Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e35342e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e35342e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          W4BwwhJkYjlWo3Vfq9QKBFG6OdOlfvW9SPsyL9FHs7A=
Subject key identifier:   8F:FE:79:AC:1C:67:20:15:C7:03:87:6D:E5:84:4C:4A:C6:92:26:9B
Certificate issuer:       /CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
Certificate serial:       30653542E97D9E28834CBDE0088EBDE6B279C22F
Authority key identifier: AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e35342e302f32342d3234203d3e203532393330.roa
Signing time:             Sat 06 Apr 2024 17:29:07 +0000
ROA not before:           Sat 06 Apr 2024 17:24:07 +0000
ROA not after:            Sat 05 Apr 2025 17:29:07 +0000
asID:                     52930
IP address blocks:        177.185.54.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:65:35:42:e9:7d:9e:28:83:4c:bd:e0:08:8e:bd:e6:b2:79:c2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
        Validity
            Not Before: Apr  6 17:24:07 2024 GMT
            Not After : Apr  5 17:29:07 2025 GMT
        Subject: CN=8FFE79AC1C672015C703876DE5844C4AC692269B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ae:07:b1:08:a9:0e:04:49:f8:0d:f2:cc:aa:
                    82:8a:74:5b:77:8a:25:ed:8e:66:57:b9:db:61:29:
                    33:e3:46:38:8d:57:0b:2f:5e:23:c7:b2:0b:bd:56:
                    70:37:75:39:b7:71:32:3c:e0:6f:0a:64:f4:df:2c:
                    a2:4f:56:df:a3:1a:07:9c:13:69:8a:d6:0b:1d:d5:
                    ac:f7:46:45:13:09:28:84:b0:42:b0:fc:a5:2a:51:
                    ee:25:a7:3e:fb:09:f3:9a:2a:e9:32:95:46:0f:4c:
                    10:68:25:b4:2d:e9:7a:c3:52:b8:05:c5:c9:9d:eb:
                    c4:af:04:53:c8:30:e8:43:7c:6f:5c:62:cf:85:fc:
                    a8:95:be:1c:ba:83:36:ec:81:e8:fd:8c:89:37:36:
                    9f:4c:ab:a6:ac:6c:a9:ef:9d:b8:66:19:00:be:7e:
                    db:f7:67:fa:8f:e3:5a:15:cf:0f:ba:55:f0:d0:b6:
                    11:32:27:20:d3:aa:ca:14:94:3b:6f:bb:a8:b7:81:
                    58:e0:4c:0c:26:24:73:9b:e2:f8:39:83:0b:86:a4:
                    26:3d:93:fb:fb:42:62:91:f0:9e:da:5b:6b:47:3e:
                    40:d6:2b:b4:3e:80:06:df:28:a5:6c:b9:fa:ed:a3:
                    da:f2:f7:6d:f7:13:ac:75:fb:e7:2d:ca:6a:24:ef:
                    4e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FE:79:AC:1C:67:20:15:C7:03:87:6D:E5:84:4C:4A:C6:92:26:9B
            X509v3 Authority Key Identifier:
                keyid:AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/AE58493D362ABCD98C2752F6BC5F4335A17F721D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e35342e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:2e:e8:90:e3:3e:57:6f:82:4f:84:b3:0a:bf:26:0b:40:bd:
         5b:54:02:90:8e:54:79:0a:7c:1f:07:d7:91:f0:ca:9e:a0:49:
         cc:06:5b:f0:75:a0:5c:33:5c:03:68:b6:c4:54:ce:98:dc:a6:
         6a:21:c2:6b:52:53:bf:e5:c5:a5:e1:a5:a0:4b:2c:cd:ab:20:
         89:43:8e:b2:2d:f3:12:51:ac:4c:f4:fd:fa:13:a8:34:ed:8a:
         f6:c9:cd:1f:77:74:83:cb:d4:29:09:dd:0b:92:01:11:27:f1:
         1e:20:ee:a6:1b:8e:0c:b0:35:c3:43:bb:06:35:e1:0e:a6:b1:
         e7:3b:47:b3:3f:bd:2d:85:e1:39:b9:20:60:a6:40:4d:04:b4:
         07:f2:33:32:3d:30:d6:89:e5:64:9f:c8:71:67:b9:5c:e1:e0:
         58:d0:02:a6:b8:58:9f:36:cd:28:b0:74:fd:1f:ed:d1:80:7f:
         32:56:25:61:86:20:a2:4b:a8:59:6d:4d:fb:f5:46:9d:f2:ce:
         67:3e:25:8f:68:7d:a7:96:60:3f:31:31:47:2e:ba:8e:38:f6:
         00:b6:e5:45:bb:e1:82:b1:0a:68:75:ed:0f:5e:81:10:ee:f3:
         0f:de:ef:56:49:3c:6d:f7:79:d6:5a:7f:40:db:da:d1:e2:9e:
         7b:01:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:43:08 2025 by rpki-client