Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132332e302f32342d3234203d3e203238353938.roa
File:                     3137372e3130342e3132332e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          KevlrY5pokG2AS9mnou9Wnoy6BY3witGrbdbpXGf6z0=
Subject key identifier:   9B:78:5C:EF:43:0E:71:10:A1:C1:26:44:BC:0E:88:41:87:FD:3C:39
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       7FC225B9CE09F2E54C31251AB4DB43E6C8D373D7
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132332e302f32342d3234203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:00:57 +0000
ROA not before:           Mon 23 Oct 2023 12:55:57 +0000
ROA not after:            Mon 21 Oct 2024 13:00:57 +0000
asID:                     28598
IP address blocks:        177.104.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c2:25:b9:ce:09:f2:e5:4c:31:25:1a:b4:db:43:e6:c8:d3:73:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:55:57 2023 GMT
            Not After : Oct 21 13:00:57 2024 GMT
        Subject: CN=9B785CEF430E7110A1C12644BC0E884187FD3C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:68:20:88:86:15:8d:7f:b6:a9:97:be:0d:b1:
                    15:c6:7c:99:f3:73:09:d0:b3:a1:1d:e2:12:de:f9:
                    f1:3a:8f:c4:77:77:0a:d1:3f:66:3a:ee:45:b0:5a:
                    f3:e8:5d:bb:fa:14:d5:b0:c9:2b:40:75:da:b4:e2:
                    b5:bc:c1:24:89:78:f6:86:39:8f:58:4d:3d:6b:ff:
                    53:85:b4:6b:90:e3:52:3f:34:52:ce:1b:06:0e:cd:
                    a9:8f:fd:f7:20:20:7d:bd:09:51:8e:44:05:23:90:
                    70:1e:54:10:41:95:b8:2d:c6:c0:f1:ea:39:99:3f:
                    17:57:98:3c:bd:d2:33:18:de:08:40:9f:50:00:b0:
                    ca:71:66:03:d9:53:7b:1a:ef:ba:6a:a0:48:7e:4b:
                    b9:b6:80:57:0f:2b:4c:c6:d9:0c:78:31:65:8c:49:
                    21:56:cd:de:f4:ac:ef:d0:f4:06:9a:d4:3f:67:6e:
                    34:41:fd:cb:f9:dc:05:a1:31:0f:70:07:c7:c7:91:
                    42:4f:f0:06:9c:63:78:74:57:95:b6:e8:21:39:9b:
                    9a:3f:3e:88:b3:61:94:71:86:5f:1b:28:b1:df:ef:
                    48:32:3f:31:f5:9d:b7:7a:3a:00:b8:d5:27:f4:f8:
                    0d:78:5e:94:e2:4f:29:f8:f7:da:94:b2:98:9e:74:
                    a2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:78:5C:EF:43:0E:71:10:A1:C1:26:44:BC:0E:88:41:87:FD:3C:39
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132332e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:fb:99:d4:8c:63:e9:7c:b1:8b:e1:a0:53:3f:69:56:17:c4:
         b1:37:c1:e2:90:f3:cd:75:2a:a3:c7:0e:d5:5b:69:81:5f:52:
         ba:64:86:dc:3f:2f:84:82:d0:ce:76:62:82:d6:ba:67:09:56:
         78:9f:b5:9d:e3:a3:8d:70:6a:ac:9a:98:ba:08:fb:ad:87:0b:
         3a:7c:d7:af:5b:44:92:a9:01:08:5a:e4:58:da:6b:74:6a:0a:
         c8:f1:13:b5:01:29:a8:42:fd:ed:64:aa:32:e5:32:5c:d4:8e:
         fa:89:57:b8:8e:91:5b:dd:f6:07:0c:64:bb:87:07:52:9a:eb:
         ad:c2:20:d7:0c:a4:b9:90:69:3b:58:fa:fb:f3:bb:83:23:9e:
         b8:a2:af:34:1d:01:7a:38:98:0f:a5:88:19:5c:fc:83:ba:b0:
         a2:5e:97:95:e6:49:be:d3:81:f2:88:1c:db:77:58:84:ea:92:
         e9:63:48:7b:8e:93:40:6b:c0:cd:a0:16:e4:e7:1a:68:09:e6:
         90:32:14:95:40:e8:b5:6d:61:d4:8d:1b:56:47:26:9b:98:70:
         16:4e:5e:7c:39:0d:b3:14:74:12:9e:a6:78:49:4e:d3:6e:4c:
         3e:ab:4e:17:16:eb:91:94:ab:17:7e:21:dd:5a:83:b8:07:03:
         d0:ac:f7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:01 2025 by rpki-client