Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e3138352e3232342e302f32302d3234203d3e20323632363539.roa
File:                     3137372e3138352e3232342e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          xCLuJsXcIy1N65nGS71rPB//uwPGwN8/uXfQdDT2RC4=
Subject key identifier:   27:EB:4C:6B:E5:BF:6B:8B:6C:CB:7C:C0:88:01:48:CB:5D:99:7A:61
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       1A80976EEEED263841993334938C10F09A7EEAD7
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e3138352e3232342e302f32302d3234203d3e20323632363539.roa
Signing time:             Thu 31 Oct 2024 17:14:10 +0000
ROA not before:           Thu 31 Oct 2024 17:09:10 +0000
ROA not after:            Thu 30 Oct 2025 17:14:10 +0000
asID:                     262659
IP address blocks:        177.185.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:80:97:6e:ee:ed:26:38:41:99:33:34:93:8c:10:f0:9a:7e:ea:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:09:10 2024 GMT
            Not After : Oct 30 17:14:10 2025 GMT
        Subject: CN=27EB4C6BE5BF6B8B6CCB7CC0880148CB5D997A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:50:fa:7d:a5:3a:bb:e0:b5:f4:70:3b:f7:
                    05:13:b1:5a:05:fc:a1:39:da:dc:cb:98:62:37:71:
                    23:b3:f6:0a:93:29:d5:c9:53:21:80:51:89:89:79:
                    5e:db:45:8c:52:c8:ef:04:6c:d2:01:fb:da:59:bb:
                    a1:ea:b9:91:17:32:90:c9:de:2a:bf:51:70:df:38:
                    4a:46:bb:92:ac:1b:a7:bf:14:d4:2c:7a:5e:8f:28:
                    42:00:25:1d:78:01:3b:22:67:94:74:1b:96:fc:72:
                    a0:28:2f:fa:28:ae:4d:3f:5f:97:70:4b:57:3d:49:
                    66:d1:d4:b4:03:46:49:49:59:10:cb:a0:2d:a1:61:
                    ba:44:0e:d8:ed:51:0a:dc:19:03:c9:36:ee:9f:d7:
                    84:13:ab:d0:82:ef:71:43:99:0a:5f:cb:d8:43:dd:
                    dd:43:b5:c9:db:b2:18:a6:1c:ff:44:21:13:a4:b5:
                    42:5c:ff:8e:3b:9d:19:4b:1a:59:a4:5f:60:6c:d6:
                    ed:2d:26:d9:38:7b:b0:be:ba:e7:a8:99:cb:eb:70:
                    31:2a:25:29:73:c9:4b:73:9a:45:d1:c2:7c:55:ab:
                    9d:04:f8:9d:30:fc:98:3d:da:6e:24:e5:4e:fc:43:
                    32:9e:8d:06:8a:38:53:23:bf:29:41:92:5e:00:24:
                    ec:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EB:4C:6B:E5:BF:6B:8B:6C:CB:7C:C0:88:01:48:CB:5D:99:7A:61
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e3138352e3232342e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:fc:73:df:fc:eb:d8:40:a7:ae:b2:9f:c7:c8:d3:f9:1c:7f:
         f0:f5:9b:9d:91:c9:a3:d1:6b:59:13:02:ad:09:63:59:ac:07:
         5a:87:d0:ac:11:7e:90:5c:d8:ae:02:50:f8:9e:31:95:21:3e:
         e4:87:ee:92:54:ea:8a:b0:c6:bf:8e:5e:c5:43:60:fd:64:45:
         15:ca:89:01:a1:4f:39:fd:9e:81:f2:b2:51:39:8c:72:bb:00:
         26:25:5b:65:16:17:37:d1:02:15:9e:0c:5a:a1:0b:b8:dc:26:
         85:38:cc:46:93:15:f2:1e:b3:4d:15:9f:af:21:98:66:76:72:
         48:22:cd:93:63:be:f9:c1:f6:79:27:32:86:46:d4:d2:74:10:
         11:0c:26:c8:67:05:3d:8a:4a:1c:94:ce:6f:09:90:c6:c7:ad:
         f6:bd:21:0c:76:f8:61:d4:07:f4:35:c6:11:d9:2c:6a:6f:09:
         b3:89:d7:05:e1:95:03:c1:2f:a2:e4:12:76:fe:9f:d6:c1:94:
         b8:3f:7e:90:31:be:39:ca:1e:0a:bc:75:55:d4:15:cb:5c:59:
         ce:cc:3d:b4:b1:13:07:27:91:7a:dc:4c:03:21:2b:d0:41:26:
         46:17:58:76:9c:d1:5a:3b:01:c3:51:76:e9:1c:0c:6f:cf:90:
         0f:03:bd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:03:42 2025 by rpki-client