Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSkMMv8ur2KThNtdCbFfbUTeRQUC5aBTPxrbDo2VvvLW/0/3137372e38352e37322e302f32322d3232203d3e203532373339.roa
File:                     3137372e38352e37322e302f32322d3232203d3e203532373339.roa (raw, json)
Hash identifier:          x2ZzBu4GJCgFC/UY8bZA5/VLwRRlq0m+nVm5stbgN00=
Subject key identifier:   BF:DF:D1:C8:28:9C:21:76:55:E8:40:9F:28:5D:FF:2A:09:41:D9:D7
Certificate issuer:       /CN=862009D4161A11807908B0E9BCD73252750A152D
Certificate serial:       06515E163B869FA30FA6AD74653C645A654BEE63
Authority key identifier: 86:20:09:D4:16:1A:11:80:79:08:B0:E9:BC:D7:32:52:75:0A:15:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/862009D4161A11807908B0E9BCD73252750A152D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSkMMv8ur2KThNtdCbFfbUTeRQUC5aBTPxrbDo2VvvLW/0/3137372e38352e37322e302f32322d3232203d3e203532373339.roa
Signing time:             Thu 12 Jan 2023 18:53:52 +0000
ROA not before:           Thu 12 Jan 2023 18:48:52 +0000
ROA not after:            Thu 11 Jan 2024 18:53:52 +0000
asID:                     52739
IP address blocks:        177.85.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:51:5e:16:3b:86:9f:a3:0f:a6:ad:74:65:3c:64:5a:65:4b:ee:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862009D4161A11807908B0E9BCD73252750A152D
        Validity
            Not Before: Jan 12 18:48:52 2023 GMT
            Not After : Jan 11 18:53:52 2024 GMT
        Subject: CN=BFDFD1C8289C217655E8409F285DFF2A0941D9D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:52:c3:96:e3:36:e8:56:8e:76:9c:39:03:3d:
                    66:a6:a1:c6:c2:02:3b:a6:ad:96:a8:e1:28:75:79:
                    48:ba:d9:aa:31:db:07:0e:f8:39:fb:ed:10:27:4f:
                    88:ff:a4:ef:9f:ed:20:d7:7e:99:8c:75:87:e2:18:
                    55:c9:d5:83:54:90:e5:3a:a7:81:36:4f:96:13:c3:
                    d3:16:34:a7:63:f2:e5:e9:69:14:70:2f:4a:b5:43:
                    67:29:8d:17:cd:6e:f3:14:04:03:04:be:46:da:55:
                    85:3e:fb:f0:fd:b8:48:87:f8:da:d7:3f:7b:8a:68:
                    42:fd:e1:c4:08:f4:5f:c4:c5:31:95:1e:bd:46:fe:
                    e5:42:b2:29:dc:27:a1:1c:07:10:e5:78:34:83:8c:
                    45:45:ea:b7:f8:75:24:18:60:88:7f:94:a5:da:df:
                    b2:11:a9:f0:37:45:50:5b:01:9c:db:3e:5a:5c:e9:
                    03:19:aa:60:7f:95:2b:4b:82:77:1e:d7:e9:a3:9f:
                    25:66:4d:2f:76:7d:6c:29:59:f1:75:93:c6:75:ee:
                    d0:d5:6d:f9:fe:9f:cf:69:14:52:1d:53:fc:f2:58:
                    e1:7b:c6:54:68:1b:ac:4a:62:80:46:d4:ca:4a:94:
                    dd:bf:5c:e0:c2:65:06:c5:fe:e9:16:23:5d:8c:16:
                    45:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DF:D1:C8:28:9C:21:76:55:E8:40:9F:28:5D:FF:2A:09:41:D9:D7
            X509v3 Authority Key Identifier:
                keyid:86:20:09:D4:16:1A:11:80:79:08:B0:E9:BC:D7:32:52:75:0A:15:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSkMMv8ur2KThNtdCbFfbUTeRQUC5aBTPxrbDo2VvvLW/0/862009D4161A11807908B0E9BCD73252750A152D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/862009D4161A11807908B0E9BCD73252750A152D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSkMMv8ur2KThNtdCbFfbUTeRQUC5aBTPxrbDo2VvvLW/0/3137372e38352e37322e302f32322d3232203d3e203532373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:db:e0:76:31:d3:03:17:c9:0f:70:bc:cf:0d:de:d4:53:f4:
         82:aa:19:5f:e1:e2:3f:f0:01:99:59:dc:15:21:c2:66:ca:f5:
         00:be:a1:dd:c2:e9:ae:07:19:d9:de:8a:2e:43:46:9b:58:9a:
         fe:c9:8f:96:70:6c:8f:64:bb:71:ee:46:76:98:90:b3:cd:6b:
         b2:6a:11:a3:99:ce:35:c3:81:10:26:c5:5b:9a:83:88:e8:53:
         cb:2a:a0:ff:3d:8d:90:06:3a:17:77:71:8b:c8:95:5c:7e:e0:
         4d:75:95:e5:d0:9f:11:43:35:97:4b:e0:1a:1c:b9:f2:8c:4d:
         91:3b:64:49:ae:18:3e:cb:3b:0d:d0:05:92:a9:e3:b3:b9:84:
         01:d4:fa:93:5e:ae:b1:bf:17:be:68:f1:15:ab:ba:3a:5f:ea:
         84:95:63:72:54:09:95:94:19:a5:ab:06:31:d7:f9:76:de:47:
         10:c4:50:d4:1f:32:be:89:c2:6e:63:5a:47:f4:ca:fc:54:53:
         a1:35:c0:fc:cc:63:81:e9:63:2f:62:4e:ee:6e:31:af:83:4b:
         bb:d1:bf:94:16:f5:f1:1d:b5:e4:ec:27:30:5e:46:2c:00:d8:
         71:82:c6:52:9f:42:f9:08:1f:8e:df:27:66:36:81:2b:33:b1:
         85:21:63:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:14 2025 by rpki-client