eb:60:fb:25:07:cb:
                    1e:df:e8:67:0a:3c:2f:8c:a1:0f:a7:ed:c7:c7:e1:
                    b7:55:2c:77:51:a4:02:1c:de:55:1e:dc:cd:07:74:
                    81:a8:46:54:25:4b:2a:fe:98:4f:12:49:22:ea:65:
                    da:e0:54:f3:f3:a5:99:15:6b:97:ac:43:af:87:f3:
                    75:8c:ef:d5:ee:84:0a:63:3c:f7:ab:22:3a:6b:b4:
                    3c:a6:81:67:d1:4b:4a:91:4b:71:de:7d:3e:58:12:
                    7f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:37:E8:D2:CD:78:53:5B:CF:37:00:9C:09:21:B0:D2:68:F4:D6:7D
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:88:7b:f4:de:97:b2:c2:50:ec:44:e7:56:a4:9f:31:b2:9c:
         cc:b0:e4:0f:b5:4f:90:38:de:85:58:82:6e:c0:3e:04:6a:da:
         da:7c:c3:07:f4:5e:49:7f:65:ea:d7:63:0f:c1:13:f4:61:19:
         af:df:c3:08:4d:fd:c5:76:47:f8:9f:3f:4b:19:02:89:9c:be:
         78:82:10:20:ec:b1:b4:40:74:c0:93:d4:34:f9:1c:d4:a5:3a:
         aa:c5:be:28:8f:0f:e5:a0:56:b4:d1:ef:86:d3:e5:72:9d:ed:
         aa:17:09:33:9a:ed:fc:c0:77:73:c0:3c:0a:dd:69:79:39:99:
         89:26:d1:c5:9f:bd:3a:5e:c1:8a:29:79:31:6a:69:f1:ac:50:
         d1:ea:a7:16:50:b4:b4:a5:34:97:ed:23:a4:c9:0c:98:92:69:
         03:e7:ec:33:7d:1f:f1:8b:ab:65:c8:27:e1:92:74:7f:61:2b:
         cb:2b:7f:5d:80:eb:e7:9a:b3:d8:c6:82:c0:95:d8:d2:af:ab:
         50:fc:eb:88:4d:43:c3:fb:6f:c0:f6:b5:b1:d6:d5:33:88:ae:
         dc:68:7c:79:60:2c:92:37:3d:71:10:b2:b4:52:a5:6f:e3:94:
         4c:bc:66:ab:c3:47:1f:05:21:06:53:2f:16:e0:f5:65:32:ec:
         a4:79:4b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:22:01 2025 by rpki-client