Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31352e302f32342d3234203d3e203532353537.roa
File:                     3137372e38362e31352e302f32342d3234203d3e203532353537.roa (raw, json)
Hash identifier:          tdh5f6tmBiW+qD3nQaWc3Qfk/w/lEthDE5oT0rAut/Q=
Subject key identifier:   37:BB:C0:E7:05:2E:DB:96:3E:82:DD:0D:22:EB:A7:96:54:1D:0C:4C
Certificate issuer:       /CN=DD62D40299F8868371F46C77B2902891A6B20ECA
Certificate serial:       74252EDC56D0DF029EAD2FA76C05DF979D4A1148
Authority key identifier: DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31352e302f32342d3234203d3e203532353537.roa
Signing time:             Fri 16 Dec 2022 22:37:10 +0000
ROA not before:           Fri 16 Dec 2022 22:32:10 +0000
ROA not after:            Fri 15 Dec 2023 22:37:10 +0000
asID:                     52557
IP address blocks:        177.86.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:25:2e:dc:56:d0:df:02:9e:ad:2f:a7:6c:05:df:97:9d:4a:11:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD62D40299F8868371F46C77B2902891A6B20ECA
        Validity
            Not Before: Dec 16 22:32:10 2022 GMT
            Not After : Dec 15 22:37:10 2023 GMT
        Subject: CN=37BBC0E7052EDB963E82DD0D22EBA796541D0C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d8:03:6c:cf:12:f0:1c:23:18:65:53:fe:53:
                    0a:b1:a5:24:ae:bf:b7:d3:5b:51:83:9c:46:73:d8:
                    28:02:4f:07:2b:1c:8d:90:0a:a5:5e:fd:07:c0:25:
                    c9:b0:8f:bd:4c:6b:5c:a4:15:22:a9:ed:b5:ac:5a:
                    07:dd:59:2e:df:6e:e8:e5:df:04:04:1f:a5:d5:af:
                    db:49:d5:11:02:7d:0a:c1:b7:1d:10:e3:7a:93:6f:
                    b5:6a:9c:c8:ed:15:17:eb:5c:ed:45:59:58:86:33:
                    6a:c9:d5:c5:ab:63:4f:69:6d:44:d9:9d:fb:bf:c2:
                    52:68:cb:01:8e:d7:d2:3e:f6:b4:ae:03:e8:66:cc:
                    b9:55:c6:7e:7d:fe:46:d6:0d:af:19:4f:4b:0c:6c:
                    14:d7:c9:f9:e9:69:c1:67:f8:27:8d:83:75:2e:f7:
                    33:47:76:1b:46:56:9e:50:95:a5:d3:c0:45:1e:97:
                    5b:51:e7:27:78:09:74:a7:30:5a:da:3a:37:86:32:
                    79:a4:c9:77:f6:cd:be:40:fa:0b:df:52:10:8d:56:
                    b1:14:34:6b:70:1a:b2:c2:12:fd:4a:b1:29:ce:22:
                    a6:9f:3e:e7:dd:ba:dc:a8:e3:13:10:fa:71:0d:d4:
                    7e:9f:cf:11:7f:03:ce:4b:ab:85:13:a6:c2:3d:91:
                    53:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BB:C0:E7:05:2E:DB:96:3E:82:DD:0D:22:EB:A7:96:54:1D:0C:4C
            X509v3 Authority Key Identifier:
                keyid:DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/DD62D40299F8868371F46C77B2902891A6B20ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31352e302f32342d3234203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:9c:99:db:62:5a:62:f9:00:f3:0b:fb:dd:5e:ec:6a:0e:76:
         08:e6:de:65:f9:2a:54:4e:b1:ff:af:1b:e3:da:04:58:4e:77:
         2a:68:51:d5:d7:a6:a2:7c:52:5c:2e:43:53:41:3a:f1:3c:bb:
         26:a8:0e:25:30:f2:6c:12:0e:d6:bb:23:44:86:54:d0:09:37:
         42:b3:da:22:0e:ab:7b:cd:11:bf:44:68:fd:1c:27:f7:4d:70:
         1c:31:7c:de:d5:b1:ac:ce:03:b4:72:d3:8a:28:e7:35:89:99:
         81:1a:6c:43:ef:96:f0:0a:ca:a6:3c:31:3c:19:68:af:02:c1:
         e5:2e:73:4a:50:c4:7d:4d:fd:e4:f0:a0:38:30:e9:36:76:d1:
         de:4b:02:8e:9a:08:35:6f:7b:9a:36:f0:8c:07:88:6c:3e:21:
         5a:82:29:cd:9d:ca:78:ef:9a:1e:0d:05:cc:79:49:f5:88:93:
         4e:64:2e:1f:2c:fc:8e:0a:d3:6a:72:26:a0:e6:17:3f:7c:7e:
         b6:6a:2a:ca:a3:1f:4f:c2:ac:1f:b0:f4:24:34:2f:6d:b2:20:
         b1:20:45:c1:a8:2d:66:26:3c:51:54:34:df:bc:5c:bc:fc:7a:
         5c:50:6f:70:58:9a:6a:c7:03:43:7b:ed:ba:b5:7c:34:d1:25:
         7c:33:25:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:12 2025 by rpki-client