Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e32312e302f32342d3234203d3e20323633303733.roa
File:                     3137372e3232332e32312e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          BdPcNTBrSx+iDqT2T3gCEEeGKfYP1AAqQMs4JQNTNII=
Subject key identifier:   8E:D4:A8:25:5C:F8:8E:84:46:61:88:11:20:E4:88:B8:22:54:15:F7
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       01DB59E9367933E9AB9147096FE74D72FE765B05
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e32312e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 05 Mar 2025 22:10:13 +0000
ROA not before:           Wed 05 Mar 2025 22:05:13 +0000
ROA not after:            Wed 04 Mar 2026 22:10:13 +0000
asID:                     263073
IP address blocks:        177.223.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:db:59:e9:36:79:33:e9:ab:91:47:09:6f:e7:4d:72:fe:76:5b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar  5 22:05:13 2025 GMT
            Not After : Mar  4 22:10:13 2026 GMT
        Subject: CN=8ED4A8255CF88E844661881120E488B8225415F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:39:e2:0a:9a:c6:cd:c5:b0:81:d2:08:c9:
                    49:d5:23:1f:d5:c3:44:32:1a:bc:2e:ef:0f:65:a1:
                    ce:13:f4:19:f8:1e:80:2f:04:b4:ad:15:6e:d6:87:
                    9c:21:09:76:e9:70:e8:0a:37:38:a9:0f:a2:c8:d2:
                    3a:c4:6b:90:c0:c7:b3:96:65:42:78:4a:31:85:59:
                    d6:52:54:5a:53:12:45:4a:92:bf:d2:67:70:a1:c0:
                    b4:21:71:fe:1d:ec:ea:8b:c3:58:73:7f:bf:01:e4:
                    e9:4a:31:6f:a5:76:52:0d:9e:9c:b8:b8:43:32:ee:
                    eb:7b:2f:92:0c:52:7c:84:c9:de:09:a6:97:ba:e9:
                    d1:00:9a:76:cd:c9:7d:73:31:b5:95:8f:d8:b1:4f:
                    21:47:6d:57:5a:11:83:e1:17:27:1a:b5:12:6d:d5:
                    10:79:6f:47:b5:0b:83:f5:9f:95:a2:17:45:94:f3:
                    58:a8:a4:6a:b1:48:ec:0f:39:17:90:39:2a:cd:04:
                    1e:68:f2:b5:db:29:b1:6e:a5:0e:3f:93:ff:0f:a9:
                    9b:35:94:87:df:74:a4:3b:b2:c4:eb:21:f7:f3:6d:
                    06:cb:98:de:fc:21:f1:2e:85:55:9c:a5:bf:b4:01:
                    75:82:90:b7:c2:6b:c6:a1:02:7e:e3:25:3b:ea:cb:
                    13:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D4:A8:25:5C:F8:8E:84:46:61:88:11:20:E4:88:B8:22:54:15:F7
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e32312e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:0a:1e:5a:aa:3d:91:ce:75:ba:7f:58:55:9d:09:ab:cd:4e:
         d1:58:37:ae:3a:0b:2c:5e:24:76:3c:de:58:ac:b5:1e:9e:06:
         a8:33:15:22:38:7f:cc:03:60:68:cf:34:65:38:b3:db:1e:21:
         c5:b5:51:33:04:f7:b7:4f:7f:16:53:49:43:1b:20:95:13:fa:
         cb:d2:53:1d:33:97:e6:61:26:98:1d:d1:74:c7:79:68:e8:c8:
         b6:b3:97:a4:ec:f3:6d:39:be:ec:c7:1d:67:13:59:66:d5:f2:
         24:4b:9a:ee:e5:3a:90:66:a7:4c:c1:c5:7d:62:10:f3:98:dc:
         b3:dd:43:93:0e:02:a8:b2:3c:b2:fb:c5:35:b2:00:7a:b5:3f:
         43:18:e3:e3:ef:ce:ae:1e:2a:33:2b:9f:30:3e:9e:3d:eb:66:
         0d:91:06:9b:01:64:fd:50:76:f0:4a:8d:70:5c:d2:38:dc:c4:
         0b:12:e6:3a:24:c5:04:06:5d:ac:d5:42:17:b3:99:39:cc:88:
         eb:46:24:16:4b:e9:73:86:52:08:fc:93:01:6d:4a:4c:53:3a:
         c2:87:38:30:31:df:95:25:d9:97:e9:fa:ad:0d:20:ea:54:7a:
         de:f0:6e:7c:ac:30:e5:ca:97:7d:da:eb:af:03:a3:b7:1b:22:
         3c:04:ef:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:58:29 2025 by rpki-client