Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38342e302f32332d3233203d3e20323632393737.roa
File:                     3137372e3139302e38342e302f32332d3233203d3e20323632393737.roa (raw, json)
Hash identifier:          IHWkFKIDyvcXPDYzxlYQ9/ZLyxPfLhKu/ik2jmQ6aZQ=
Subject key identifier:   62:8B:04:5D:5B:4C:06:DB:C0:FF:E7:AF:83:F9:87:F1:68:6C:1B:19
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       3A14A07BC846849C2BAB85D95779CE15A4D9A4C6
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38342e302f32332d3233203d3e20323632393737.roa
Signing time:             Wed 14 Aug 2024 19:56:23 +0000
ROA not before:           Wed 14 Aug 2024 19:51:23 +0000
ROA not after:            Wed 13 Aug 2025 19:56:23 +0000
asID:                     262977
IP address blocks:        177.190.84.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:14:a0:7b:c8:46:84:9c:2b:ab:85:d9:57:79:ce:15:a4:d9:a4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: Aug 14 19:51:23 2024 GMT
            Not After : Aug 13 19:56:23 2025 GMT
        Subject: CN=628B045D5B4C06DBC0FFE7AF83F987F1686C1B19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:c1:1d:54:bc:2c:ec:44:f0:e6:3e:b9:1b:
                    20:3c:9d:58:47:4f:0b:8c:0d:76:4f:7d:52:c6:7c:
                    63:6a:20:8d:ef:5d:bb:15:0b:11:7c:22:8e:77:ac:
                    1d:af:87:84:ae:f3:78:40:2d:36:2e:fc:4b:eb:5e:
                    42:63:2e:07:c0:17:3c:f7:b7:34:4b:65:96:80:22:
                    a4:9c:6b:75:96:9d:5b:37:5b:e7:b1:49:62:a1:18:
                    47:9e:64:ab:8b:71:8c:2a:af:3d:e1:62:92:e4:19:
                    9a:dc:85:47:d8:39:0c:34:d8:50:a1:af:76:44:91:
                    8d:29:ff:bd:cb:d9:78:e5:05:2e:24:5a:df:66:c2:
                    d5:ee:dc:16:ef:66:10:e9:85:25:b2:9e:71:a8:d4:
                    1a:f8:88:da:63:04:e2:b1:5d:1d:f3:40:32:a7:bc:
                    e2:da:28:5f:21:39:4e:56:f8:2d:aa:54:da:8b:a5:
                    5f:31:ae:1e:f1:9e:75:75:0e:db:50:ac:e1:07:83:
                    bd:fe:a8:3e:fe:27:a6:e6:16:a3:2c:d2:b4:7e:09:
                    70:77:c2:60:89:2b:06:07:ce:b1:08:a9:09:65:81:
                    4a:c4:4e:74:3f:9f:36:92:7e:0b:87:98:58:66:2b:
                    5c:db:69:88:23:e6:19:35:78:19:27:16:5a:a3:9b:
                    a0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8B:04:5D:5B:4C:06:DB:C0:FF:E7:AF:83:F9:87:F1:68:6C:1B:19
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38342e302f32332d3233203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:b6:18:bc:bd:38:69:9d:80:e1:a3:16:ea:51:c8:8b:d3:7d:
         20:ec:92:d9:93:5e:63:15:77:e3:09:78:18:59:ec:03:65:7b:
         40:fe:b2:cc:ea:18:f7:32:cc:ba:06:52:d2:5d:76:c9:8c:2a:
         98:6c:f5:b2:5f:e2:8b:14:31:8d:92:f6:b5:08:1e:e5:27:fb:
         26:0c:aa:4f:55:ba:d7:41:0c:d7:27:78:60:e6:e2:05:e9:4f:
         73:5b:61:9d:5a:64:94:21:35:ed:2c:b5:a6:84:45:50:55:f6:
         d7:a9:58:dd:a3:a8:91:76:61:16:89:c0:4a:ac:24:c6:39:40:
         8a:9d:08:1b:2b:78:f4:59:e4:b3:47:22:a1:de:df:80:0a:7a:
         62:37:f1:43:a1:06:2b:a2:89:d2:12:93:4b:34:ad:a6:c2:65:
         3f:d4:eb:24:36:5d:85:a9:d8:11:ac:bb:49:db:7e:77:f4:57:
         e6:3b:d3:86:7d:6b:b3:83:b3:35:64:9f:fa:41:c3:b2:92:58:
         63:81:e2:c6:42:00:ad:64:ab:7c:06:2f:ba:2a:f5:e9:df:72:
         b1:b2:8e:26:9a:73:fd:8c:76:f8:f0:e1:bc:c5:2a:a4:3c:38:
         8c:0f:1a:fa:01:c6:8a:5b:ec:c0:38:97:78:e4:71:95:83:fb:
         b7:7b:23:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:20 2025 by rpki-client