Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131372e302f32342d3234203d3e203238353938.roa
File:                     3137372e3130342e3131372e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          Ehu9NOBDy/0C0W713hOrLRidWAjidV9XhqPn5C+QgeU=
Subject key identifier:   B1:E3:A3:C3:61:48:6D:F5:91:92:A0:43:0D:5F:0C:B9:85:F7:D9:16
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       4CF3A6D78EEBEC0C09F7647EE5828CB36447931B
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131372e302f32342d3234203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:00:58 +0000
ROA not before:           Mon 23 Oct 2023 12:55:58 +0000
ROA not after:            Mon 21 Oct 2024 13:00:58 +0000
asID:                     28598
IP address blocks:        177.104.117.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f3:a6:d7:8e:eb:ec:0c:09:f7:64:7e:e5:82:8c:b3:64:47:93:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:55:58 2023 GMT
            Not After : Oct 21 13:00:58 2024 GMT
        Subject: CN=B1E3A3C361486DF59192A0430D5F0CB985F7D916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:69:13:4e:94:c5:fe:2c:93:f8:1a:8f:12:ab:
                    b6:09:af:08:b1:ac:6b:ad:e9:2d:cd:25:80:e2:60:
                    91:03:bd:81:e5:be:84:70:e0:59:bb:d0:3a:aa:ea:
                    75:c9:7a:15:17:3a:e1:01:75:98:bf:96:91:b6:43:
                    91:d4:23:ed:89:f5:06:30:c8:11:f8:7c:49:38:59:
                    46:54:12:bb:71:57:bc:d6:b2:7e:4d:90:fe:d7:e9:
                    28:59:35:b9:1b:ac:d3:68:5b:3b:29:65:03:5f:b4:
                    5d:12:d8:96:5a:87:23:d9:ba:cc:e6:78:71:19:43:
                    dc:3f:f7:38:02:01:ac:a0:56:a6:84:12:e8:70:11:
                    f4:97:f1:b8:50:93:7c:66:0b:50:24:83:33:90:89:
                    40:6d:a1:11:4d:86:e2:b3:47:95:a2:36:15:0d:bc:
                    ea:94:8e:ca:90:2e:0b:b1:62:ea:0f:e7:0f:02:22:
                    dd:af:84:62:df:2b:44:28:88:33:94:41:25:17:18:
                    bf:24:ab:f3:b6:be:a0:ac:e5:f9:25:fd:eb:4d:3d:
                    78:c2:16:09:9e:3a:8d:82:b6:f0:dd:ec:53:4d:7a:
                    b6:4b:54:bf:45:3d:c6:f3:98:40:45:a6:e5:82:e4:
                    c5:2e:94:68:da:0d:dd:68:7c:9b:9a:5a:91:ea:28:
                    a3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E3:A3:C3:61:48:6D:F5:91:92:A0:43:0D:5F:0C:B9:85:F7:D9:16
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3131372e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:6a:1c:20:ac:bc:b7:03:3f:fa:38:aa:de:f4:93:06:1a:76:
         1a:bb:c9:1c:de:ee:f4:22:e6:e8:b8:11:84:76:96:f0:bd:eb:
         c1:2c:fc:37:18:8b:42:d1:87:bd:d0:73:e8:b6:eb:1e:e1:a1:
         9f:af:af:16:3a:11:e8:72:91:f9:5b:2a:e7:00:5c:f7:82:97:
         78:8f:8d:87:b5:85:46:e1:f0:b0:1c:e8:35:ae:d0:10:17:d4:
         64:7a:34:75:65:57:b5:cc:63:a6:62:b8:98:77:3d:eb:4c:57:
         59:35:d8:b5:89:9e:c2:24:15:e2:72:ad:76:1d:b8:70:c3:c4:
         c8:12:19:4d:b3:65:4f:e1:93:19:7c:2c:4f:61:fa:59:ee:00:
         3c:54:3c:2c:15:b9:68:33:05:9e:36:0f:22:54:dd:27:32:b7:
         b1:43:b7:b3:89:43:85:16:07:7b:7c:12:44:88:7d:64:dc:56:
         0d:cc:db:fa:c6:27:fc:bd:04:aa:78:81:78:cb:96:e4:64:9a:
         4c:5b:29:6a:71:0d:5d:15:7f:e7:77:f5:8b:85:ab:c8:4d:82:
         56:b6:e8:f0:43:c4:43:91:25:1d:7a:a8:76:36:00:c8:be:44:
         04:25:1d:3a:5b:a2:ef:35:6a:d5:6f:3b:62:cc:e4:a3:b3:cf:
         1e:e3:fa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:08:35 2025 by rpki-client