Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32332e302f32342d3234203d3e20323632363230.roa
File:                     3137372e38362e32332e302f32342d3234203d3e20323632363230.roa (raw, json)
Hash identifier:          t2WmtAevtVzEIkEx5P13XZk26SGFJOjrHudbpbajrdo=
Subject key identifier:   80:B4:B4:22:A5:3E:7C:D6:B8:12:D1:9D:F0:41:8E:C9:E1:13:A7:F4
Certificate issuer:       /CN=D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1
Certificate serial:       3905326BF487355BDAD827DF468852DFAB96663E
Authority key identifier: D5:D1:3C:A4:5D:DA:9F:FF:B2:CC:93:AF:53:52:30:F2:3F:BE:01:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32332e302f32342d3234203d3e20323632363230.roa
Signing time:             Fri 08 Nov 2024 13:32:25 +0000
ROA not before:           Fri 08 Nov 2024 13:27:25 +0000
ROA not after:            Fri 07 Nov 2025 13:32:25 +0000
asID:                     262620
IP address blocks:        177.86.23.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:05:32:6b:f4:87:35:5b:da:d8:27:df:46:88:52:df:ab:96:66:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1
        Validity
            Not Before: Nov  8 13:27:25 2024 GMT
            Not After : Nov  7 13:32:25 2025 GMT
        Subject: CN=80B4B422A53E7CD6B812D19DF0418EC9E113A7F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:29:66:57:a5:cb:09:b2:d4:af:ed:d2:0f:e6:
                    6d:dd:8a:a3:48:1c:d2:75:22:78:40:ed:ba:c7:af:
                    61:d9:b5:59:a0:77:e0:d9:9a:66:ce:92:ee:44:dd:
                    f7:8c:f5:35:4b:da:2f:05:e6:d9:6c:15:6d:2f:45:
                    05:59:14:15:47:ba:ee:4b:8c:41:dd:82:eb:d9:98:
                    84:dd:c9:a0:dd:dd:c5:56:18:67:fe:28:e4:3d:c1:
                    94:7f:aa:61:e4:74:33:44:3b:f4:25:83:57:f0:78:
                    13:c0:14:27:15:cb:18:2b:8e:26:4b:c0:ef:19:50:
                    8f:88:90:ec:67:ad:b2:aa:25:b1:2d:5d:f4:f8:13:
                    8e:5b:1b:68:26:83:a5:f1:7e:aa:87:36:37:04:01:
                    97:51:ff:45:b5:80:49:27:df:0a:29:5b:67:1c:76:
                    33:f6:a6:89:80:76:7e:b0:7a:bb:d7:e2:d8:b4:90:
                    8e:79:48:2b:8c:3e:89:d5:bc:ce:0b:9c:16:da:f5:
                    e7:ce:95:41:76:eb:0f:8e:cb:2d:6c:a0:a4:bc:db:
                    9a:eb:04:7c:b0:d4:33:6e:8d:70:2e:00:5d:9a:91:
                    b5:a0:bd:fc:36:34:6a:e0:cf:f5:fa:9c:65:ac:5f:
                    fa:d7:e6:16:f1:63:a0:09:86:ab:ea:8d:55:3f:38:
                    c7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B4:B4:22:A5:3E:7C:D6:B8:12:D1:9D:F0:41:8E:C9:E1:13:A7:F4
            X509v3 Authority Key Identifier:
                keyid:D5:D1:3C:A4:5D:DA:9F:FF:B2:CC:93:AF:53:52:30:F2:3F:BE:01:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32332e302f32342d3234203d3e20323632363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:52:93:b1:6e:e6:d5:63:55:20:ca:7a:49:2b:b6:bf:ab:d6:
         f0:93:d3:4e:27:d0:0f:84:72:e2:27:05:9d:d1:ff:a1:9e:a5:
         c5:0d:29:69:6d:6e:0e:9c:25:db:ea:f0:c0:b3:04:fa:0d:ca:
         aa:c3:28:f7:2f:42:c9:eb:f5:d7:6e:50:d1:0c:f5:f1:e1:74:
         df:db:f1:77:3f:8e:10:0d:22:c2:6f:ec:a3:85:e5:e3:f5:db:
         24:ac:e3:39:30:83:49:41:34:78:e8:bc:fe:6d:0b:fe:6a:d1:
         2b:68:70:12:59:f6:1d:b7:d3:f2:0d:56:71:20:28:93:a3:55:
         d0:80:a0:a8:81:cd:7c:9e:44:67:9e:a5:b4:61:b4:28:3c:f1:
         0e:68:6c:b4:93:9b:90:a3:18:01:30:5e:a3:d6:0e:a1:47:42:
         23:b3:68:e6:cd:1d:66:81:ce:53:8f:1b:2c:73:e5:b5:de:a7:
         d4:a4:d7:b5:83:02:9a:63:dd:28:d4:ec:a1:e0:b6:70:25:97:
         92:7f:98:3a:1b:e4:0b:22:ee:26:20:ae:8f:34:40:d0:94:dd:
         f9:51:16:8a:89:b2:3e:40:8b:62:33:39:b6:ab:1d:47:f5:14:
         71:da:89:99:c8:0a:25:28:39:7b:0e:94:bf:aa:3c:50:8a:90:
         36:98:d8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:11 2025 by rpki-client