Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3137372e38372e3132312e302f32342d3234203d3e203533323131.roa
File:                     3137372e38372e3132312e302f32342d3234203d3e203533323131.roa (raw, json)
Hash identifier:          yPp73ZQQMpgVvKnjnrVXJfgpM7ETtTJbsn1SvK22Rw0=
Subject key identifier:   48:8D:7E:80:BA:FB:59:2D:99:53:F4:1F:7E:4B:B9:9D:26:36:A5:77
Certificate issuer:       /CN=B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6
Certificate serial:       760A2C62C3E8A6C946168AB9548AE27AE7A8896B
Authority key identifier: B8:09:FF:E7:E9:58:FC:2B:24:3C:E9:AB:B1:DF:FD:7F:ED:FE:99:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3137372e38372e3132312e302f32342d3234203d3e203533323131.roa
Signing time:             Sat 19 Feb 2022 17:18:27 +0000
ROA not before:           Sat 19 Feb 2022 17:13:27 +0000
ROA not after:            Sat 18 Feb 2023 17:18:27 +0000
asID:                     53211
IP address blocks:        177.87.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0a:2c:62:c3:e8:a6:c9:46:16:8a:b9:54:8a:e2:7a:e7:a8:89:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6
        Validity
            Not Before: Feb 19 17:13:27 2022 GMT
            Not After : Feb 18 17:18:27 2023 GMT
        Subject: CN=488D7E80BAFB592D9953F41F7E4BB99D2636A577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:71:8a:c6:b5:78:18:9f:60:de:68:d2:28:19:
                    29:03:53:35:20:c1:3e:1d:60:84:fb:4b:d3:3b:6a:
                    6c:58:c2:15:22:04:9f:4b:d5:1a:c0:dc:b1:32:bc:
                    8b:59:5e:67:fe:d0:a9:b8:2f:2b:39:38:f1:7b:d2:
                    88:c2:a6:a6:39:01:97:b2:46:ea:8b:76:36:db:c6:
                    e3:88:2d:59:eb:06:4f:aa:c7:12:9f:88:e8:64:ab:
                    35:ce:62:f6:44:ec:cd:3f:b5:bb:4a:aa:5d:bc:60:
                    8b:64:b2:2d:3c:79:92:0d:dc:74:04:61:42:2f:c0:
                    e8:ed:db:32:b8:dc:98:8e:a9:fb:96:45:58:a8:55:
                    86:d9:dc:3e:72:28:47:f5:21:f9:a3:6e:89:62:38:
                    45:b0:35:a9:a5:82:48:39:04:ad:62:9e:c3:40:0a:
                    1e:a9:ef:75:61:64:dd:30:86:b3:05:a0:16:1e:88:
                    ed:ca:7d:6a:9e:1a:df:5d:40:ee:5d:db:8a:81:6f:
                    a3:5b:40:be:9a:e4:c6:93:1f:c0:62:fc:44:ef:23:
                    8a:9b:b1:39:d8:8e:4e:76:86:a6:00:86:6e:56:94:
                    bd:c9:2f:82:1d:be:7a:94:c0:98:61:b2:68:24:ce:
                    4b:dd:9a:3c:dd:55:c9:4e:74:4e:bc:04:52:21:90:
                    2b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8D:7E:80:BA:FB:59:2D:99:53:F4:1F:7E:4B:B9:9D:26:36:A5:77
            X509v3 Authority Key Identifier:
                keyid:B8:09:FF:E7:E9:58:FC:2B:24:3C:E9:AB:B1:DF:FD:7F:ED:FE:99:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3137372e38372e3132312e302f32342d3234203d3e203533323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:f0:f1:ba:ff:d1:ad:66:64:c5:b6:7b:51:08:44:5f:94:25:
         5d:48:0d:ac:f8:a5:ff:f4:1c:87:fd:bb:7d:d1:52:ea:43:b0:
         68:b3:e0:a6:2c:6b:c6:1f:8f:60:96:fb:4e:93:de:b1:41:49:
         90:6f:e3:0a:8d:dc:da:b4:cf:f3:0d:b8:ff:fb:44:0f:29:6e:
         fb:63:5a:64:bd:89:c0:ed:94:50:45:69:4a:5d:a9:f7:05:33:
         61:4c:23:a0:46:db:19:fe:cb:a7:36:a0:de:dc:51:ed:a0:46:
         41:d5:43:32:9b:64:65:e0:01:8c:d0:ab:f5:ac:18:88:5e:4c:
         eb:26:7d:0c:6e:26:15:59:c1:bb:e5:5e:ca:8f:01:ca:b7:87:
         11:e8:62:3f:26:37:5f:48:a5:e3:83:90:34:0e:48:0c:5f:15:
         df:fc:be:57:5a:84:d1:74:e8:df:d5:a1:7a:7f:48:83:9b:f9:
         44:e3:4a:e9:15:fb:15:d3:5a:e5:ba:df:07:a7:a8:53:22:05:
         47:09:1f:03:30:83:73:40:27:df:4c:33:18:7e:28:2a:0c:af:
         97:5d:a6:0b:d4:b9:0c:dc:f4:e5:4a:22:da:1f:0a:0d:ba:d8:
         5a:f2:80:ed:70:84:0e:e8:a4:0e:ef:f7:e1:0e:f7:ce:cd:ea:
         48:78:75:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:57 2025 by rpki-client