Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e31302e302f32332d3233203d3e20323639303936.roa
File:                     3137372e33392e31302e302f32332d3233203d3e20323639303936.roa (raw, json)
Hash identifier:          vSeKaTKt1/QnkjdV6HuftCd5R49bzyIdGF9dkkdR8L8=
Subject key identifier:   5A:59:93:AB:7F:37:2C:3A:8B:42:3B:B4:63:25:02:15:4B:68:DE:B7
Certificate issuer:       /CN=22AF7B01A71F10F6C4EB165BE13AE51E261E5B49
Certificate serial:       1FEB4DA1D2F4F3889EBBD77E1A12F41F259F75EF
Authority key identifier: 22:AF:7B:01:A7:1F:10:F6:C4:EB:16:5B:E1:3A:E5:1E:26:1E:5B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF7B01A71F10F6C4EB165BE13AE51E261E5B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e31302e302f32332d3233203d3e20323639303936.roa
Signing time:             Tue 03 Dec 2024 18:40:22 +0000
ROA not before:           Tue 03 Dec 2024 18:35:22 +0000
ROA not after:            Tue 02 Dec 2025 18:40:22 +0000
asID:                     269096
IP address blocks:        177.39.10.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:eb:4d:a1:d2:f4:f3:88:9e:bb:d7:7e:1a:12:f4:1f:25:9f:75:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22AF7B01A71F10F6C4EB165BE13AE51E261E5B49
        Validity
            Not Before: Dec  3 18:35:22 2024 GMT
            Not After : Dec  2 18:40:22 2025 GMT
        Subject: CN=5A5993AB7F372C3A8B423BB4632502154B68DEB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cb:fe:89:3a:d7:f3:78:ec:08:48:1f:67:31:
                    15:67:d6:ea:a6:17:15:e1:d9:c7:b7:55:73:47:d2:
                    00:d4:3e:ca:4c:f2:0e:ab:93:24:1f:8d:ac:0b:36:
                    f2:dd:92:9b:e9:c8:d5:06:77:55:42:1c:b1:7a:58:
                    47:91:1d:c3:59:25:3a:39:1f:bc:62:65:8c:d6:d3:
                    35:c9:65:a4:2e:ed:5d:ea:a1:fa:2a:fd:a1:a8:b8:
                    63:30:64:51:af:cb:f4:cb:22:b6:ff:47:30:2a:ae:
                    93:e8:42:a3:8d:b9:63:8a:09:53:24:1c:9d:ce:18:
                    af:e1:ff:c4:3e:16:a1:0d:24:53:40:eb:d4:fd:eb:
                    f8:b4:a3:31:b8:46:67:20:ba:dc:6b:26:a9:52:27:
                    ac:75:fb:f1:24:19:1e:09:37:0f:83:63:48:07:15:
                    2d:f8:ab:c9:8e:01:ae:85:7f:ce:3b:ea:16:1c:2d:
                    7c:b2:22:a6:b6:d5:8f:a5:90:89:76:b1:8d:ec:57:
                    74:8d:7e:70:65:3c:78:d4:a1:65:67:38:29:9c:2a:
                    6c:d4:fa:04:ab:55:78:4f:ab:3c:e5:81:29:e0:3c:
                    3e:a3:b7:46:f7:49:c1:f4:eb:a4:b5:c4:2f:eb:3c:
                    b8:9a:7c:41:98:fb:da:4e:b8:28:b3:c1:cb:3e:8a:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:59:93:AB:7F:37:2C:3A:8B:42:3B:B4:63:25:02:15:4B:68:DE:B7
            X509v3 Authority Key Identifier:
                keyid:22:AF:7B:01:A7:1F:10:F6:C4:EB:16:5B:E1:3A:E5:1E:26:1E:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/22AF7B01A71F10F6C4EB165BE13AE51E261E5B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF7B01A71F10F6C4EB165BE13AE51E261E5B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e31302e302f32332d3233203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:8b:db:c7:2d:b8:9e:5a:7c:ab:79:32:d8:37:e1:de:9e:64:
         ce:38:84:a5:82:42:00:ed:73:49:db:36:1a:a6:3d:61:cd:da:
         6c:af:56:2c:34:c4:46:9d:99:d1:51:cb:89:58:dd:de:34:ee:
         53:3b:c4:b2:27:8e:9d:65:b7:a2:26:e6:bb:91:36:49:ff:23:
         20:a0:f5:bb:93:15:4a:a0:55:ba:9b:2a:08:dd:2e:3f:71:0a:
         8e:c8:e4:ea:16:9c:fd:20:d0:fa:b3:bc:75:23:69:bb:f5:b6:
         35:64:28:60:22:c8:35:fd:9a:cb:0b:89:cc:39:c3:cb:40:63:
         11:45:d8:dc:e1:fd:c4:e7:9f:6c:5f:09:22:cc:1e:29:f2:fe:
         aa:56:d9:c5:a6:74:a5:d2:8a:1c:c7:f2:3a:66:b3:65:63:f1:
         8c:f6:b4:fc:02:67:14:52:c6:6e:b9:e4:e8:a0:06:d9:c4:a5:
         94:e3:b9:ec:98:ad:61:a8:fb:15:b0:be:67:aa:ca:e4:2f:bc:
         bd:9d:fb:33:f0:8d:29:9d:40:cf:6d:f0:ab:0e:1a:2d:42:e4:
         27:05:86:23:46:a9:74:a7:f6:18:93:3f:04:e9:8e:64:ee:68:
         db:8e:49:33:10:68:d7:dc:86:ae:79:02:58:3f:66:69:58:a9:
         ef:4b:e5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:24:40 2025 by rpki-client