Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/3138372e36322e36362e302f32332d3233203d3e20323639373139.roa
File:                     3138372e36322e36362e302f32332d3233203d3e20323639373139.roa (raw, json)
Hash identifier:          flLrYqYeIGrRwtVEvkOZ9diZ2c86D/7JTU6j6yqf3gc=
Subject key identifier:   53:54:A4:AD:A4:4C:C9:3C:36:CB:F9:70:E8:7C:6D:58:88:10:4C:55
Certificate issuer:       /CN=0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463
Certificate serial:       2841E32BC2AC930ACF26A46EDC87FE2BDF067962
Authority key identifier: 0C:7E:B3:E6:0D:6F:46:F7:F5:96:B6:D0:E9:9E:86:B9:2C:7B:34:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/3138372e36322e36362e302f32332d3233203d3e20323639373139.roa
Signing time:             Fri 23 Aug 2024 15:24:44 +0000
ROA not before:           Fri 23 Aug 2024 15:19:44 +0000
ROA not after:            Fri 22 Aug 2025 15:24:44 +0000
asID:                     269719
IP address blocks:        187.62.66.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:41:e3:2b:c2:ac:93:0a:cf:26:a4:6e:dc:87:fe:2b:df:06:79:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463
        Validity
            Not Before: Aug 23 15:19:44 2024 GMT
            Not After : Aug 22 15:24:44 2025 GMT
        Subject: CN=5354A4ADA44CC93C36CBF970E87C6D5888104C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:02:ad:6f:5e:c0:49:5d:48:fe:cd:1c:6e:
                    f7:13:1c:44:a0:ac:47:6f:df:53:5e:4a:7b:bf:c5:
                    5c:56:da:36:b4:b7:53:21:48:6d:10:d4:6e:66:97:
                    b0:61:b8:5a:af:71:bf:97:36:95:cc:a3:da:3c:d4:
                    6a:bb:19:b9:05:70:08:cb:9f:80:a3:bb:04:b1:57:
                    67:f4:b3:5d:c4:bd:90:3b:80:85:de:48:d9:25:a8:
                    5e:32:0e:08:ab:4c:95:cb:22:fa:a9:69:ce:a0:29:
                    85:b3:f1:b8:74:e9:4f:4d:d8:09:89:c0:57:8e:7b:
                    0f:5d:6b:5e:6f:7d:29:2c:f1:c9:1d:77:7b:f9:5f:
                    f3:dd:ac:96:62:6d:5d:e2:d3:42:bd:ab:5d:52:45:
                    a7:54:c7:1f:6a:35:07:26:b3:90:b5:65:03:d5:80:
                    2e:50:51:25:cf:c4:9b:b6:a4:83:00:8a:1d:f3:e0:
                    44:e0:ce:33:08:a4:f7:01:83:d4:7b:7a:ad:1b:e2:
                    a8:81:d7:11:dc:7b:39:76:e1:8f:aa:27:f4:72:b5:
                    5f:07:ee:cb:25:a3:f9:bc:e0:a6:0d:48:f1:a7:d8:
                    d8:b0:41:87:01:7c:56:00:6d:fb:50:76:31:09:ee:
                    5c:32:5a:28:35:31:7f:15:a8:e5:14:67:4c:79:ef:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:54:A4:AD:A4:4C:C9:3C:36:CB:F9:70:E8:7C:6D:58:88:10:4C:55
            X509v3 Authority Key Identifier:
                keyid:0C:7E:B3:E6:0D:6F:46:F7:F5:96:B6:D0:E9:9E:86:B9:2C:7B:34:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/3138372e36322e36362e302f32332d3233203d3e20323639373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:b6:b2:64:31:78:97:85:6b:0c:45:36:44:90:a6:75:8e:af:
         22:00:99:e0:cb:00:c1:13:30:35:42:90:4c:df:1d:20:91:d7:
         63:5f:9a:e6:32:63:41:97:ba:1e:78:cf:db:16:dd:a2:88:d8:
         bb:cc:3f:1b:29:e5:17:7f:45:46:80:35:23:6d:2f:0b:56:fb:
         f1:da:09:9b:5d:1a:36:34:4a:05:91:be:ff:40:63:b6:d8:21:
         5e:47:8e:14:af:63:c7:33:3f:db:b1:29:81:c7:ec:f9:2d:30:
         95:d2:f4:89:16:68:b3:90:4d:2d:c2:e7:dc:57:42:93:90:cf:
         f8:ac:6a:21:d0:49:82:6b:98:21:ca:94:a2:35:4c:eb:a4:9f:
         d8:14:b2:b1:aa:0e:35:10:14:a7:b7:10:3d:15:b6:dc:c7:da:
         c7:c8:f5:01:2a:c1:53:29:a4:a1:a0:65:96:43:2e:61:20:22:
         8d:21:3b:9d:7a:19:70:1b:4a:e7:e5:fc:c4:3b:84:32:4b:f1:
         b1:59:88:c9:6c:ec:d2:d9:bc:7e:ad:81:6a:f4:fc:a0:40:fa:
         ee:57:eb:f3:56:61:27:28:ce:14:3a:02:eb:a9:31:74:e7:fb:
         79:fe:f9:c9:34:36:7a:bb:6f:a6:6c:90:c7:5b:09:18:b5:76:
         f6:67:25:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:42:26 2025 by rpki-client