Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132362e302f32342d3234203d3e203238353938.roa
File:                     3137372e3130342e3132362e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          JBU5e3EUCU6xb9TXKGFf2D5rsAGIRxDjWSGnj7P6CRQ=
Subject key identifier:   02:BC:BC:F0:4F:82:5F:15:39:2C:1F:48:0F:BB:75:77:53:67:4F:99
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       2A06F8FDE05272C59E56750AB9D1C26EF82692E4
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132362e302f32342d3234203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:00:59 +0000
ROA not before:           Mon 23 Oct 2023 12:55:59 +0000
ROA not after:            Mon 21 Oct 2024 13:00:59 +0000
asID:                     28598
IP address blocks:        177.104.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:06:f8:fd:e0:52:72:c5:9e:56:75:0a:b9:d1:c2:6e:f8:26:92:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:55:59 2023 GMT
            Not After : Oct 21 13:00:59 2024 GMT
        Subject: CN=02BCBCF04F825F15392C1F480FBB757753674F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8d:d7:35:a8:0d:2a:43:10:79:b5:3a:70:a1:
                    2c:2b:3c:5b:06:62:63:cc:65:38:90:7b:41:d2:4c:
                    df:05:bf:c0:ef:6d:55:fd:03:11:f9:1c:c9:a3:48:
                    49:1c:8f:b8:bd:ba:c4:3f:c6:aa:b6:7e:15:06:f8:
                    5c:ab:73:eb:e1:82:9b:e8:79:55:e6:09:6f:9d:69:
                    bd:77:32:14:b1:aa:37:0a:cc:48:e6:bd:32:fe:05:
                    34:ba:47:87:86:b8:85:0a:43:30:7b:7b:fe:67:53:
                    45:77:98:b0:e9:de:79:8d:6f:cd:c6:91:cf:40:51:
                    ce:8b:59:1e:02:9b:39:87:0a:bb:b2:f1:30:09:40:
                    8b:0f:26:82:7d:45:94:8f:40:4c:f2:5a:16:51:98:
                    5a:eb:77:de:4d:f0:1e:21:26:f9:4f:ff:e0:d7:0f:
                    c5:75:88:8e:56:8c:4f:a9:e4:85:2f:42:b4:07:87:
                    79:65:b0:7a:b9:e6:78:34:73:94:80:f4:12:80:e1:
                    c9:f0:24:54:10:ee:2e:ad:58:1c:7f:d6:34:d7:06:
                    54:47:61:b1:de:f8:da:b7:a7:4c:7c:0a:20:21:22:
                    ff:15:81:33:d0:39:8e:91:33:33:31:89:41:7f:38:
                    68:7f:7f:f3:d1:1f:b8:9e:1b:1c:42:e1:2c:65:fb:
                    fe:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BC:BC:F0:4F:82:5F:15:39:2C:1F:48:0F:BB:75:77:53:67:4F:99
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3137372e3130342e3132362e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:27:42:b9:fc:aa:e6:c9:84:a4:12:81:13:ea:bb:a9:43:9f:
         e9:9c:17:97:cb:9f:88:89:4b:5a:e5:e1:18:f7:6f:16:19:99:
         72:b9:44:c4:3d:b5:e2:07:f7:87:ad:16:ea:4e:98:07:f1:eb:
         c5:88:73:ce:c9:d5:41:3c:51:bf:eb:11:c4:53:58:8c:84:b4:
         fc:9e:bd:5a:59:05:58:a2:21:ce:da:c4:3a:e0:5f:55:fa:e2:
         28:3a:95:e2:66:ec:82:97:45:43:7c:75:94:45:53:5b:1a:34:
         4e:6c:f1:d3:58:5f:27:95:fb:0d:88:db:87:eb:08:dc:04:0e:
         61:76:da:91:b0:68:11:34:48:2e:45:78:15:d2:e1:d3:ff:2f:
         58:3f:3d:cf:e4:76:f2:04:b8:b9:2f:97:b5:83:e3:71:14:f9:
         1a:02:74:02:b9:72:3f:52:bf:66:74:c3:53:b6:54:c6:cb:cc:
         8b:db:93:fc:cd:ee:34:48:a7:59:d9:35:ec:3a:5f:15:c4:e4:
         fb:a4:67:62:12:86:c7:1b:e5:d4:fe:06:42:26:c1:2a:73:8b:
         99:91:e3:f5:cc:7d:bf:02:9f:62:23:16:73:8d:fc:60:8e:81:
         6f:81:ad:ca:94:48:a7:61:f7:ba:40:4d:91:b2:54:21:53:cc:
         42:d9:b1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:23:33 2025 by rpki-client