Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3137372e31322e3132332e302f32342d3234203d3e203533313138.roa
File:                     3137372e31322e3132332e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          Kq+MibEAzFGTBoCjjqLDshi/5eMUdsSQZ+YXEELUOww=
Subject key identifier:   FA:FB:C6:AD:26:1A:64:78:62:A4:EF:42:6D:D3:A8:4A:65:0D:9F:AF
Certificate issuer:       /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
Certificate serial:       5270738904F44C83B5051A501A62BD477285E75E
Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3137372e31322e3132332e302f32342d3234203d3e203533313138.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     53118
IP address blocks:        177.12.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:70:73:89:04:f4:4c:83:b5:05:1a:50:1a:62:bd:47:72:85:e7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject: CN=FAFBC6AD261A647862A4EF426DD3A84A650D9FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:6c:a0:70:ed:53:dc:8c:08:c5:cb:0e:d1:
                    4e:aa:c3:7e:2c:37:bc:75:28:d5:f5:42:a7:19:29:
                    83:8b:51:7a:a6:22:27:85:cb:0a:c3:04:5d:bf:c7:
                    54:4d:30:b7:d6:ff:f2:b9:7b:e5:4b:fe:4a:8e:21:
                    d0:c0:35:68:d8:08:23:0c:46:2b:2e:3d:ee:ed:78:
                    69:c5:46:23:e2:9b:63:b3:e6:8c:0b:65:1f:d2:f6:
                    09:ec:6e:2c:38:b5:54:a0:eb:81:c1:19:ae:04:90:
                    13:d8:dd:15:1c:17:ac:16:2a:10:21:a5:d6:03:ec:
                    51:36:28:19:58:59:b3:81:5f:e3:64:93:a1:3e:ae:
                    14:07:de:5e:f3:2d:42:91:8a:e3:8d:e1:39:15:22:
                    d3:b3:35:1c:51:cb:cb:85:79:a2:cf:f6:e7:d7:2b:
                    ba:5a:fa:5c:58:13:4f:cb:0a:a9:95:ca:e2:53:01:
                    16:44:eb:9d:cf:41:14:9d:3f:34:41:f2:6e:31:ba:
                    7c:67:6e:e2:fe:dc:69:3f:34:78:40:e5:a4:bf:fc:
                    0d:9d:22:de:bd:f0:0e:6b:fc:7b:9f:8c:0d:cb:5d:
                    62:47:48:6c:2c:8a:f1:fa:4f:d4:c0:27:10:4c:c6:
                    22:11:f3:e0:21:3c:00:41:3e:97:ef:72:d9:00:5c:
                    e5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FB:C6:AD:26:1A:64:78:62:A4:EF:42:6D:D3:A8:4A:65:0D:9F:AF
            X509v3 Authority Key Identifier:
                keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3137372e31322e3132332e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:52:f5:e7:04:ca:4f:7b:35:42:3d:49:37:c0:f8:78:dc:b8:
         cc:c5:e3:8f:93:f6:c5:19:c1:47:66:10:12:38:33:8b:33:2e:
         c3:8a:ca:65:0d:56:16:48:4f:5d:8e:95:aa:4c:14:83:09:e1:
         d7:93:9b:08:83:80:3c:80:4b:07:cd:29:4f:80:86:3e:ed:84:
         fc:24:43:de:39:1e:f8:09:a7:73:57:fd:5e:c3:6b:5a:5f:1e:
         16:56:95:8d:58:d8:b6:1d:d7:3a:90:c2:10:66:f4:3d:19:c6:
         5f:d2:24:bf:71:19:66:6f:b0:72:b7:cf:d8:8d:ce:1c:c9:9b:
         26:61:da:58:b0:31:59:3c:85:e4:ad:c9:bd:df:18:e7:a9:6f:
         08:d4:8c:30:2d:61:76:d9:f0:6f:73:99:ee:6b:87:19:03:65:
         fe:82:fe:bc:0f:82:65:d9:12:78:90:d9:65:63:72:d2:74:0f:
         6d:a3:8a:65:c1:3c:cd:a5:bb:76:06:50:a8:d7:0d:b7:dc:ba:
         0b:77:9c:75:79:ed:23:99:ba:bc:56:a0:a7:e2:46:80:85:95:
         ee:4a:6a:04:0c:4a:13:84:d9:4c:33:fe:23:d5:bf:be:80:74:
         99:af:51:9a:7a:51:f7:66:09:40:cb:1d:63:bd:d7:14:49:70:
         c7:51:4d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:29:27 2025 by rpki-client