Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e382e302f32322d3232203d3e20323632343836.roa
File:                     3137372e36362e382e302f32322d3232203d3e20323632343836.roa (raw, json)
Hash identifier:          2AcMhk9M6cFp7CTsmr7BKDHv6mgHSBoC3YA9wTY39Sk=
Subject key identifier:   AA:43:43:0B:91:8D:B6:10:BC:77:A7:B2:68:49:B5:7C:A4:A0:75:07
Certificate issuer:       /CN=04E2212E8119A88F829030DBA9530D79080ABB93
Certificate serial:       5847987FA5429D9B09825746DEB985AF7C55C1B1
Authority key identifier: 04:E2:21:2E:81:19:A8:8F:82:90:30:DB:A9:53:0D:79:08:0A:BB:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e382e302f32322d3232203d3e20323632343836.roa
Signing time:             Mon 19 Aug 2024 14:59:16 +0000
ROA not before:           Mon 19 Aug 2024 14:54:16 +0000
ROA not after:            Mon 18 Aug 2025 14:59:16 +0000
asID:                     262486
IP address blocks:        177.66.8.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:47:98:7f:a5:42:9d:9b:09:82:57:46:de:b9:85:af:7c:55:c1:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04E2212E8119A88F829030DBA9530D79080ABB93
        Validity
            Not Before: Aug 19 14:54:16 2024 GMT
            Not After : Aug 18 14:59:16 2025 GMT
        Subject: CN=AA43430B918DB610BC77A7B26849B57CA4A07507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:91:b7:0b:66:3d:88:00:8f:f8:6e:b4:7c:
                    4e:18:e4:8b:2a:7d:07:1e:30:96:5b:88:ab:2d:26:
                    8c:a1:03:a3:e9:5e:52:eb:05:45:1d:8d:88:aa:13:
                    9a:1d:9c:75:79:c2:9e:bf:54:4a:e1:e6:2e:75:d6:
                    af:75:a4:7e:f9:4b:c6:b2:fd:68:71:b0:05:a8:66:
                    7e:4f:1d:80:e4:62:08:66:86:75:23:be:74:1e:c2:
                    94:d1:6a:d8:af:27:30:e7:67:87:74:b3:5b:bc:9f:
                    14:d1:9c:6c:9e:41:e4:20:c7:ec:9e:2d:b5:fc:9a:
                    fa:17:5f:83:11:f5:b5:ee:26:5f:16:14:8d:1d:f9:
                    ab:12:84:56:96:73:3d:cf:59:8e:e2:38:c1:c1:3c:
                    1f:08:89:48:a1:8a:ef:6e:dc:6f:a7:a4:f3:d4:49:
                    3c:92:53:0a:e0:5e:30:79:4f:e5:83:3d:55:51:6f:
                    37:31:75:2d:0e:e6:79:14:65:01:29:b9:57:ce:bd:
                    36:3d:28:02:8d:4a:9c:33:90:d3:72:49:1b:e2:5f:
                    64:c9:cd:3b:dd:78:43:ba:39:4f:70:9c:54:92:aa:
                    17:78:57:47:0b:02:c8:91:f3:ef:02:81:18:af:de:
                    c7:16:4f:7e:ab:96:91:71:06:eb:68:e9:83:14:ad:
                    f8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:43:43:0B:91:8D:B6:10:BC:77:A7:B2:68:49:B5:7C:A4:A0:75:07
            X509v3 Authority Key Identifier:
                keyid:04:E2:21:2E:81:19:A8:8F:82:90:30:DB:A9:53:0D:79:08:0A:BB:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e382e302f32322d3232203d3e20323632343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:2e:7d:61:5f:77:46:10:84:0c:54:ad:ad:70:f1:d1:e9:bc:
         a2:de:24:e4:67:3e:97:4c:cd:31:08:aa:e3:65:85:58:61:4a:
         98:63:f1:da:1e:72:b1:d8:cb:82:79:6d:fe:57:ad:b3:74:7d:
         2d:db:46:0b:76:1a:78:b3:bd:c1:fc:0e:3f:6e:82:86:70:df:
         62:ce:ff:fb:7b:c1:e0:31:f7:97:ae:5e:7c:21:9c:e6:e3:c1:
         d3:c6:8d:42:79:73:5c:2d:b0:04:de:36:0f:f1:e6:9e:40:b2:
         ba:da:8d:29:e0:fc:6f:77:2c:61:0d:b4:7f:48:9e:a7:89:98:
         3e:bf:6a:b1:4d:b3:ca:40:5a:77:5b:6a:12:7e:1d:aa:33:64:
         7c:90:8b:d4:c9:1b:b9:47:68:20:37:d5:63:d1:83:0b:d0:27:
         77:15:70:c3:34:4b:d9:25:7e:17:82:62:93:77:ac:e0:b1:f8:
         90:71:75:e0:dd:85:68:c5:41:01:59:f5:24:92:84:33:d4:2a:
         7f:c0:30:22:eb:45:7c:9c:78:7b:71:50:7e:6f:60:5c:89:26:
         49:f0:55:11:92:da:ef:9a:6c:93:4e:6a:af:c0:87:00:8b:8a:
         f1:c5:62:a5:22:4c:30:25:9e:3b:a0:db:22:b3:57:19:4e:63:
         f4:29:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:05 2025 by rpki-client