Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e382e302f32312d3231203d3e20323632343836.roa
File:                     3137372e36362e382e302f32312d3231203d3e20323632343836.roa (raw, json)
Hash identifier:          PbZHFNfnGRTT2Rjtc/IRj2Y4Ak/aeA0EIUk2y67xi80=
Subject key identifier:   BF:5E:A4:C4:8D:E7:04:FF:46:80:9B:F4:80:0E:92:9C:52:62:98:6F
Certificate issuer:       /CN=04E2212E8119A88F829030DBA9530D79080ABB93
Certificate serial:       187CDCD7AB01E96321C3928FA928F4316D006CAF
Authority key identifier: 04:E2:21:2E:81:19:A8:8F:82:90:30:DB:A9:53:0D:79:08:0A:BB:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e382e302f32312d3231203d3e20323632343836.roa
Signing time:             Mon 19 Aug 2024 14:59:16 +0000
ROA not before:           Mon 19 Aug 2024 14:54:16 +0000
ROA not after:            Mon 18 Aug 2025 14:59:16 +0000
asID:                     262486
IP address blocks:        177.66.8.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7c:dc:d7:ab:01:e9:63:21:c3:92:8f:a9:28:f4:31:6d:00:6c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04E2212E8119A88F829030DBA9530D79080ABB93
        Validity
            Not Before: Aug 19 14:54:16 2024 GMT
            Not After : Aug 18 14:59:16 2025 GMT
        Subject: CN=BF5EA4C48DE704FF46809BF4800E929C5262986F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:29:59:25:ff:aa:1d:22:6f:c5:40:6e:0d:ab:
                    f7:c6:2f:94:64:64:09:aa:1f:7d:89:1e:8a:63:89:
                    97:82:93:46:6a:89:06:ac:bc:a9:ab:7a:1d:4e:34:
                    9f:2e:59:b7:a0:fc:61:80:e4:f8:32:9f:10:24:64:
                    03:bf:7c:c8:16:ae:dc:80:4a:fc:b4:d4:9e:c9:27:
                    fa:1b:c6:2d:52:57:b3:35:43:7e:07:11:c9:ae:b1:
                    9b:bf:7a:27:72:e6:d6:b9:d6:4a:9c:f3:34:9d:cc:
                    11:09:54:11:85:66:2f:cb:c0:2c:f5:ea:3d:52:0a:
                    12:5e:b5:9b:bc:f1:fd:15:48:60:ca:79:2a:f7:49:
                    90:ae:3e:fd:c3:82:7c:2f:18:f7:0a:12:2f:20:7b:
                    50:f0:c0:69:3b:2b:a0:6b:39:35:16:a1:f2:42:35:
                    ee:24:dc:bc:eb:cd:36:9f:ef:19:c4:54:77:dc:9a:
                    68:11:d4:b3:be:1e:d7:1f:5a:ed:e8:a3:8b:82:0c:
                    b2:39:a4:60:74:14:13:e8:b5:d2:c1:0d:ec:7d:85:
                    e7:ef:d1:0b:57:56:e0:b9:aa:d8:ce:1c:82:f6:13:
                    63:00:22:c1:1e:88:7a:3b:93:28:b3:9b:96:c1:d9:
                    1a:9f:9f:7f:da:c1:a0:bb:da:56:b3:b2:af:35:87:
                    eb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5E:A4:C4:8D:E7:04:FF:46:80:9B:F4:80:0E:92:9C:52:62:98:6F
            X509v3 Authority Key Identifier:
                keyid:04:E2:21:2E:81:19:A8:8F:82:90:30:DB:A9:53:0D:79:08:0A:BB:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e382e302f32312d3231203d3e20323632343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:dd:f5:89:a1:e0:13:8a:4f:9c:2e:af:29:fd:7b:99:2e:80:
         76:3e:45:f1:19:e3:2b:98:b7:49:b2:5f:dc:78:09:8e:26:be:
         de:eb:b3:f9:87:97:44:01:74:23:0a:e5:8c:a8:af:c9:25:44:
         14:ab:aa:27:11:ca:b2:37:26:d2:47:f6:16:53:56:13:db:cc:
         e7:e7:b1:a9:34:48:0d:e3:24:83:10:a6:c0:b2:1e:fd:4b:6d:
         05:57:10:1a:e0:84:be:84:92:1f:97:2c:c6:b6:5f:da:50:5e:
         48:07:70:8c:16:e6:85:9f:25:67:85:19:a9:74:70:d2:c6:e3:
         05:d9:eb:3c:3a:0b:be:3f:73:08:79:b5:2c:4e:3a:37:50:13:
         5c:ae:c0:07:bc:12:c5:3d:7b:9d:c9:cd:65:45:93:70:e2:05:
         c7:05:32:2b:ae:bc:41:40:3c:2e:eb:c5:9b:47:53:23:0a:7f:
         44:e6:d7:8c:04:35:aa:ac:c3:41:7f:b5:46:47:0d:85:1b:1c:
         c6:0f:26:1c:85:bd:ee:ba:73:46:06:01:2e:49:1f:0e:bc:25:
         24:ed:8b:17:32:a0:60:04:43:6a:71:32:f1:cc:19:1d:57:39:
         14:a5:08:cd:f5:23:ca:39:8e:b5:b5:96:8b:60:6d:87:50:5d:
         e8:3a:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:37 2025 by rpki-client