Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137372e36362e39362e302f32342d3234203d3e20323632343931.roa
File:                     3137372e36362e39362e302f32342d3234203d3e20323632343931.roa (raw, json)
Hash identifier:          qp1D+d9fuGxDoeDswpwaltluZe1g79HjGs3xwqsKqxA=
Subject key identifier:   0E:39:74:23:72:5C:55:04:74:DA:57:B2:0C:72:07:37:36:05:94:D3
Certificate issuer:       /CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
Certificate serial:       218920D66E0338CF109D0ED2451CA6FF47A1D012
Authority key identifier: FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137372e36362e39362e302f32342d3234203d3e20323632343931.roa
Signing time:             Sun 06 Feb 2022 02:06:45 +0000
ROA not before:           Sun 06 Feb 2022 02:01:45 +0000
ROA not after:            Sun 05 Feb 2023 02:06:45 +0000
asID:                     262491
IP address blocks:        177.66.96.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:89:20:d6:6e:03:38:cf:10:9d:0e:d2:45:1c:a6:ff:47:a1:d0:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
        Validity
            Not Before: Feb  6 02:01:45 2022 GMT
            Not After : Feb  5 02:06:45 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:0c:fc:1a:0e:0a:ca:3b:80:d3:a2:2e:b9:
                    e3:83:5a:8c:0c:4a:ef:70:58:03:18:a8:e2:92:e5:
                    33:31:12:3e:e7:2a:b5:28:18:4f:28:6a:cb:58:d3:
                    a0:d9:6e:e3:1d:a7:0c:df:9c:a1:69:5d:03:43:c2:
                    a7:92:c1:09:5f:97:8e:3f:7b:6e:cb:32:e4:5d:96:
                    f8:c1:dc:cd:c1:38:25:f7:e8:9d:08:dd:09:71:d8:
                    66:5e:82:3f:a4:fa:39:66:b3:4f:7a:4a:4e:69:c7:
                    d9:c4:c2:7f:9c:28:8a:f9:a3:56:25:06:c7:9d:22:
                    ef:c4:22:b6:a2:e6:0d:2e:5c:9d:44:84:09:e5:d6:
                    ce:a0:95:0c:d4:a6:4b:22:04:5b:05:57:90:25:a0:
                    f5:b4:51:61:23:de:17:72:6c:24:15:e6:1d:c1:4e:
                    46:75:d0:e0:72:1d:f0:04:04:72:4a:d6:50:2e:58:
                    31:ea:26:93:bd:9e:78:79:7f:1d:fb:36:6f:dd:07:
                    34:ec:af:9f:0e:f5:94:0b:73:5e:31:4f:85:43:82:
                    42:cb:ab:d0:37:13:4e:88:37:10:bf:e7:88:5d:eb:
                    c2:51:0a:36:d4:54:e7:28:8c:ba:37:dc:24:70:fd:
                    ac:36:72:f5:62:3e:44:dd:ff:ad:2d:e7:9f:af:d9:
                    d0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:39:74:23:72:5C:55:04:74:DA:57:B2:0C:72:07:37:36:05:94:D3
            X509v3 Authority Key Identifier:
                keyid:FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137372e36362e39362e302f32342d3234203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:7d:2b:2e:22:16:b7:7c:66:76:f1:a8:84:a7:6f:8e:2c:82:
         e5:23:f6:84:b0:eb:e8:21:d5:da:db:ff:a3:58:27:b8:43:a2:
         70:a3:5c:eb:d9:fa:55:06:ba:97:50:f0:d1:30:41:27:07:0b:
         ad:88:73:66:6d:84:4c:9a:59:38:ba:e5:d2:48:71:7d:cb:e1:
         94:d0:6c:5a:16:34:62:26:5a:ca:5f:a7:a0:ee:01:a0:6f:7d:
         0f:f0:11:1b:ef:86:da:f5:2c:31:79:20:d3:74:ba:22:90:3d:
         70:8a:dd:47:47:0a:57:76:1c:7d:72:6d:4d:d7:e5:35:02:50:
         08:2b:16:c0:27:c3:e8:73:e3:03:15:e2:b2:ba:9b:2c:21:a5:
         07:f7:d4:88:c9:e5:32:59:51:f3:7f:da:a4:a2:79:53:0e:2f:
         10:4f:75:2a:4e:40:66:bb:00:27:09:60:43:a6:f4:8d:ec:16:
         ee:49:74:b4:c7:3b:f8:2d:5d:d8:9b:49:19:b4:c5:7a:4b:ab:
         ab:07:6b:b0:69:06:b1:5a:1a:d7:97:25:82:b8:b2:b6:4f:b0:
         c9:b5:3f:8f:fa:b5:2c:71:6e:ca:ed:eb:21:6e:24:e7:62:c7:
         df:c4:74:00:31:fe:24:e6:21:d2:a1:95:ad:78:80:cd:ec:11:
         c8:7e:89:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:00 2025 by rpki-client