Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/3137372e3132342e31372e302f32342d3234203d3e20323632333132.roa
File:                     3137372e3132342e31372e302f32342d3234203d3e20323632333132.roa (raw, json)
Hash identifier:          uaG5UX36TAr0yzjv9BKYQA6bTpMOQU46zo6wda7fWCI=
Subject key identifier:   C1:97:25:68:AF:46:2F:B0:10:AF:E3:A9:C3:5E:BC:16:F6:58:EC:59
Certificate issuer:       /CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
Certificate serial:       58D8789E527A8DD2ACFFF5E85B11B185C69C681E
Authority key identifier: 2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/3137372e3132342e31372e302f32342d3234203d3e20323632333132.roa
Signing time:             Fri 16 Aug 2024 16:26:19 +0000
ROA not before:           Fri 16 Aug 2024 16:21:19 +0000
ROA not after:            Fri 15 Aug 2025 16:26:19 +0000
asID:                     262312
IP address blocks:        177.124.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d8:78:9e:52:7a:8d:d2:ac:ff:f5:e8:5b:11:b1:85:c6:9c:68:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
        Validity
            Not Before: Aug 16 16:21:19 2024 GMT
            Not After : Aug 15 16:26:19 2025 GMT
        Subject: CN=C1972568AF462FB010AFE3A9C35EBC16F658EC59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:ff:5b:1e:78:6b:81:31:fc:4e:5a:2f:a2:
                    e5:c3:0a:7a:cb:8f:51:1a:02:47:9a:15:df:01:ac:
                    75:41:90:e2:88:e7:68:68:88:80:b9:6f:16:bb:ec:
                    b0:68:0f:c3:21:cb:cc:b8:64:01:c7:67:fd:2c:62:
                    51:dd:1b:25:3e:5e:7d:d9:60:69:7b:f2:b0:7f:d4:
                    d6:d6:d1:dd:2d:b8:be:ff:73:67:ac:8a:d8:83:66:
                    f7:22:53:d9:73:4d:82:c8:05:0b:0f:c1:d9:ad:ea:
                    65:8e:00:7a:4a:3f:74:7f:d4:82:ea:40:cf:49:c6:
                    32:4b:58:e6:b4:9a:f4:9e:f9:93:20:b4:53:1a:cb:
                    f5:35:07:61:e1:d6:fc:53:aa:fe:93:15:5a:01:b3:
                    25:00:91:7e:fb:23:0c:6e:4d:74:2a:85:50:68:49:
                    34:49:c7:43:49:04:86:b2:d9:aa:fd:b0:f2:3d:0f:
                    88:18:0f:b2:51:2c:59:6d:d0:d8:3d:0a:ad:07:82:
                    24:5c:65:9c:c6:a2:1f:fd:48:ac:d0:1a:45:dd:c6:
                    e3:01:48:30:58:43:74:d3:23:b7:80:08:eb:05:22:
                    4b:c0:68:fa:42:7e:24:ba:23:f0:b4:83:f3:44:55:
                    cc:3c:76:8b:7b:61:ac:d2:62:04:90:a4:30:1b:38:
                    68:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:97:25:68:AF:46:2F:B0:10:AF:E3:A9:C3:5E:BC:16:F6:58:EC:59
            X509v3 Authority Key Identifier:
                keyid:2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/2D960C563AE2AE7815A5AFF54826A703C1669FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/3137372e3132342e31372e302f32342d3234203d3e20323632333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:d2:03:0c:2f:ea:c7:2c:6d:5a:7f:de:ab:8d:11:e6:34:b2:
         88:dd:6d:27:77:9d:22:02:fe:0d:bd:9c:cb:16:f6:4d:c9:c9:
         cb:11:6b:57:1d:d2:61:22:35:5c:6d:a5:95:2e:d3:95:9b:12:
         c9:59:7b:8b:ff:2d:b0:dc:91:ab:84:2d:a3:de:7c:aa:1f:9d:
         66:ee:6d:df:93:a3:19:28:7f:ab:06:4d:7c:cc:c3:98:2b:03:
         d4:fe:f2:a0:c5:c1:0c:87:3f:6a:92:c0:b9:81:8b:6a:e9:02:
         64:2d:15:b2:cd:3c:e7:a8:1b:38:27:e2:d9:18:23:88:5d:ae:
         10:2d:a9:2f:e4:b7:b9:9b:33:b2:20:80:2f:3b:9f:3c:ef:be:
         2b:42:00:74:c6:e6:05:07:6d:9a:1f:16:91:f7:23:4d:b0:2a:
         b2:23:a3:04:e1:c8:09:11:f6:4f:d2:b7:fb:df:f0:06:c1:67:
         fc:6c:37:eb:0c:5c:5d:30:e9:37:fb:d9:83:d4:ce:52:58:f5:
         51:15:80:7b:5a:f0:c6:0f:34:4c:e8:ee:73:ef:fa:89:be:5f:
         0d:bb:0b:5f:39:87:b9:3b:2d:62:48:70:34:97:88:9a:14:a4:
         d6:a1:1e:74:e5:89:fc:81:3b:38:6d:8c:48:aa:1c:b8:60:8c:
         c7:71:c4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:20 2025 by rpki-client