Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e382e302f32322d3332203d3e20323639303936.roa
File:                     3137372e33392e382e302f32322d3332203d3e20323639303936.roa (raw, json)
Hash identifier:          2hjVAs7cTvKv9Cd2rGSrT1kcqNc8vI/NGpyVUsDGhsE=
Subject key identifier:   CE:5C:EA:C0:C0:E7:79:6F:55:BC:6E:3D:AE:38:A3:7A:A2:BC:35:D1
Certificate issuer:       /CN=0B05202569BCFD524B0B1BE663B49F875DE3A37E
Certificate serial:       41355E42C1823BCF9915902810FCCF21CEA9FA74
Authority key identifier: 0B:05:20:25:69:BC:FD:52:4B:0B:1B:E6:63:B4:9F:87:5D:E3:A3:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e382e302f32322d3332203d3e20323639303936.roa
Signing time:             Mon 04 Dec 2023 02:41:38 +0000
ROA not before:           Mon 04 Dec 2023 02:36:38 +0000
ROA not after:            Mon 02 Dec 2024 02:41:38 +0000
asID:                     269096
IP address blocks:        177.39.8.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:35:5e:42:c1:82:3b:cf:99:15:90:28:10:fc:cf:21:ce:a9:fa:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B05202569BCFD524B0B1BE663B49F875DE3A37E
        Validity
            Not Before: Dec  4 02:36:38 2023 GMT
            Not After : Dec  2 02:41:38 2024 GMT
        Subject: CN=CE5CEAC0C0E7796F55BC6E3DAE38A37AA2BC35D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:ed:22:05:f1:8c:5b:28:71:ee:41:a5:d5:
                    a7:4d:e9:c9:3d:09:17:f1:70:ea:2b:87:5a:6e:61:
                    c4:29:38:ec:a1:c8:f7:88:2a:73:6e:94:8b:0f:20:
                    23:29:6b:f4:a2:a8:ce:46:16:95:95:db:c7:f2:5f:
                    8f:08:c7:21:48:b3:b1:83:39:79:23:44:79:e6:79:
                    1d:19:0a:c3:5e:86:24:f7:4d:c1:70:d5:83:5f:53:
                    15:4a:61:c1:57:8d:2c:30:c7:36:e6:ad:81:be:a2:
                    2f:a1:b1:e5:bc:fa:aa:f5:c8:b4:6b:d0:ca:ad:b8:
                    2c:f3:5f:d7:8f:7a:90:41:fb:eb:af:3d:e1:77:3b:
                    da:6b:2c:61:83:44:96:d5:c8:5b:15:c1:43:7c:34:
                    da:e3:1a:ea:00:43:41:65:68:02:cc:8d:79:4b:e2:
                    84:41:9b:d9:22:17:47:e4:f6:e1:9e:e0:8b:a8:44:
                    c7:fc:1d:76:13:1e:04:de:e4:62:a4:3b:ed:d8:9b:
                    03:0b:29:f3:c9:93:7e:59:60:37:d0:ab:ef:5b:7a:
                    87:24:3c:62:6f:72:48:0f:97:bc:01:fa:63:25:af:
                    76:12:08:d7:78:64:a8:18:20:56:3f:ea:d3:08:d7:
                    53:18:f9:fa:f7:be:08:1d:3a:64:48:22:10:59:20:
                    4a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5C:EA:C0:C0:E7:79:6F:55:BC:6E:3D:AE:38:A3:7A:A2:BC:35:D1
            X509v3 Authority Key Identifier:
                keyid:0B:05:20:25:69:BC:FD:52:4B:0B:1B:E6:63:B4:9F:87:5D:E3:A3:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e382e302f32322d3332203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:d1:07:2e:21:70:13:cb:f6:bd:fd:89:78:7f:2a:5f:06:bb:
         53:57:83:63:04:17:ec:fa:51:80:64:28:1d:c9:22:71:45:61:
         4d:73:7b:aa:1e:eb:2a:46:d8:b0:d6:2e:a4:4f:77:91:67:06:
         6f:3a:5b:3b:30:40:45:13:43:fb:a7:a0:45:b7:2a:51:77:e7:
         58:02:1d:34:d2:53:60:5d:dc:8a:ba:84:7b:06:b5:84:97:60:
         c2:60:c7:e8:4b:7b:7c:d8:6b:73:93:15:c2:bc:ca:0c:98:cb:
         50:4f:89:33:86:49:97:ec:d0:f9:99:b0:d2:41:3f:a3:ff:4b:
         c7:f7:3f:67:83:07:3e:72:b1:c6:5a:42:19:1d:11:4b:9f:9f:
         0f:f1:74:c0:dc:96:b0:ac:f5:87:74:81:49:37:32:17:af:da:
         1e:0c:83:06:99:e4:d2:d8:a3:9a:9b:cc:10:e8:25:8c:de:0e:
         df:42:53:08:00:16:24:18:7c:17:d3:8a:e0:36:f9:0f:5e:3a:
         fb:ad:ea:6c:68:49:36:66:d2:fd:0f:11:32:46:f3:59:6a:cf:
         d6:5b:a4:1a:2b:24:58:25:50:8f:83:61:cd:fd:c4:62:31:f1:
         08:c5:94:43:47:09:e6:11:83:40:32:b8:b1:d6:5a:07:6d:60:
         1b:ee:b4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:10:24 2025 by rpki-client