Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e382e302f32312d3332203d3e203532353537.roa
File:                     3137372e38362e382e302f32312d3332203d3e203532353537.roa (raw, json)
Hash identifier:          0JmxJMv7O1PV1rZXvPQJY0LGNbNrWGt2RMiplqihwno=
Subject key identifier:   2F:B8:90:27:78:00:A1:99:D9:A4:44:8D:93:10:94:BB:5C:88:12:18
Certificate issuer:       /CN=DD62D40299F8868371F46C77B2902891A6B20ECA
Certificate serial:       3EE87EA1B03F2F3DAA433D535EE9D4A1AD5669D2
Authority key identifier: DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e382e302f32312d3332203d3e203532353537.roa
Signing time:             Thu 29 Dec 2022 18:35:21 +0000
ROA not before:           Thu 29 Dec 2022 18:30:21 +0000
ROA not after:            Thu 28 Dec 2023 18:35:21 +0000
asID:                     52557
IP address blocks:        177.86.8.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e8:7e:a1:b0:3f:2f:3d:aa:43:3d:53:5e:e9:d4:a1:ad:56:69:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD62D40299F8868371F46C77B2902891A6B20ECA
        Validity
            Not Before: Dec 29 18:30:21 2022 GMT
            Not After : Dec 28 18:35:21 2023 GMT
        Subject: CN=2FB890277800A199D9A4448D931094BB5C881218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:41:62:0e:77:24:f9:ac:db:d1:7b:20:8b:e3:
                    af:88:a8:86:c6:0f:67:0b:32:24:99:88:54:2c:0e:
                    a7:ef:50:9a:60:6b:b1:e2:e2:8a:c0:bd:af:4d:f9:
                    08:06:82:ac:b7:fb:57:bc:e9:5d:ea:aa:3f:4a:82:
                    e7:af:98:88:d0:47:27:63:bd:54:62:f4:40:fc:0a:
                    ed:39:4f:59:43:a7:47:55:e1:8f:e2:9c:f4:87:83:
                    07:90:8b:01:29:92:4a:41:29:2e:c5:77:29:be:87:
                    8d:ab:b9:50:c5:1c:10:2f:a6:aa:65:0b:08:84:28:
                    76:dd:7a:69:9c:87:08:d0:21:63:7f:f1:75:22:6f:
                    2f:a0:c5:c3:d6:2d:6f:39:bb:d0:94:bb:d0:af:9b:
                    ab:33:7b:62:65:11:35:a3:8d:29:f2:e8:ba:84:5e:
                    5d:03:6b:36:59:90:47:d7:ec:61:a4:ca:65:c6:bb:
                    6c:e4:e3:12:60:fb:b6:2a:20:f9:b4:36:8e:41:eb:
                    d5:ca:12:63:be:69:60:33:96:03:eb:17:71:fd:2f:
                    94:45:47:d3:fd:0f:6b:a8:42:cc:53:7d:de:64:a9:
                    6b:e4:27:e2:06:83:a3:66:9c:bd:7b:21:d8:cb:96:
                    72:a8:16:db:c3:dc:fe:15:00:5a:78:e9:26:f0:08:
                    cb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B8:90:27:78:00:A1:99:D9:A4:44:8D:93:10:94:BB:5C:88:12:18
            X509v3 Authority Key Identifier:
                keyid:DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/DD62D40299F8868371F46C77B2902891A6B20ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e382e302f32312d3332203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:3e:4e:7d:14:0d:11:24:92:e9:60:fa:87:99:e6:0e:63:43:
         30:be:99:af:3e:52:40:ce:e6:2c:a9:eb:7b:a0:b1:14:73:64:
         3a:01:59:e0:e2:6e:64:88:de:5a:89:d7:a5:6a:4d:3b:5b:4e:
         fa:64:24:aa:3f:58:12:36:b9:77:27:ea:b2:99:51:94:e4:51:
         38:ba:f2:65:bc:50:99:f3:15:b6:21:79:2e:5c:e6:c2:41:c6:
         7c:81:19:7e:d3:03:ff:af:98:dd:f8:34:8c:65:e7:21:9e:58:
         37:83:d5:03:6d:7c:8c:d5:af:86:a0:68:da:94:2f:8d:c3:a7:
         5f:69:7b:ad:2d:26:99:8e:21:cd:2c:56:92:db:5e:ce:cb:a2:
         37:8e:a0:b7:81:a7:6c:36:31:cc:77:99:48:02:08:e7:3f:ef:
         ef:07:09:18:3a:b8:a0:93:c8:80:2e:15:7d:0c:88:cb:a5:b6:
         3c:be:74:dc:d1:38:61:e6:69:b5:68:0d:2c:62:3e:9d:24:fe:
         31:c1:8a:fc:e3:87:ee:c7:1d:61:7d:f8:c1:21:e7:16:4d:f6:
         5f:5b:f8:95:14:92:fc:dc:5f:cf:0c:cd:6b:f5:bf:98:b8:c8:
         1c:a6:b7:96:e5:af:26:9d:5b:56:3b:be:a9:da:b3:ee:fd:70:
         69:6d:67:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:06:07 2025 by rpki-client