Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131362e302f32332d3234203d3e20323632333031.roa
File:                     3137372e38372e3131362e302f32332d3234203d3e20323632333031.roa (raw, json)
Hash identifier:          DBMgr6tONf/4FpyxwxfURh39pW5yyGoVcQ8NsSsK5vE=
Subject key identifier:   B8:F3:9D:74:69:DA:54:D2:1C:22:E4:A2:92:4F:40:F9:27:EE:AB:65
Certificate issuer:       /CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
Certificate serial:       22171F5B0E5EEB019A1F5126CAC753A447EDCBCB
Authority key identifier: 20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131362e302f32332d3234203d3e20323632333031.roa
Signing time:             Tue 12 Mar 2024 12:56:53 +0000
ROA not before:           Tue 12 Mar 2024 12:51:53 +0000
ROA not after:            Tue 11 Mar 2025 12:56:53 +0000
asID:                     262301
IP address blocks:        177.87.116.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:17:1f:5b:0e:5e:eb:01:9a:1f:51:26:ca:c7:53:a4:47:ed:cb:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
        Validity
            Not Before: Mar 12 12:51:53 2024 GMT
            Not After : Mar 11 12:56:53 2025 GMT
        Subject: CN=B8F39D7469DA54D21C22E4A2924F40F927EEAB65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a0:06:cd:12:24:c2:83:f2:b6:2f:47:b7:0c:
                    4e:e8:70:b2:88:12:90:7d:a7:cc:84:c3:42:c4:9f:
                    66:9c:17:dc:aa:80:3d:f7:0c:86:76:84:20:cc:99:
                    ed:2b:65:94:2a:e2:5d:9c:7c:ab:d2:80:f8:24:46:
                    5f:6f:18:51:0f:e5:51:b5:a4:ef:da:46:85:2c:01:
                    ac:44:81:a7:1b:75:12:18:5e:ec:95:d1:68:3d:d5:
                    70:69:86:4b:44:62:9d:96:bd:6d:a0:1a:70:22:3b:
                    8b:6b:b9:da:17:a8:a9:d9:d0:90:34:09:c8:ce:b0:
                    ac:e4:d0:80:bb:4f:d8:f7:b4:76:65:42:f4:a3:ce:
                    14:7e:4b:49:13:76:de:40:78:0e:8f:bb:be:b1:38:
                    64:69:aa:bb:40:86:a6:5c:1e:99:ea:d4:d6:0a:ee:
                    90:2d:1f:46:00:61:d7:da:49:e1:28:37:c3:52:c6:
                    a9:f2:13:1d:59:d1:e3:72:ac:be:34:be:88:32:3e:
                    1d:b9:9c:fa:95:a1:3c:5c:ea:f9:78:c1:a5:41:45:
                    a5:20:43:92:81:b1:9a:47:c5:10:9a:b8:2c:c2:d4:
                    53:ee:ed:21:46:05:1b:8d:cf:40:c3:0c:b2:21:45:
                    61:c9:d3:30:8e:e2:f5:d2:f0:a4:72:8e:74:70:42:
                    b3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F3:9D:74:69:DA:54:D2:1C:22:E4:A2:92:4F:40:F9:27:EE:AB:65
            X509v3 Authority Key Identifier:
                keyid:20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131362e302f32332d3234203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:06:99:6a:34:8e:ff:dc:f5:56:88:36:93:d7:9c:83:62:1b:
         21:3b:77:7b:7b:de:94:0b:3d:5f:0f:85:f0:f6:20:c4:b1:39:
         20:1c:75:0b:de:8f:46:c6:b4:7f:fb:74:41:4c:ae:b0:bb:bb:
         63:e3:96:03:26:f2:82:b2:1a:ef:3a:ae:41:84:27:82:d0:30:
         76:45:d5:ff:3f:7d:33:04:51:a6:bb:bf:52:c0:e8:da:08:b9:
         1b:92:9f:7d:73:b1:19:ed:94:d0:e1:c4:fb:f7:c4:a2:27:7e:
         cf:64:3a:0c:0e:98:78:cf:ad:44:4e:4f:02:ba:6b:ee:05:88:
         33:a7:09:44:43:1b:e7:73:6d:d1:6b:f3:56:f5:90:71:e7:99:
         d2:e7:a9:94:d6:cc:9d:98:ab:ac:66:2f:d2:0a:6f:fa:a2:c4:
         ae:fe:53:29:99:56:09:7a:8d:17:8f:3f:01:f4:dc:61:85:86:
         31:c4:f6:ed:65:d4:a5:e0:9f:46:72:43:46:7b:2f:97:6b:0f:
         8c:43:b8:e0:f2:59:0c:53:c6:3e:f8:e0:2a:39:f5:d9:d0:8e:
         a1:ef:96:1f:7b:3d:dd:57:a1:27:8a:70:0a:ed:8c:7d:1c:06:
         e2:2e:f1:98:62:c2:8f:73:cc:14:b3:94:8e:92:b0:30:83:6f:
         40:06:92:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:15 2025 by rpki-client