Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35312e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e35312e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          1jxTF8J2G+8dZT96zQ9lqZQwCLadsJ8hARNaejz5Oxo=
Subject key identifier:   96:58:8F:F7:53:B6:3C:11:F6:13:33:8B:99:4E:6E:97:2B:B2:E0:1A
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       473EB088EE7970BAC7630FE15167EF10AA789082
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35312e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 17 Jan 2025 16:16:57 +0000
ROA not before:           Fri 17 Jan 2025 16:11:57 +0000
ROA not after:            Fri 16 Jan 2026 16:16:57 +0000
asID:                     52930
IP address blocks:        177.185.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3e:b0:88:ee:79:70:ba:c7:63:0f:e1:51:67:ef:10:aa:78:90:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Jan 17 16:11:57 2025 GMT
            Not After : Jan 16 16:16:57 2026 GMT
        Subject: CN=96588FF753B63C11F613338B994E6E972BB2E01A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b0:b2:1a:e3:62:b0:a9:73:17:64:3b:54:69:
                    4f:41:b8:95:03:f6:f7:54:93:31:6b:bf:5b:47:8e:
                    60:2d:b4:58:fa:c3:41:f5:cc:c2:9a:1f:df:ad:09:
                    84:b3:84:a0:ff:1b:2f:f6:52:09:3f:01:7f:83:25:
                    39:38:14:e2:43:7c:d9:af:09:43:17:fd:15:0b:70:
                    48:0a:18:13:45:0e:2e:76:f5:7a:e6:d9:84:e8:b7:
                    5c:31:17:b9:00:aa:fe:03:72:aa:38:45:0c:69:b8:
                    40:7b:01:c0:4c:d2:69:8a:fc:01:3b:a8:61:e4:a5:
                    07:bd:2c:9b:05:39:1c:10:e2:8e:19:f6:df:03:6c:
                    79:ec:40:a3:14:64:68:4b:7b:e7:2f:38:37:ba:40:
                    24:fa:ca:d2:45:c9:e3:18:a2:d5:18:78:cc:82:93:
                    b0:04:fb:4b:17:de:6d:35:d5:3a:c4:6f:bc:dd:e4:
                    15:af:c3:ee:38:67:cb:65:39:4d:05:3b:4e:95:7e:
                    be:9d:c4:b2:d4:0d:88:54:79:4c:06:78:7c:c5:6e:
                    b5:51:3c:8d:30:9d:23:7d:22:a4:19:d0:83:56:16:
                    49:49:47:c1:fb:1e:f0:8b:06:b7:0c:7b:47:73:9a:
                    43:c9:c3:89:99:72:ea:cd:60:64:9a:81:7f:22:25:
                    a7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:58:8F:F7:53:B6:3C:11:F6:13:33:8B:99:4E:6E:97:2B:B2:E0:1A
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35312e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:a5:c3:42:d4:27:2a:1d:61:db:15:6e:48:4e:b8:b5:ea:1c:
         1d:5b:a0:de:dc:81:3e:c7:89:82:fd:dc:a0:19:a9:d3:1c:d8:
         9c:9c:94:1a:87:8f:c0:62:52:fc:89:c8:02:aa:4f:a2:d2:5d:
         76:db:dd:ac:ba:0b:6a:ab:04:74:4f:65:e2:28:5d:c6:82:3a:
         8d:e7:fc:ce:50:7f:2f:77:f0:86:6b:96:93:a4:9d:14:d3:9f:
         b5:78:ed:3d:9c:71:6b:46:00:0f:d7:3e:bf:6e:64:cf:1e:45:
         f4:18:94:65:74:fe:f4:5c:a8:3d:28:31:b6:e8:52:04:94:f0:
         9d:ec:0d:f2:22:38:a1:06:ea:e0:16:92:da:15:66:51:fa:72:
         ca:20:86:ee:07:a8:5e:5a:26:c7:b8:27:b2:51:e6:52:06:02:
         04:69:93:e8:7d:57:34:b8:dc:56:7a:9f:ef:d9:67:d1:8c:d7:
         7c:89:cf:72:5c:43:40:05:db:02:6e:b9:40:8f:1e:5a:1f:1f:
         da:11:de:bc:ab:6e:f6:39:61:39:1d:0a:03:cc:c9:1e:68:36:
         e4:ce:70:d1:2f:30:23:76:53:d1:4f:6c:d5:af:7d:6a:ee:1a:
         29:a2:9f:b0:42:d8:33:e0:9f:a5:8a:fb:43:55:00:14:ca:4f:
         ce:6c:95:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:20:03 2025 by rpki-client