Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38352e3233332e302f32342d3234203d3e20323632363137.roa
File:                     3137372e38352e3233332e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          grRKVoxhduW55l7uIXDfmwqGXi53TP2W9c5zMd5zjKs=
Subject key identifier:   52:68:0D:9F:EA:E5:AC:9C:E9:64:A3:0C:58:05:44:34:74:49:69:2F
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       77FC64059361949A9026F66281BD3528C8146CF4
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38352e3233332e302f32342d3234203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:35:51 +0000
ROA not before:           Wed 05 Mar 2025 20:30:51 +0000
ROA not after:            Wed 04 Mar 2026 20:35:51 +0000
asID:                     262617
IP address blocks:        177.85.233.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fc:64:05:93:61:94:9a:90:26:f6:62:81:bd:35:28:c8:14:6c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:30:51 2025 GMT
            Not After : Mar  4 20:35:51 2026 GMT
        Subject: CN=52680D9FEAE5AC9CE964A30C580544347449692F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:de:01:67:f2:6a:b2:0f:d5:76:00:1a:78:fc:
                    d5:f0:36:08:d5:be:af:f1:42:05:8e:fd:69:8a:11:
                    25:85:81:09:79:ba:e2:83:e8:9b:db:4d:71:4e:ed:
                    13:f9:54:ab:da:81:2d:ab:46:a5:3b:55:7a:7c:0d:
                    27:7f:94:fd:2e:a1:63:0a:20:a9:e7:a3:65:bf:c5:
                    cc:62:0e:2f:ca:6f:8b:25:70:9c:7b:9d:50:f5:5e:
                    b5:e8:d2:ac:8f:52:f1:5a:55:51:2c:aa:32:6b:08:
                    32:30:d0:c5:cb:26:8c:1d:f0:a7:73:31:7a:e6:21:
                    4b:99:66:4e:54:a2:b8:d8:d5:a6:4b:f7:17:3f:e2:
                    fb:5b:67:a3:d5:bd:0e:85:0c:15:40:37:35:c4:6d:
                    bf:7d:3d:48:6d:2e:9f:de:5d:ca:d0:22:37:41:f2:
                    b6:8f:62:1e:9f:bf:88:50:f9:37:e6:aa:93:bd:a8:
                    53:0c:e7:0d:2e:ad:0b:fa:7b:d5:3b:2c:eb:61:13:
                    58:c1:e9:7c:bd:db:d4:3c:3b:d6:4b:1f:26:d9:96:
                    e5:d2:52:f7:7c:77:48:88:49:66:e1:65:38:d3:90:
                    13:d7:5f:74:fb:ac:05:bd:c8:a3:8e:df:34:57:65:
                    dd:19:18:79:5a:9c:ed:59:7d:3f:5e:bb:7b:ce:eb:
                    61:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:68:0D:9F:EA:E5:AC:9C:E9:64:A3:0C:58:05:44:34:74:49:69:2F
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38352e3233332e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:aa:d1:96:0b:8e:77:37:ca:2d:73:2d:ed:fe:44:85:f2:c1:
         a4:60:34:f3:a9:63:8f:3e:33:c6:5a:36:26:2f:ee:af:20:0e:
         8c:08:0e:99:26:5f:89:ad:fb:2e:52:0c:23:5b:cc:54:0c:34:
         d7:a0:68:8c:ab:0a:26:e5:8f:e7:de:30:8f:0a:01:56:fe:db:
         19:93:37:3b:9a:cf:a1:f2:98:38:d0:43:42:1a:83:ac:60:ea:
         ec:6d:9a:d6:c7:88:bd:71:73:0e:c9:a9:0d:13:67:d0:47:66:
         cc:d6:e1:00:3e:cd:4b:a0:06:00:ce:35:5f:90:cd:3a:5f:8e:
         7c:c4:04:af:9a:7e:c0:1d:d9:08:16:8e:a9:ac:b8:c9:71:b7:
         54:90:9b:db:c6:0e:bf:72:14:5b:dc:e2:22:aa:ad:ce:61:19:
         2e:69:b6:ab:a8:c2:b7:af:50:7c:15:59:63:f2:3b:58:93:28:
         f6:21:2f:94:8a:ff:27:c6:81:b0:6d:52:dd:11:5c:41:4f:1d:
         ca:1f:9b:46:ab:0e:b6:1c:e6:0b:54:18:80:4e:f5:3c:e8:2b:
         2c:ee:4b:0a:49:45:ae:4e:26:2a:d8:4d:58:f3:6b:f5:f7:c8:
         18:9b:53:f1:29:ce:4e:1e:dc:17:3c:46:3e:e9:ea:89:8c:7f:
         e1:4f:01:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:33:23 2025 by rpki-client