Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/0/3137372e38362e36382e302f32322d3234203d3e203532353630.roa
File:                     3137372e38362e36382e302f32322d3234203d3e203532353630.roa (raw, json)
Hash identifier:          8i0aVBkAMIEbGSwIPAEIAfM394ZZGf5whp0bRK6MqiU=
Subject key identifier:   F1:0C:DE:59:75:A3:9B:F2:A6:B3:AA:4D:64:B0:BD:9E:AE:D0:AF:87
Certificate issuer:       /CN=6DA94CC9665217B326F33F62EEC20C2091A6ECEC
Certificate serial:       182E407F86D55A384039BEE4406942D7D18065F9
Authority key identifier: 6D:A9:4C:C9:66:52:17:B3:26:F3:3F:62:EE:C2:0C:20:91:A6:EC:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DA94CC9665217B326F33F62EEC20C2091A6ECEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/0/3137372e38362e36382e302f32322d3234203d3e203532353630.roa
Signing time:             Thu 08 Feb 2024 14:56:13 +0000
ROA not before:           Thu 08 Feb 2024 14:51:13 +0000
ROA not after:            Thu 06 Feb 2025 14:56:13 +0000
asID:                     52560
IP address blocks:        177.86.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2e:40:7f:86:d5:5a:38:40:39:be:e4:40:69:42:d7:d1:80:65:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA94CC9665217B326F33F62EEC20C2091A6ECEC
        Validity
            Not Before: Feb  8 14:51:13 2024 GMT
            Not After : Feb  6 14:56:13 2025 GMT
        Subject: CN=F10CDE5975A39BF2A6B3AA4D64B0BD9EAED0AF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:08:f4:1a:19:68:ed:e2:71:60:de:12:6b:
                    8f:d7:fa:6a:c2:06:38:94:fe:5a:52:02:05:b0:25:
                    c3:c3:4f:d7:77:e7:e0:19:79:fd:af:47:b4:77:63:
                    a9:ef:98:80:e2:f8:e4:64:f1:dd:2b:d1:40:ae:c9:
                    57:f0:ba:b0:dd:59:30:ac:25:95:f2:9d:98:f9:d4:
                    ea:7a:24:e5:ab:8b:59:19:fa:29:54:60:0e:de:b1:
                    29:f1:21:27:a9:49:32:43:82:bf:54:8c:78:d3:c8:
                    8f:0e:93:d3:0f:da:77:dd:02:e9:b2:59:47:7c:a2:
                    df:1b:0b:2b:70:73:55:e4:41:9b:9f:ae:9a:9d:ac:
                    d2:46:a9:41:01:6d:d1:76:dd:87:fb:dc:21:a2:a4:
                    53:00:b1:60:77:2e:b8:25:53:ab:5b:35:98:6d:11:
                    b7:52:fd:39:89:d1:4a:3b:b8:5d:51:15:f9:8a:bb:
                    d1:39:0c:16:76:4a:f1:56:39:5c:7e:12:6c:aa:5a:
                    3a:f5:ed:d1:8d:a3:a4:4f:8f:43:f8:1a:f3:fd:d3:
                    f3:57:9d:1b:67:03:8e:92:8a:21:b5:cb:81:c7:17:
                    28:dc:f1:6c:d6:de:df:e3:ad:d5:b4:23:b7:b2:37:
                    d0:5f:71:c1:65:3c:19:f7:69:7e:3a:7e:c2:b9:2d:
                    4a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0C:DE:59:75:A3:9B:F2:A6:B3:AA:4D:64:B0:BD:9E:AE:D0:AF:87
            X509v3 Authority Key Identifier:
                keyid:6D:A9:4C:C9:66:52:17:B3:26:F3:3F:62:EE:C2:0C:20:91:A6:EC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/0/6DA94CC9665217B326F33F62EEC20C2091A6ECEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DA94CC9665217B326F33F62EEC20C2091A6ECEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/0/3137372e38362e36382e302f32322d3234203d3e203532353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:52:cd:88:00:65:09:9f:00:ea:9b:77:0a:0b:4a:dc:6d:1e:
         ee:77:5f:48:df:cb:8a:b3:8d:59:11:c6:c6:fa:07:27:7c:fc:
         c9:d8:1a:33:df:e2:2c:1d:51:38:52:0e:3d:9a:e8:8f:33:03:
         eb:3d:4d:cf:f7:13:b8:61:25:35:63:c2:3f:4c:12:02:3c:a9:
         2c:9f:0d:53:7c:8a:70:10:43:35:3c:b8:0b:1c:0f:00:cf:c4:
         b5:8a:db:db:55:79:ee:8b:27:72:12:3f:33:4a:15:15:51:02:
         49:e9:be:51:bb:0c:fb:58:d9:08:6c:90:79:2e:55:24:ae:fd:
         d2:cc:d1:9c:47:9e:3b:ac:15:af:01:c1:dc:bd:ee:29:d0:74:
         83:75:13:7a:73:73:ad:09:d1:dd:24:74:36:02:79:22:69:78:
         ce:1c:7a:8b:31:48:d0:40:1e:80:07:ba:bd:0d:12:9b:a5:94:
         e8:f5:d1:62:c1:d0:6f:1f:ab:bd:54:67:d4:ed:9b:ab:49:72:
         eb:07:a0:cc:51:29:83:1d:ba:fa:a0:80:c2:cc:00:8b:a9:4c:
         29:4e:55:c6:fe:44:b4:e6:94:02:a7:1f:4a:81:f2:6e:0d:29:
         a3:be:ec:00:c9:6c:2f:36:98:7b:ae:a9:31:d5:e7:65:c9:ab:
         da:62:35:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:36 2025 by rpki-client