Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e392e302f32342d3234203d3e203532353537.roa
File:                     3137372e38362e392e302f32342d3234203d3e203532353537.roa (raw, json)
Hash identifier:          YwU9zgB9D1bSJ18v/RFaw7wg0i07dDXdB/15BT7FNwo=
Subject key identifier:   CB:83:BA:E0:A4:BA:5B:8E:7B:1D:73:D7:68:36:8A:6A:4C:FF:12:8D
Certificate issuer:       /CN=DD62D40299F8868371F46C77B2902891A6B20ECA
Certificate serial:       6C800A24932BD301E3B466B2A051024F9C0A36F2
Authority key identifier: DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e392e302f32342d3234203d3e203532353537.roa
Signing time:             Mon 14 Nov 2022 16:54:46 +0000
ROA not before:           Mon 14 Nov 2022 16:49:46 +0000
ROA not after:            Mon 13 Nov 2023 16:54:46 +0000
asID:                     52557
IP address blocks:        177.86.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:80:0a:24:93:2b:d3:01:e3:b4:66:b2:a0:51:02:4f:9c:0a:36:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD62D40299F8868371F46C77B2902891A6B20ECA
        Validity
            Not Before: Nov 14 16:49:46 2022 GMT
            Not After : Nov 13 16:54:46 2023 GMT
        Subject: CN=CB83BAE0A4BA5B8E7B1D73D768368A6A4CFF128D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:9b:19:3b:86:71:51:75:ae:1e:ba:c0:0f:
                    b4:c8:3f:43:63:f8:4e:6e:dd:a0:08:7d:f8:3c:a3:
                    f3:5b:5b:a6:4e:bd:3a:2c:be:92:26:0e:02:16:49:
                    52:19:55:7b:9a:87:e4:d1:50:bb:19:08:82:42:7f:
                    d8:de:9c:52:40:61:80:40:21:35:92:94:4d:bc:6a:
                    76:72:2f:58:10:6d:48:92:64:f9:aa:b2:ff:50:6f:
                    b2:d8:90:af:bb:7c:a8:ba:1e:01:39:08:68:d6:d9:
                    75:63:a7:0c:5e:99:74:0d:db:2e:74:19:f7:e3:b3:
                    8d:31:f2:5b:9b:a9:94:f2:a6:88:28:7b:de:9d:e0:
                    b2:09:dc:28:e0:d2:00:4d:74:d9:ca:26:42:8f:d9:
                    41:67:0e:3e:5e:33:03:8d:de:39:12:09:70:44:6b:
                    9a:d4:e7:a1:36:7a:76:bf:33:cb:35:09:8e:e1:d1:
                    8e:ef:0a:91:c3:95:9b:3e:0a:ee:4c:ea:81:39:2a:
                    1b:18:fe:12:31:d3:d5:07:de:39:79:5e:82:7a:64:
                    a3:a0:e4:98:8d:1c:df:ee:5c:2c:d4:8c:60:d6:05:
                    bd:99:d8:32:8c:55:0c:4e:6f:3e:98:fd:e1:55:24:
                    29:c4:4b:ed:3e:43:62:5a:4a:1a:46:da:4c:13:8d:
                    18:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:83:BA:E0:A4:BA:5B:8E:7B:1D:73:D7:68:36:8A:6A:4C:FF:12:8D
            X509v3 Authority Key Identifier:
                keyid:DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/DD62D40299F8868371F46C77B2902891A6B20ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e392e302f32342d3234203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:03:0c:80:54:16:f3:90:d3:c0:2c:c9:bb:d8:55:56:7a:22:
         e5:8d:cf:a1:ac:df:0d:f0:c4:52:46:27:72:a3:96:93:39:7e:
         87:13:71:b2:d9:71:8a:db:bd:ba:a9:2a:ca:61:1b:23:25:73:
         ba:d6:38:58:31:1f:a5:ff:b4:21:b6:50:f0:34:63:38:60:da:
         2b:07:56:1f:2b:99:81:86:4d:7a:59:d0:b2:c0:d5:f9:ca:e3:
         ea:18:a0:62:53:c3:39:4f:15:e7:f5:0a:a8:f2:af:9c:b7:67:
         6f:0b:65:24:84:7b:d8:ea:a7:04:5a:d1:8b:09:1d:4a:7f:26:
         e8:9f:ba:53:89:30:af:fa:03:d2:00:ad:8c:99:38:68:b7:92:
         4e:59:55:26:3e:45:7a:33:0c:8e:d2:29:4a:6d:93:40:24:c5:
         9a:31:9e:6a:6c:5f:c6:53:e9:40:a6:d7:a7:b1:88:69:3b:32:
         00:5b:34:ee:a9:b4:17:23:cf:85:e9:a6:12:d1:48:95:5f:6a:
         da:a8:e6:aa:c9:93:73:68:3f:5c:a7:36:1a:51:35:a1:ed:c3:
         b9:c2:1e:ce:17:b7:59:a4:11:76:98:04:cc:e7:12:31:99:f7:
         87:2b:e9:1e:4a:c5:07:20:ac:4f:3c:16:75:8e:7b:cf:8d:38:
         95:86:c5:cc
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUbIAKJJMr0wHjtGayoFECT5wKNvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ2MkQ0MDI5OUY4ODY4MzcxRjQ2Qzc3QjI5MDI4OTFB
NkIyMEVDQTAeFw0yMjExMTQxNjQ5NDZaFw0yMzExMTMxNjU0NDZaMDMxMTAvBgNV
BAMTKENCODNCQUUwQTRCQTVCOEU3QjFENzNENzY4MzY4QTZBNENGRjEyOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQxJsZO4ZxUXWuHrrAD7TIP0Nj
+E5u3aAIffg8o/NbW6ZOvTosvpImDgIWSVIZVXuah+TRULsZCIJCf9jenFJAYYBA
ITWSlE28anZyL1gQbUiSZPmqsv9Qb7LYkK+7fKi6HgE5CGjW2XVjpwxemXQN2y50
Gffjs40x8lubqZTypogoe96d4LIJ3Cjg0gBNdNnKJkKP2UFnDj5eMwON3jkSCXBE
a5rU56E2ena/M8s1CY7h0Y7vCpHDlZs+Cu5M6oE5KhsY/hIx09UH3jl5XoJ6ZKOg
5JiNHN/uXCzUjGDWBb2Z2DKMVQxObz6Y/eFVJCnES+0+Q2JaShpG2kwTjRiDAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUy4O64KS6W457HXPXaDaKakz/Eo0wHwYDVR0j
BBgwFoAU3WLUApn4hoNx9Gx3spAokaayDsowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTlLNjFzazVTNUE1MUVGZWt6M2JIY05oOWZVZG1EZnhBODlramt6UERX
THEvMC9ERDYyRDQwMjk5Rjg4NjgzNzFGNDZDNzdCMjkwMjg5MUE2QjIwRUNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RENjJENDAyOTlGODg2ODM3
MUY0NkM3N0IyOTAyODkxQTZCMjBFQ0EuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk5SzYxc2s1UzVBNTFFRmVrejNiSGNOaDlmVWRtRGZ4QTg5a2prelBEV0xxLzAv
MzEzNzM3MmUzODM2MmUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzNTM1
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACxVgkwDQYJKoZIhvcNAQELBQADggEBAI0DDIBUFvOQ08As
ybvYVVZ6IuWNz6Gs3w3wxFJGJ3KjlpM5focTcbLZcYrbvbqpKsphGyMlc7rWOFgx
H6X/tCG2UPA0Yzhg2isHVh8rmYGGTXpZ0LLA1fnK4+oYoGJTwzlPFef1Cqjyr5y3
Z28LZSSEe9jqpwRa0YsJHUp/JuifulOJMK/6A9IArYyZOGi3kk5ZVSY+RXozDI7S
KUptk0AkxZoxnmpsX8ZT6UCm16exiGk7MgBbNO6ptBcjz4XpphLRSJVfatqo5qrJ
k3NoP1ynNhpRNaHtw7nCHs4Xt1mkEXaYBMznEjGZ94cr6R5KxQcgrE88FnWOe8+N
OJWGxcw=
-----END CERTIFICATE-----
Generated at Fri Mar 14 00:05:59 2025 by rpki-client