Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32322e302f32342d3234203d3e20323632363230.roa
File:                     3137372e38362e32322e302f32342d3234203d3e20323632363230.roa (raw, json)
Hash identifier:          gDCgSvM/MUW/bySUPbSbQhuE+9dZ0DxGdG4Nz4YGFSM=
Subject key identifier:   1A:C6:47:4D:EE:3D:72:DE:DC:DB:78:6E:35:77:DA:30:9C:F8:A5:90
Certificate issuer:       /CN=D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1
Certificate serial:       0238D9D5DBA8A3A4AD4C0B4E391844952082CD67
Authority key identifier: D5:D1:3C:A4:5D:DA:9F:FF:B2:CC:93:AF:53:52:30:F2:3F:BE:01:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32322e302f32342d3234203d3e20323632363230.roa
Signing time:             Thu 05 Sep 2024 11:38:55 +0000
ROA not before:           Thu 05 Sep 2024 11:33:55 +0000
ROA not after:            Thu 04 Sep 2025 11:38:55 +0000
asID:                     262620
IP address blocks:        177.86.22.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:38:d9:d5:db:a8:a3:a4:ad:4c:0b:4e:39:18:44:95:20:82:cd:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1
        Validity
            Not Before: Sep  5 11:33:55 2024 GMT
            Not After : Sep  4 11:38:55 2025 GMT
        Subject: CN=1AC6474DEE3D72DEDCDB786E3577DA309CF8A590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:96:e2:a4:68:63:08:ca:2c:c5:c9:78:e8:
                    d0:9b:50:0d:eb:04:bc:bb:8d:fc:e4:12:d9:ad:c8:
                    b3:b2:5a:c4:30:36:51:ba:da:dc:e5:28:84:88:36:
                    2b:24:e8:1b:09:61:20:8c:c0:44:5b:c6:62:d9:38:
                    a5:7f:a3:22:91:56:d7:4e:58:45:69:53:2b:ba:0e:
                    4b:ff:c6:32:24:9d:6a:4d:34:18:76:93:ea:f6:f3:
                    ae:72:67:f5:53:71:92:05:f5:30:ac:8a:41:2f:99:
                    67:0f:08:26:ff:f6:75:f8:f7:14:04:9d:9c:66:4a:
                    9c:cc:3f:75:97:f7:13:52:8c:35:1b:a4:d6:bc:6a:
                    75:77:27:38:4e:cc:24:e1:66:c0:e3:62:7b:82:43:
                    6b:11:29:1d:b5:36:51:19:67:7d:a2:24:22:81:3c:
                    e7:cf:b8:7a:66:04:4e:14:25:d2:54:2e:f2:09:7e:
                    12:1a:49:5a:cf:0e:3b:a2:7d:f9:3c:00:f5:df:c2:
                    65:99:f4:09:0e:98:16:f0:c1:d1:68:0d:06:a4:58:
                    57:c7:24:ea:09:a1:53:64:57:a7:92:7b:77:1e:aa:
                    df:14:46:6c:76:ea:1d:b8:bb:dc:87:fd:d6:0a:29:
                    fc:72:4f:4e:33:a4:52:d1:48:93:7b:ad:03:71:f9:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C6:47:4D:EE:3D:72:DE:DC:DB:78:6E:35:77:DA:30:9C:F8:A5:90
            X509v3 Authority Key Identifier:
                keyid:D5:D1:3C:A4:5D:DA:9F:FF:B2:CC:93:AF:53:52:30:F2:3F:BE:01:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32322e302f32342d3234203d3e20323632363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:a8:0d:98:a6:bd:ec:6a:12:29:2c:f5:ba:34:a3:8f:af:e7:
         0e:ff:93:2f:c1:1c:df:82:b4:8a:a1:84:e8:63:2d:92:ec:37:
         b4:d2:04:24:8d:9a:63:41:e6:55:5a:05:95:03:94:87:71:e1:
         8a:09:f7:23:ca:be:6a:e7:21:3b:96:59:59:f7:af:37:18:44:
         68:c9:d3:5c:ac:1b:38:c0:aa:c4:f8:ff:54:5e:34:00:ca:6d:
         79:41:b5:dd:e1:50:8b:16:0d:5c:d0:fb:a2:53:bc:75:e4:22:
         75:f3:cb:f0:da:7c:ce:e3:59:b5:93:d3:ec:b5:b7:30:76:39:
         0f:be:15:be:f6:e3:85:33:83:ec:67:bb:fc:14:e2:75:50:ba:
         b6:f7:79:e5:10:83:ae:a4:0a:ea:78:42:16:ac:f0:5c:ba:5b:
         ae:90:0c:db:e4:1b:1a:19:f0:1a:a4:d6:5c:f6:07:83:18:17:
         ad:5c:d0:10:e8:49:05:38:fc:2c:7f:71:b2:e0:09:fe:46:85:
         74:87:ef:2e:61:df:a3:c0:84:4c:fd:6b:6c:c9:f7:fe:c9:af:
         b7:e3:de:be:f2:b9:ef:85:86:bc:f0:16:73:d2:92:9e:bc:fa:
         0c:48:ad:a5:96:e6:f3:5d:80:2b:d3:ee:99:c1:e4:bb:f8:98:
         dd:2c:19:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:47 2025 by rpki-client