Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3137372e382e34382e302f32342d3234203d3e20323632343933.roa
File:                     3137372e382e34382e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          ouIx4Y+v+F3BkcVjZW3bYmECd4OARjB47t1lxiOyOms=
Subject key identifier:   89:FC:B4:30:B4:C0:E8:72:03:0F:96:91:4C:1A:E4:98:56:1C:DF:06
Certificate issuer:       /CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
Certificate serial:       58C534B5B4B17C937F8C82C2696ED9D5E1C81BA7
Authority key identifier: 6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3137372e382e34382e302f32342d3234203d3e20323632343933.roa
Signing time:             Sun 14 Apr 2024 02:05:36 +0000
ROA not before:           Sun 14 Apr 2024 02:00:36 +0000
ROA not after:            Sun 13 Apr 2025 02:05:36 +0000
asID:                     262493
IP address blocks:        177.8.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c5:34:b5:b4:b1:7c:93:7f:8c:82:c2:69:6e:d9:d5:e1:c8:1b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
        Validity
            Not Before: Apr 14 02:00:36 2024 GMT
            Not After : Apr 13 02:05:36 2025 GMT
        Subject: CN=89FCB430B4C0E872030F96914C1AE498561CDF06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:13:c8:97:b7:d0:28:60:82:24:0c:09:c5:
                    84:cf:2c:81:ea:8b:a9:13:61:ac:d7:64:d8:b6:e3:
                    9c:28:b0:fd:d1:ad:53:cb:50:bc:ff:dc:c6:2e:48:
                    15:b5:2b:f1:ad:68:86:11:6b:65:a1:02:6e:3e:9d:
                    7b:98:8a:ef:63:31:94:aa:24:27:df:b4:11:8b:87:
                    b0:ba:79:b5:6c:7d:7d:57:55:14:fa:10:a2:3d:6f:
                    70:7b:a1:a4:34:d2:a8:aa:73:d1:73:38:fe:6e:bc:
                    ad:90:05:8c:47:5e:25:02:dd:26:9a:08:76:c9:af:
                    5f:95:fa:72:f0:77:2c:c5:a8:cf:59:c2:e7:c5:1b:
                    3e:ef:a7:06:86:61:4c:de:20:31:87:57:f4:bd:9a:
                    ae:e0:61:38:a1:ef:f4:ed:ef:b0:60:a9:b6:11:4c:
                    5e:c9:00:92:a9:c1:82:aa:b7:42:7f:06:ba:d1:00:
                    e3:c6:eb:fa:8e:8b:a4:b1:c0:95:3c:cc:0b:ca:27:
                    b8:30:3f:45:0a:9b:5f:95:f5:c4:0a:4c:1e:8d:f5:
                    27:6f:e7:10:1e:b3:09:8c:a0:dc:e0:d6:d6:3d:6e:
                    6e:de:22:f1:d9:fa:d2:dd:ab:4a:59:6e:5d:0c:5e:
                    79:07:b9:ce:c5:37:c0:a2:0a:b9:9f:cc:0c:b5:11:
                    e5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FC:B4:30:B4:C0:E8:72:03:0F:96:91:4C:1A:E4:98:56:1C:DF:06
            X509v3 Authority Key Identifier:
                keyid:6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3137372e382e34382e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:16:45:26:bd:cf:63:07:cc:cc:59:c9:3b:ba:94:b3:d7:
         0e:01:6a:7b:30:a5:be:4a:dd:00:f6:dd:2f:17:97:3d:af:9a:
         39:e3:99:4e:e9:10:79:ec:93:07:e9:82:d1:de:67:05:55:1e:
         64:60:74:71:e6:e7:fb:d2:43:f9:18:bf:42:57:30:b7:65:fa:
         1f:00:5c:a8:1c:97:d0:28:3d:f9:85:83:60:ac:4a:87:10:54:
         75:4c:5c:d7:56:72:cc:19:1c:d0:09:84:f2:41:1c:0a:63:30:
         d7:dd:fe:e8:58:f4:da:b1:59:d7:20:6a:fb:17:d0:8b:ca:88:
         b6:99:b4:b7:1e:af:c9:40:05:96:78:0b:7f:84:c1:17:d7:f4:
         fa:a9:13:9f:96:29:f2:b3:db:dc:00:6d:e5:bd:05:ad:04:f0:
         73:fe:ea:d1:8e:d7:63:9b:f6:f3:8e:c4:42:db:fd:77:2c:cd:
         a1:fe:d2:92:eb:38:09:14:12:f7:ba:78:32:bc:81:69:ac:93:
         67:f9:42:9a:1a:69:5b:b3:1a:08:7c:ff:c1:8e:bf:72:7b:30:
         75:bb:5a:9d:bb:b1:fa:04:49:50:c5:b2:b8:fa:eb:69:0c:c0:
         d6:01:fb:4d:6c:a9:cf:93:b0:f5:b4:33:09:d5:64:c5:a2:b2:
         92:26:03:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:43 2025 by rpki-client