Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3135302e302f32332d3233203d3e203532383631.roa
File:                     3137372e39332e3135302e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          Eoivl5/8cdAHM1xywb4G2dTOQZoLnqJMX7K/Z2zBTXY=
Subject key identifier:   D2:58:96:4C:C7:A6:D9:25:44:7A:85:67:5A:C3:09:A0:A0:12:50:BD
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       18A81029165809FD4CB8D545F5576B9743BFA145
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3135302e302f32332d3233203d3e203532383631.roa
Signing time:             Tue 24 Dec 2024 13:51:08 +0000
ROA not before:           Tue 24 Dec 2024 13:46:08 +0000
ROA not after:            Tue 23 Dec 2025 13:51:08 +0000
asID:                     52861
IP address blocks:        177.93.150.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a8:10:29:16:58:09:fd:4c:b8:d5:45:f5:57:6b:97:43:bf:a1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Dec 24 13:46:08 2024 GMT
            Not After : Dec 23 13:51:08 2025 GMT
        Subject: CN=D258964CC7A6D925447A85675AC309A0A01250BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:8d:4c:22:ee:84:ba:b5:10:04:97:7c:01:
                    0d:8a:d7:58:6a:88:cd:55:e7:76:da:7e:3c:d2:22:
                    d0:50:21:ea:3a:b5:96:e5:24:15:03:6f:f2:57:8f:
                    4e:28:1b:4e:41:5e:fe:43:97:c5:2d:49:25:3d:3e:
                    7f:09:09:da:23:91:5e:d8:13:49:59:94:a7:80:14:
                    40:52:e6:55:5c:94:8d:36:4f:8c:c6:c2:14:19:c3:
                    7a:9b:bb:d5:ca:9b:94:84:39:e0:74:8f:23:93:38:
                    39:8d:7b:49:b2:4f:55:64:4a:a4:ff:c6:1a:60:6b:
                    f7:64:55:11:af:67:6c:ba:e1:fd:76:d3:b0:39:9c:
                    09:eb:73:27:bb:aa:07:ba:a2:4c:19:2e:1a:26:a7:
                    30:c9:e9:d6:98:e6:95:72:fa:4e:c8:9a:d3:b7:a4:
                    95:25:e9:47:4a:ba:a1:2b:cb:41:36:26:1d:58:49:
                    ca:c6:a3:ec:4a:9d:19:da:19:00:8d:f7:4c:83:94:
                    ef:01:86:a0:69:27:c8:f6:a1:1f:68:51:34:5a:b7:
                    36:95:df:0c:56:ae:a9:75:d1:e5:ee:f0:5e:f7:01:
                    27:a4:a4:8c:c1:15:fd:b4:58:33:e2:d5:f3:19:ba:
                    7c:3b:cd:cc:1a:0a:9a:6e:d1:84:a6:5e:1f:67:cd:
                    9d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:58:96:4C:C7:A6:D9:25:44:7A:85:67:5A:C3:09:A0:A0:12:50:BD
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3135302e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:33:35:84:c8:23:a9:47:90:8a:e1:74:c8:6e:fe:7f:54:77:
         06:46:29:96:37:d4:b8:95:c2:d3:7b:fb:37:cf:36:63:ec:8c:
         dc:e3:04:5b:63:85:c4:20:17:46:58:c9:f4:23:40:70:64:5e:
         a0:fb:4d:61:18:d2:46:ab:c3:a7:d6:9c:01:30:d2:a9:55:ac:
         bb:a6:f8:87:23:e9:c2:9f:94:eb:a6:8b:11:09:62:9c:08:d3:
         e7:b5:17:7d:f7:c0:8a:7f:a5:28:e0:59:3a:52:81:6f:32:a9:
         c6:0e:16:46:b9:63:16:c3:94:69:72:2d:20:f4:f8:14:80:c8:
         d9:8f:2a:37:87:3c:f3:b0:f3:e5:02:f1:9e:19:1f:42:2a:46:
         f0:42:94:e4:95:56:da:a1:61:f9:02:9b:58:04:df:c6:bf:58:
         6b:8b:bb:de:ea:73:91:f2:a6:6d:4b:7e:f6:1e:fd:67:9e:56:
         96:ca:bc:bd:88:a1:44:e4:f6:23:fe:54:3e:e4:38:45:93:40:
         95:d2:9c:da:26:5b:4c:21:89:fb:57:b8:82:da:47:04:a1:43:
         7a:1c:ab:39:94:82:93:06:ae:ca:79:f6:d5:de:38:ad:ca:60:
         79:83:0a:a5:25:12:da:25:e4:a1:0b:89:d5:04:1f:d6:a4:39:
         ac:31:5f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:44:22 2025 by rpki-client