Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3232322e3234302e302f32312d3234203d3e203238313938.roa
File:                     3137372e3232322e3234302e302f32312d3234203d3e203238313938.roa (raw, json)
Hash identifier:          lI3p37GDO5VM7+31MfymrFEDPYfYj3u48k4C2TXl1s0=
Subject key identifier:   2A:99:08:30:A7:19:55:69:E1:10:61:3C:27:D9:3F:E7:D2:A3:4C:81
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       285FE2A419CA1E102C316AF30C860E17F96FBBE9
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3232322e3234302e302f32312d3234203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:21:13 +0000
ROA not before:           Mon 21 Aug 2023 20:16:13 +0000
ROA not after:            Mon 19 Aug 2024 20:21:13 +0000
asID:                     28198
IP address blocks:        177.222.240.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5f:e2:a4:19:ca:1e:10:2c:31:6a:f3:0c:86:0e:17:f9:6f:bb:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:16:13 2023 GMT
            Not After : Aug 19 20:21:13 2024 GMT
        Subject: CN=2A990830A7195569E110613C27D93FE7D2A34C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f3:01:15:82:74:7b:03:6f:57:bd:ea:12:77:
                    a2:d5:43:ac:73:fa:87:fb:57:bb:03:e7:c3:c1:5d:
                    2c:ab:e5:2a:d6:74:af:b5:f9:d0:78:2e:75:71:27:
                    00:4c:ae:2b:0e:04:df:c4:c6:7a:b8:35:90:b0:2e:
                    a2:d8:43:1e:a3:10:17:2f:1a:7b:0d:ab:f3:64:2a:
                    fa:d3:64:f4:71:d1:d5:ed:62:a9:69:0c:1b:12:58:
                    c1:1a:43:5f:86:a3:ee:c8:c6:10:dc:3d:bb:c0:db:
                    42:52:65:25:28:4c:ee:8c:ef:2c:a0:5d:2b:b6:b4:
                    6e:4c:eb:12:25:ef:5c:8e:a2:9b:63:60:e6:ed:20:
                    a1:10:01:39:20:f6:48:e9:27:44:57:c4:6e:d8:12:
                    7b:c5:1c:34:c0:c5:59:30:22:b0:89:61:93:71:ca:
                    e4:1e:ea:54:de:46:cb:86:34:90:04:9b:eb:70:92:
                    a3:01:7a:3f:e3:13:07:f4:d3:cf:cf:da:8d:66:13:
                    ec:a2:66:56:0e:4c:7a:51:4f:06:0b:41:4e:e7:9b:
                    c3:c2:d8:dc:52:e6:b7:ff:3f:5b:b8:67:4e:86:63:
                    c9:4d:a6:09:76:6e:79:44:da:4e:d5:f6:7e:3e:a0:
                    a0:7b:0d:db:ce:90:53:67:23:ba:a2:46:9b:05:f2:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:99:08:30:A7:19:55:69:E1:10:61:3C:27:D9:3F:E7:D2:A3:4C:81
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3232322e3234302e302f32312d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:b6:f9:c5:59:ce:96:b5:d0:a5:58:a0:e8:e1:f2:f9:53:6d:
         75:fd:6d:d6:e0:4a:4b:89:15:6a:a8:4d:9a:19:65:fe:c6:98:
         87:1b:ae:d9:df:cb:37:52:06:ca:b6:39:f8:e4:cc:3a:38:c8:
         fc:c8:79:89:dc:c5:c9:45:57:0e:3a:c6:53:56:7a:00:d3:3d:
         c9:f4:ce:2b:ea:6b:74:e5:d7:22:76:64:d6:6a:e7:08:53:83:
         c8:11:bc:ab:23:a5:f5:a0:98:73:26:68:7b:43:74:3c:7a:c1:
         d8:76:41:6c:6b:2d:18:75:12:c2:0f:84:f0:1a:05:ef:a7:c5:
         af:2f:c1:94:ef:b6:0d:1a:8f:c0:63:9a:ac:26:17:34:49:2d:
         4e:9c:7a:6f:03:dd:95:e1:e9:fb:92:9c:5a:d5:91:9c:e7:64:
         fc:bd:5b:a1:7c:5a:2c:24:8d:85:72:75:7b:1e:bd:4f:92:a0:
         4e:33:25:f2:99:c3:32:ff:4a:c5:f9:28:19:88:bf:30:ed:53:
         69:f1:02:9b:b6:53:4c:e2:c8:58:98:8e:ae:2d:b2:20:97:5c:
         04:45:92:b9:21:66:3a:67:35:bb:88:ed:7b:ee:26:e6:6c:f4:
         62:ac:2d:d5:62:64:1d:6a:bd:cf:78:ae:ae:75:a9:57:5d:ba:
         79:7c:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:54 2025 by rpki-client