Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31322e302f32342d3234203d3e203532353537.roa
File:                     3137372e38362e31322e302f32342d3234203d3e203532353537.roa (raw, json)
Hash identifier:          ej3yep/3Q2tsEaydMRczKMhxIv2FFy9VfG5rpFlKZ4A=
Subject key identifier:   3B:A7:6E:24:95:DB:4C:C2:E0:A0:38:43:19:E1:4D:4C:3F:B9:65:46
Certificate issuer:       /CN=DD62D40299F8868371F46C77B2902891A6B20ECA
Certificate serial:       5522C1149081D4A2E4E6A7528467D49E7A1976A1
Authority key identifier: DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31322e302f32342d3234203d3e203532353537.roa
Signing time:             Fri 16 Dec 2022 22:36:58 +0000
ROA not before:           Fri 16 Dec 2022 22:31:58 +0000
ROA not after:            Fri 15 Dec 2023 22:36:58 +0000
asID:                     52557
IP address blocks:        177.86.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:22:c1:14:90:81:d4:a2:e4:e6:a7:52:84:67:d4:9e:7a:19:76:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD62D40299F8868371F46C77B2902891A6B20ECA
        Validity
            Not Before: Dec 16 22:31:58 2022 GMT
            Not After : Dec 15 22:36:58 2023 GMT
        Subject: CN=3BA76E2495DB4CC2E0A0384319E14D4C3FB96546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e1:51:b0:a4:40:9f:4e:9a:18:8b:71:82:d4:
                    23:73:6c:8a:0c:a9:e9:c7:89:75:72:7f:1f:69:e0:
                    8a:a1:18:57:91:55:af:1a:6c:45:2a:93:d5:19:90:
                    8e:30:91:01:b5:57:f3:59:06:f8:8d:e7:15:e9:ba:
                    1b:c8:53:63:d4:6f:9b:6c:24:a5:88:e4:c3:69:47:
                    b4:f8:7b:26:21:d7:f7:62:e6:be:9b:ea:49:3f:f4:
                    5a:e2:62:f0:24:4b:b2:fb:19:00:1f:76:18:46:22:
                    cc:02:e3:5b:a3:73:ef:6f:37:24:78:5d:a9:45:ab:
                    ea:d5:55:fe:44:50:3c:c6:87:a8:10:7a:0f:4a:ab:
                    96:a2:0e:70:a9:3a:0b:8d:c7:73:ba:66:33:78:aa:
                    b5:aa:d0:5b:cf:ed:56:87:85:11:7f:da:4f:c9:f5:
                    95:90:e4:18:06:67:c0:97:d1:68:63:0e:2c:e9:c3:
                    23:5c:28:a9:c3:b8:7a:99:d5:6c:0c:c0:a0:d1:45:
                    b9:a6:69:06:4b:d1:32:a6:2f:35:b1:56:11:91:01:
                    76:5f:d4:9c:f9:cd:f2:98:53:d4:9c:58:3b:7c:29:
                    23:aa:56:bb:d3:96:f0:27:4a:f6:43:21:8e:93:61:
                    6d:d0:48:72:1f:4c:2a:e3:bf:70:5c:32:eb:c7:7c:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A7:6E:24:95:DB:4C:C2:E0:A0:38:43:19:E1:4D:4C:3F:B9:65:46
            X509v3 Authority Key Identifier:
                keyid:DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/DD62D40299F8868371F46C77B2902891A6B20ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31322e302f32342d3234203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:48:28:78:52:b2:36:f7:9e:d5:5a:e0:6c:95:dc:d8:88:89:
         fe:f7:07:44:67:5b:39:d6:25:36:22:c0:25:14:89:fe:f5:23:
         19:4c:5a:0c:72:51:62:69:69:45:19:c3:0b:17:e7:09:46:fe:
         b6:a1:98:dc:23:5f:32:0d:1e:67:cf:10:3e:68:5d:9d:6b:c2:
         aa:2e:e4:a9:5d:d1:6d:a1:b7:ef:ee:cd:fd:79:ae:8e:df:27:
         a4:e1:c1:b7:67:03:52:33:3f:49:a7:8b:5a:f1:27:7c:fa:03:
         e7:51:e4:97:34:20:9a:8a:aa:46:5d:d3:95:37:e7:bf:db:83:
         14:73:b7:21:5f:57:40:0b:f8:b0:11:45:e9:47:1a:90:9b:34:
         9c:0b:9f:11:16:34:8c:63:b2:37:f0:70:49:91:fc:c1:44:6f:
         70:ce:1b:2e:ad:5b:0d:f9:f6:ea:60:53:97:25:45:e6:3b:65:
         f0:58:d1:dc:40:09:44:3f:2d:a6:cb:49:12:4c:22:6d:41:65:
         5d:25:08:b8:cb:af:cb:c3:bd:c5:ff:3a:dc:56:df:7e:76:17:
         14:dc:74:f3:6f:1e:10:e8:99:7e:f4:a1:25:32:db:f9:7c:59:
         57:16:8a:27:83:14:a8:1e:0c:fa:7f:10:e2:29:a8:ba:10:fd:
         96:02:09:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:12 2025 by rpki-client