Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137302e38312e342e302f32322d3234203d3e203238353938.roa
File:                     3137302e38312e342e302f32322d3234203d3e203238353938.roa (raw, json)
Hash identifier:          Z8uuPPyWPxbR8rwRVO94r+l6JNO86DU9siYZ6WMsLDs=
Subject key identifier:   8D:06:5B:1A:CF:97:F3:F4:93:53:3E:09:46:CC:C5:C9:9E:B2:CC:BE
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       778220FE5C827ECFF3C5C9D3DF9FCFD6E840B972
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137302e38312e342e302f32322d3234203d3e203238353938.roa
Signing time:             Fri 04 Aug 2023 14:01:19 +0000
ROA not before:           Fri 04 Aug 2023 13:56:19 +0000
ROA not after:            Fri 02 Aug 2024 14:01:19 +0000
asID:                     28598
IP address blocks:        170.81.4.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:82:20:fe:5c:82:7e:cf:f3:c5:c9:d3:df:9f:cf:d6:e8:40:b9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Aug  4 13:56:19 2023 GMT
            Not After : Aug  2 14:01:19 2024 GMT
        Subject: CN=8D065B1ACF97F3F493533E0946CCC5C99EB2CCBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:ca:33:e1:78:e8:3d:06:dc:77:5e:23:02:
                    7f:27:71:ef:de:3f:12:88:81:33:36:23:c3:bb:d8:
                    5b:1b:20:d1:6e:fb:57:56:cc:9c:aa:09:75:b0:7f:
                    10:28:54:4f:21:7c:05:7a:11:87:68:e6:b4:15:34:
                    92:4c:69:e7:76:b0:87:d5:58:49:5d:d3:7a:0a:f3:
                    b1:16:78:09:27:d6:0a:bd:b6:79:0c:32:66:b0:34:
                    bb:9d:2f:cc:ae:7a:9d:9b:42:d9:8e:ad:7e:5d:18:
                    9d:56:e4:33:35:de:23:93:6a:cc:65:0e:73:53:08:
                    61:59:34:0d:7f:14:ec:c0:4f:ff:98:ba:fe:9e:aa:
                    fd:bf:c1:24:6e:ad:c6:cc:2c:3c:8e:2f:40:b0:0f:
                    52:cd:63:82:13:a5:bd:c4:b9:78:18:fd:77:97:8c:
                    91:53:f0:66:6c:a7:8f:8b:d0:db:3b:0a:cd:eb:e1:
                    a4:b5:c2:f2:2f:27:47:5d:7e:1d:ff:43:e2:5f:c0:
                    f1:c1:20:6f:2b:2c:00:47:d6:95:ae:82:20:eb:c5:
                    b7:ff:54:47:24:f7:7d:6c:96:d7:6a:a2:37:5d:53:
                    e7:31:3f:cb:c0:b3:71:11:b3:b6:0f:ab:18:7b:6c:
                    17:c9:e1:61:9f:95:23:95:44:a9:02:b6:29:65:05:
                    6e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:06:5B:1A:CF:97:F3:F4:93:53:3E:09:46:CC:C5:C9:9E:B2:CC:BE
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137302e38312e342e302f32322d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:70:ce:1d:a9:4a:f8:df:5a:b0:f6:72:3f:13:a1:13:a9:c9:
         35:a8:00:0c:f6:03:d3:1c:c1:00:c8:b5:3e:be:27:cf:7b:7c:
         9c:7c:c4:33:fa:7d:ac:e9:0c:1a:bc:6a:4e:81:c0:13:39:69:
         ec:b4:8b:04:84:da:a0:ae:eb:26:58:5e:35:c8:78:b7:07:9f:
         78:43:da:4f:91:44:b3:9d:8d:61:93:c6:1a:60:d3:f7:96:e0:
         b2:01:23:d1:b5:5b:b4:11:d1:20:55:3a:1a:02:a1:54:c1:8a:
         86:f0:df:90:9a:fa:96:71:dd:83:a4:48:6b:ea:c4:ad:57:29:
         a2:84:25:d9:bd:d0:d7:d4:36:ed:a9:df:c4:d1:82:b4:9e:65:
         50:d1:c9:9f:7b:78:ea:e3:8f:7b:9d:d6:64:bd:00:68:69:99:
         41:63:18:57:e1:27:2f:8c:a9:36:ff:73:e6:ae:25:64:ff:d1:
         cd:14:0d:00:13:16:53:09:c5:3c:02:47:7f:0e:42:10:b1:c8:
         31:54:fe:a1:3b:4b:df:59:68:dd:80:a7:3b:7c:cd:d2:19:e8:
         44:ad:8a:92:6d:cd:c6:ae:29:d1:6f:d2:6a:aa:a8:e7:d2:ef:
         d7:38:3e:98:d7:6d:b5:29:eb:83:f9:f5:04:e8:7a:8b:b6:c1:
         68:84:3c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:09:46 2025 by rpki-client