Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31342e302f32332d3233203d3e203532353537.roa
File:                     3137372e38362e31342e302f32332d3233203d3e203532353537.roa (raw, json)
Hash identifier:          IEzcZ0jVU9u2lCdj4nYMXoauuUWFKr9Kbn0Gl8WV/XM=
Subject key identifier:   4E:E3:3F:CE:C4:EC:10:6C:35:65:46:48:E9:73:80:63:22:9C:9D:0A
Certificate issuer:       /CN=DD62D40299F8868371F46C77B2902891A6B20ECA
Certificate serial:       23DE538CF58D94FC6281FB02C398C33ABFAA899E
Authority key identifier: DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31342e302f32332d3233203d3e203532353537.roa
Signing time:             Mon 14 Nov 2022 16:55:06 +0000
ROA not before:           Mon 14 Nov 2022 16:50:06 +0000
ROA not after:            Mon 13 Nov 2023 16:55:06 +0000
asID:                     52557
IP address blocks:        177.86.14.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:de:53:8c:f5:8d:94:fc:62:81:fb:02:c3:98:c3:3a:bf:aa:89:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD62D40299F8868371F46C77B2902891A6B20ECA
        Validity
            Not Before: Nov 14 16:50:06 2022 GMT
            Not After : Nov 13 16:55:06 2023 GMT
        Subject: CN=4EE33FCEC4EC106C35654648E9738063229C9D0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:7e:f7:a9:5f:7d:1a:ff:d6:8f:2a:d5:56:59:
                    bf:24:81:b4:00:81:03:1c:54:33:5a:9e:2c:5e:9a:
                    9c:97:05:00:ae:73:b9:3a:0f:03:ee:ba:44:28:00:
                    bd:75:e1:e6:e0:4f:52:a1:9d:18:24:53:b3:20:68:
                    32:b5:7b:06:28:d6:51:2e:ab:94:8e:3f:cf:b9:9f:
                    8f:ca:4c:be:fc:9d:f2:89:80:70:34:80:5a:84:0a:
                    45:6f:16:43:ac:23:83:4f:d8:08:b7:8a:69:41:a2:
                    a0:55:f4:7b:c9:65:3f:9a:d0:b9:fd:54:fc:cd:18:
                    06:67:fa:82:4c:a0:d8:a6:0b:6d:7c:72:c3:0d:0d:
                    e3:ba:23:62:a6:da:e8:2b:6b:da:0b:14:83:3e:e6:
                    71:b4:6c:26:cd:ad:ae:ac:6c:16:6e:0a:90:75:82:
                    20:4c:7d:4f:28:f6:e6:83:27:85:e4:84:b3:51:3d:
                    66:2e:4b:c2:1f:13:34:a0:c9:a6:df:d1:04:db:fb:
                    c5:bd:8e:12:58:b9:51:62:b1:11:f0:19:d4:a2:5e:
                    16:4a:2f:bc:9d:75:ed:79:ba:00:5d:e6:34:8f:e7:
                    1d:87:20:a7:02:a0:73:c6:e5:ba:0e:60:8a:d8:0c:
                    52:30:e1:a7:5c:1f:47:42:3c:70:83:f3:1d:e7:12:
                    5c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E3:3F:CE:C4:EC:10:6C:35:65:46:48:E9:73:80:63:22:9C:9D:0A
            X509v3 Authority Key Identifier:
                keyid:DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/DD62D40299F8868371F46C77B2902891A6B20ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31342e302f32332d3233203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:80:a7:aa:55:42:3e:c9:20:cc:48:fa:db:a1:dd:5e:0b:82:
         87:45:39:73:f4:49:a6:38:4c:a0:ba:fb:f5:f1:a1:b7:13:29:
         eb:65:b5:ad:c3:37:03:b3:99:2b:a6:22:3b:65:61:1a:48:17:
         f7:e5:c6:24:17:b1:55:65:5a:2b:f8:8a:83:da:34:6e:bc:22:
         da:46:9f:31:56:11:1d:58:a7:0d:07:9c:29:b7:18:ba:2d:48:
         cd:9f:17:6a:31:c1:4e:c7:ff:f8:95:c7:47:4a:4b:f6:e1:41:
         d6:e4:7d:ca:41:28:e0:48:f5:fd:2b:50:af:d7:ef:80:2f:aa:
         8d:a9:1c:de:55:16:8c:e5:6e:5d:07:ae:1a:88:78:77:a0:43:
         c6:63:a5:f5:cd:92:0d:43:a7:8f:93:d1:bf:80:e9:9f:13:52:
         55:03:03:7d:c3:a5:dd:3f:d5:4e:88:bb:03:dd:f4:54:bd:ad:
         fc:c7:f9:9d:4e:71:57:9f:5a:52:16:99:9d:a9:82:dd:02:1e:
         8b:77:15:0c:0c:80:c8:ba:4c:ee:8a:44:93:a0:c8:5a:e1:73:
         b8:88:91:f2:c8:06:3b:89:32:ee:5b:8d:e7:06:b4:f6:a2:1f:
         10:ef:a2:66:65:51:78:a5:ea:84:e9:87:67:99:56:1a:cf:56:
         cc:dd:d5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:15 2025 by rpki-client