Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e3133302e39362e302f32302d3234203d3e203238323837.roa
File:                     3137372e3133302e39362e302f32302d3234203d3e203238323837.roa (raw, json)
Hash identifier:          ONnFMrAGJcpjIug9NXSBA4PeBenVOBbVnmz/evfRnO4=
Subject key identifier:   65:DF:FF:22:96:C9:0D:F3:52:37:5F:58:A7:97:BE:62:59:B2:4D:4A
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       3895D51A75101178A2B2E1FE942062125B55FA47
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e3133302e39362e302f32302d3234203d3e203238323837.roa
Signing time:             Thu 31 Oct 2024 17:24:24 +0000
ROA not before:           Thu 31 Oct 2024 17:19:24 +0000
ROA not after:            Thu 30 Oct 2025 17:24:24 +0000
asID:                     28287
IP address blocks:        177.130.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:95:d5:1a:75:10:11:78:a2:b2:e1:fe:94:20:62:12:5b:55:fa:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:19:24 2024 GMT
            Not After : Oct 30 17:24:24 2025 GMT
        Subject: CN=65DFFF2296C90DF352375F58A797BE6259B24D4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:f0:c0:17:3b:96:53:1b:24:e8:03:e3:29:
                    40:a6:2f:b2:e7:c2:97:94:02:c1:84:fc:cd:a2:95:
                    90:03:cb:4c:8b:3c:1e:7d:67:57:12:25:62:34:6c:
                    0f:fd:9c:d3:4c:e6:ad:46:89:63:98:bd:2e:77:17:
                    e6:a9:5c:0b:c2:7b:fb:f9:16:ad:7b:db:08:c8:16:
                    1a:9c:23:62:0d:7e:a4:c9:52:b2:49:6b:b6:96:c8:
                    c4:70:b1:68:fb:02:8a:64:51:9d:c9:e3:73:36:f1:
                    39:7e:b1:74:58:e9:9f:78:77:62:cd:e3:e3:9c:09:
                    bf:c5:52:7f:9e:a6:5b:b7:de:e8:fc:23:18:b2:7b:
                    94:f1:1d:4c:75:d9:4a:a2:ab:e0:ba:04:a3:a6:4f:
                    e2:5e:ab:f0:5e:de:28:ec:42:d2:b2:65:4d:8b:9d:
                    8e:e1:9f:89:7e:95:73:19:08:6a:0e:59:3e:40:82:
                    c1:ad:82:29:9f:93:bd:d0:04:57:32:8d:73:0e:ab:
                    11:2d:25:fb:3d:a9:79:af:7d:7b:b6:cd:30:9e:89:
                    ab:37:e4:9b:b0:94:b6:b6:21:c2:c2:01:fe:1a:5d:
                    95:f2:0b:bd:2a:bc:fc:2e:ff:fa:51:46:c7:c4:61:
                    5c:25:d4:62:a1:cb:40:78:ce:02:53:76:09:ab:ef:
                    ca:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DF:FF:22:96:C9:0D:F3:52:37:5F:58:A7:97:BE:62:59:B2:4D:4A
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e3133302e39362e302f32302d3234203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:f9:16:a2:64:c8:7d:d2:47:e2:33:74:fd:98:da:cb:44:d5:
         57:04:45:07:57:9b:f1:1c:9b:80:90:8b:7f:c2:7d:24:e7:a5:
         e0:8e:ce:42:5b:6f:33:34:61:d1:0a:75:f4:d0:d0:b6:15:7e:
         ab:e9:8a:f9:a0:62:d1:ac:ed:4d:b6:a5:82:95:24:cd:b8:33:
         04:b2:dd:ae:c2:84:e6:3e:64:fd:c4:11:81:96:db:e3:45:45:
         db:35:f6:60:df:07:84:30:a4:d4:7a:e3:58:b2:2f:1b:24:a9:
         79:7d:b6:b3:1e:09:05:ca:54:aa:a6:94:e4:1d:d6:b3:9a:de:
         f2:72:a5:f7:6e:96:a9:33:84:08:3e:12:90:dc:64:81:98:7d:
         6f:15:2e:66:be:bd:5c:04:f6:fa:79:ed:df:b8:b9:24:b6:3c:
         27:3b:24:25:9e:8d:1f:5b:ef:17:2d:bb:d0:c6:27:9e:c4:f2:
         1e:7d:7f:f8:d8:d2:39:1d:93:5f:90:c1:7d:1b:7f:3d:81:aa:
         c9:db:61:81:d8:02:c7:ee:89:6a:5b:0e:3d:1b:0c:a3:a6:b1:
         b6:60:d9:fb:8b:b3:2e:85:dc:58:f7:ac:c8:e4:f3:8e:59:fb:
         14:55:0f:bb:45:d9:e2:08:12:67:2b:4c:39:c3:77:fd:33:45:
         96:ab:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:07 2025 by rpki-client