Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/3137372e3132342e3132382e302f32322d3234203d3e203532383633.roa
File:                     3137372e3132342e3132382e302f32322d3234203d3e203532383633.roa (raw, json)
Hash identifier:          9OT2bHAj0flbKs51OScY3XOISW3kFnFORRp+JF0W/pg=
Subject key identifier:   70:5A:4E:83:4B:0B:66:AC:9D:99:0F:67:AE:D3:47:EF:AB:EA:E8:C4
Certificate issuer:       /CN=B110FC9A0C8E264375E85C314B1FC94C5746603D
Certificate serial:       792D5FA9E08A1324CD6A265917A28ACE0965DBF9
Authority key identifier: B1:10:FC:9A:0C:8E:26:43:75:E8:5C:31:4B:1F:C9:4C:57:46:60:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B110FC9A0C8E264375E85C314B1FC94C5746603D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/3137372e3132342e3132382e302f32322d3234203d3e203532383633.roa
Signing time:             Sun 17 Mar 2024 14:00:00 +0000
ROA not before:           Sun 17 Mar 2024 13:55:00 +0000
ROA not after:            Mon 17 Mar 2025 14:00:00 +0000
asID:                     52863
IP address blocks:        177.124.128.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2d:5f:a9:e0:8a:13:24:cd:6a:26:59:17:a2:8a:ce:09:65:db:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B110FC9A0C8E264375E85C314B1FC94C5746603D
        Validity
            Not Before: Mar 17 13:55:00 2024 GMT
            Not After : Mar 17 14:00:00 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:cd:7f:80:c6:71:a4:83:cb:e4:02:19:b6:
                    61:69:c1:0c:13:d8:3f:73:b1:90:21:88:81:26:35:
                    da:ac:4b:ce:6d:4d:3c:d0:fb:ec:60:f3:19:ab:08:
                    4b:5b:a8:66:43:73:fe:ec:f8:06:18:16:c1:35:ec:
                    dc:e6:ca:d8:91:1e:ce:8d:cd:89:78:e0:89:ca:a9:
                    95:8c:a6:4e:e5:be:93:36:2a:3c:ad:5e:7d:6c:58:
                    78:9d:c5:5b:dd:2c:01:4f:c1:f4:c1:c9:7c:7c:d9:
                    64:ff:f1:ea:16:c1:c8:91:5c:2b:4e:b9:04:23:89:
                    2d:33:f5:1d:8a:ec:57:79:24:de:2c:32:5a:31:75:
                    91:75:95:5c:fb:16:be:21:df:14:de:ac:21:30:9d:
                    69:77:5f:64:13:4d:7c:4a:b6:1d:8c:7d:93:02:ac:
                    60:3b:10:16:20:7b:84:45:9a:2a:5e:b2:64:53:3c:
                    f8:24:35:54:e9:5d:7d:38:92:af:7a:b0:72:fd:d5:
                    a8:b8:cd:f9:32:d5:d5:c6:b6:85:fa:f3:6a:ac:41:
                    77:c8:c1:e2:f6:fb:92:04:10:90:6e:e7:c2:95:1c:
                    b5:02:aa:a8:33:bd:76:57:7e:d1:8d:f8:6e:35:5b:
                    e0:5f:1c:99:06:c3:81:9b:dc:2b:3f:c1:31:2a:a1:
                    19:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5A:4E:83:4B:0B:66:AC:9D:99:0F:67:AE:D3:47:EF:AB:EA:E8:C4
            X509v3 Authority Key Identifier:
                keyid:B1:10:FC:9A:0C:8E:26:43:75:E8:5C:31:4B:1F:C9:4C:57:46:60:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/B110FC9A0C8E264375E85C314B1FC94C5746603D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B110FC9A0C8E264375E85C314B1FC94C5746603D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/3137372e3132342e3132382e302f32322d3234203d3e203532383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:e4:56:54:9a:57:22:cf:34:38:8f:1d:6e:cf:0e:a2:da:c6:
         ce:79:0a:ef:a5:b8:7d:32:9d:16:94:46:67:55:ff:2b:0c:84:
         57:94:cd:72:27:ee:3d:d9:18:b1:6f:6e:6f:4a:b1:97:77:ee:
         3c:bc:c7:b9:14:ab:ab:0c:4c:df:d6:07:e9:5d:8b:01:27:41:
         a3:c2:f6:12:e2:27:65:d3:02:77:81:37:e7:fa:2e:0d:c4:e3:
         ff:95:dc:83:56:a8:28:fc:05:54:72:7c:c8:71:82:ee:02:30:
         59:37:5b:bb:10:fe:94:e2:06:09:6d:23:c9:10:89:92:5d:e3:
         67:91:b2:90:01:e8:82:53:02:1c:fb:7b:1f:7a:95:06:b5:59:
         ba:a0:91:0d:3d:5a:6f:3a:34:7f:de:ac:99:c5:b2:57:cc:52:
         9b:8f:19:35:84:de:7f:32:d1:3f:98:83:c4:4b:ab:89:3e:84:
         c8:50:fe:1e:05:37:74:7d:1c:3a:ff:f2:59:b0:71:16:77:6e:
         5a:86:ac:8a:27:cd:78:37:50:23:da:79:29:79:1d:5e:ef:eb:
         a9:9d:ee:98:56:20:02:c5:34:d9:83:02:28:6a:58:81:b9:83:
         5d:2c:93:aa:40:08:26:e1:4f:24:f3:47:c6:81:f3:dd:81:d2:
         89:ec:42:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:20 2025 by rpki-client