Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131322e302f32302d3234203d3e203238353938.roa
File:                     3137372e3130342e3131322e302f32302d3234203d3e203238353938.roa (raw, json)
Hash identifier:          z9zUMlSTfA+WYh1epX4o03OpqxT5JyLXFvhi1iuBYzg=
Subject key identifier:   6B:FF:25:C1:A8:AE:0E:73:DB:9A:53:4E:35:EE:9C:80:14:A6:27:58
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       566564703FF76F75C464EC345030A281D6F075D1
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131322e302f32302d3234203d3e203238353938.roa
Signing time:             Tue 07 Nov 2023 21:08:39 +0000
ROA not before:           Tue 07 Nov 2023 21:03:39 +0000
ROA not after:            Tue 05 Nov 2024 21:08:39 +0000
asID:                     28598
IP address blocks:        177.104.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:65:64:70:3f:f7:6f:75:c4:64:ec:34:50:30:a2:81:d6:f0:75:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Nov  7 21:03:39 2023 GMT
            Not After : Nov  5 21:08:39 2024 GMT
        Subject: CN=6BFF25C1A8AE0E73DB9A534E35EE9C8014A62758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:e7:7c:46:d2:57:d4:3b:35:47:9d:20:3a:
                    a6:cd:d0:34:30:c0:13:c3:6e:71:91:5c:de:16:e5:
                    f8:24:b0:54:7b:f7:b5:5f:e1:05:1e:93:a0:62:d2:
                    9e:79:49:79:b1:c2:e5:e2:e4:28:85:05:81:df:31:
                    05:f7:90:ba:e3:59:9b:f1:db:92:6d:39:c3:b2:48:
                    b0:82:a3:c9:cf:1e:74:73:68:c9:a5:05:02:a9:3d:
                    a2:57:29:7c:bb:1f:13:16:d3:c8:db:24:20:0c:67:
                    29:98:cf:1a:30:77:4f:5f:16:95:f1:b1:24:87:32:
                    92:1d:d3:3a:9b:66:2e:3b:46:7a:76:3c:06:d3:d5:
                    f3:68:a9:8e:26:d6:97:36:26:22:1e:63:7b:32:2a:
                    5b:1d:09:a8:cf:90:c1:d5:b8:82:ff:10:71:bf:6b:
                    0d:98:d9:b3:3f:48:a8:21:ff:9e:9c:0c:4f:7c:91:
                    2c:c7:e5:1f:ff:23:4a:2f:f0:15:a2:1f:3a:f1:1f:
                    d1:16:d9:d3:77:b8:0e:f3:dc:46:a9:01:1f:fe:22:
                    c4:f6:0a:e5:32:bc:6c:f9:31:5c:46:a8:52:b5:86:
                    b5:f9:09:3f:d3:8a:88:33:71:9e:57:c1:3b:56:ae:
                    c0:eb:8a:10:bd:27:e0:a2:58:43:b2:44:e2:9f:1a:
                    b4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FF:25:C1:A8:AE:0E:73:DB:9A:53:4E:35:EE:9C:80:14:A6:27:58
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131322e302f32302d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         89:c1:c3:c6:3c:e0:7a:79:9a:a4:9f:37:d0:c2:e4:19:2f:42:
         49:18:5b:e5:05:c1:b9:1f:9c:71:da:38:3c:78:c2:fa:d9:ee:
         a8:a6:4c:6c:1b:56:95:71:ba:dd:8e:61:60:5a:3a:52:1f:ea:
         c6:8f:05:0d:15:59:60:a7:b5:63:fe:be:8f:b5:3b:81:d4:30:
         71:0d:0f:30:14:95:57:5b:9d:17:c4:5e:42:48:a0:18:05:f5:
         3d:58:0e:be:f8:57:58:5f:63:99:95:f1:c9:35:8d:25:c7:45:
         c8:36:bf:d6:d0:84:23:7b:9b:6d:c7:25:84:dd:37:9b:1d:72:
         d8:7d:2d:af:b9:42:bf:a2:60:a7:9e:f6:07:63:82:44:77:81:
         54:ff:d9:fc:93:d0:db:bb:fb:37:9a:fd:5e:a6:a3:97:74:b3:
         b3:08:95:ce:08:c7:fe:27:b3:46:be:74:9e:f0:70:bd:8d:e3:
         a0:e1:e4:97:69:a2:18:26:29:00:02:74:64:63:ea:c7:11:a5:
         e7:eb:a4:18:24:0b:1e:9e:b4:f8:b9:c0:0f:7a:1d:a8:c4:0d:
         82:b8:ff:62:60:fe:75:f2:a6:49:9a:32:c5:30:8d:d9:83:7e:
         2a:81:96:74:6f:c9:df:45:5e:da:36:c8:b5:5b:1b:9c:ce:2d:
         01:4e:b8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:05 2025 by rpki-client