Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/owdAy1uGb5xBtSUp5jP2T5T6nipmxH2j3QJFiaEyz3x/0/3137372e31302e3132372e302f32342d3234203d3e203532393138.roa
File:                     3137372e31302e3132372e302f32342d3234203d3e203532393138.roa (raw, json)
Hash identifier:          DxVjmE+mubpMhPXL0hbckrfsFjfMN9D5d+iZbG7OJvY=
Subject key identifier:   F6:DC:B7:1F:B7:4F:26:CA:77:3C:A4:14:B5:A1:1A:E1:BD:87:61:4C
Certificate issuer:       /CN=4A0559F9CE3145CEAD352814018B1C85517828E5
Certificate serial:       2DD365AFBF50FC69A09BD1E95773EABB8C7E0DD3
Authority key identifier: 4A:05:59:F9:CE:31:45:CE:AD:35:28:14:01:8B:1C:85:51:78:28:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A0559F9CE3145CEAD352814018B1C85517828E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/owdAy1uGb5xBtSUp5jP2T5T6nipmxH2j3QJFiaEyz3x/0/3137372e31302e3132372e302f32342d3234203d3e203532393138.roa
Signing time:             Tue 10 Oct 2023 22:13:35 +0000
ROA not before:           Tue 10 Oct 2023 22:08:35 +0000
ROA not after:            Tue 08 Oct 2024 22:13:35 +0000
asID:                     52918
IP address blocks:        177.10.127.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d3:65:af:bf:50:fc:69:a0:9b:d1:e9:57:73:ea:bb:8c:7e:0d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A0559F9CE3145CEAD352814018B1C85517828E5
        Validity
            Not Before: Oct 10 22:08:35 2023 GMT
            Not After : Oct  8 22:13:35 2024 GMT
        Subject: CN=F6DCB71FB74F26CA773CA414B5A11AE1BD87614C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:7c:9b:1a:b0:3a:66:3a:88:38:79:e1:e9:
                    6c:c5:6c:3e:cb:ed:87:70:b3:cb:5d:b5:9c:70:df:
                    40:24:42:7b:b7:fb:32:f9:24:4e:b8:e5:c0:d7:81:
                    74:e3:9f:e2:8d:f7:12:30:f3:d4:fe:94:32:ac:7e:
                    2b:8d:fd:80:0e:97:95:77:32:1e:23:a9:9a:88:45:
                    14:34:ca:be:02:05:09:d7:3b:a4:b9:4a:19:32:fd:
                    e7:54:b7:67:e4:da:9f:6c:77:79:9e:07:53:dd:dc:
                    74:11:86:6e:51:40:a0:59:69:54:7e:89:99:2b:91:
                    a5:da:f3:0d:f5:9f:2f:68:01:fc:82:78:24:96:44:
                    8a:96:dd:94:8f:a8:1d:73:d6:04:bd:ca:bf:d6:3e:
                    51:10:1e:85:bb:9e:89:26:26:06:96:5e:e8:ff:fa:
                    5a:53:af:47:9c:01:75:15:1d:f4:36:60:da:ba:69:
                    ea:e5:c7:42:a4:7c:98:1f:b3:f7:76:42:ac:aa:5a:
                    e0:cd:ac:b1:39:58:4e:ed:a3:e4:c7:59:9c:a5:bb:
                    e9:d7:39:ff:d7:0e:3d:80:0c:d0:d3:f3:40:8b:68:
                    5e:5e:bd:6f:84:d9:64:91:b5:46:eb:a9:9a:87:b1:
                    5f:ca:7c:1e:1a:0a:bd:03:04:e5:e6:dd:72:70:44:
                    a9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DC:B7:1F:B7:4F:26:CA:77:3C:A4:14:B5:A1:1A:E1:BD:87:61:4C
            X509v3 Authority Key Identifier:
                keyid:4A:05:59:F9:CE:31:45:CE:AD:35:28:14:01:8B:1C:85:51:78:28:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/owdAy1uGb5xBtSUp5jP2T5T6nipmxH2j3QJFiaEyz3x/0/4A0559F9CE3145CEAD352814018B1C85517828E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A0559F9CE3145CEAD352814018B1C85517828E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/owdAy1uGb5xBtSUp5jP2T5T6nipmxH2j3QJFiaEyz3x/0/3137372e31302e3132372e302f32342d3234203d3e203532393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:72:87:3f:19:52:e7:77:dc:94:7a:1c:95:1e:23:c9:cb:b1:
         00:42:e1:bc:3d:d3:9c:88:81:5b:c0:bb:2e:bf:2e:d1:39:61:
         e2:4c:ca:e9:dd:f7:57:9b:07:35:6c:1c:92:3b:32:cc:f3:88:
         19:1b:ca:bd:70:bc:3f:fd:76:de:0f:a2:02:95:14:c7:fd:03:
         40:02:e9:6d:ed:d5:f9:50:bf:14:25:4c:76:af:bc:5b:19:49:
         c7:11:f6:09:5f:be:07:4f:1c:82:b3:2a:20:3a:19:f6:b2:c5:
         c3:46:3c:c4:ed:83:7c:17:9e:e4:25:20:4d:24:8d:b4:8d:61:
         7b:f8:22:2b:11:78:50:37:f7:67:70:90:19:3d:d4:1d:e4:38:
         c0:1a:7b:40:9d:78:b4:ad:53:53:db:d3:96:4c:fe:aa:70:44:
         24:06:78:e6:82:7e:24:6a:12:89:84:58:18:20:08:8e:dd:98:
         cf:07:8b:c0:57:f0:e5:95:fc:f7:0d:37:c8:eb:a3:60:6c:30:
         2d:e9:20:68:2a:da:2d:17:b0:62:99:47:08:fa:5c:a5:0a:88:
         0f:19:79:9a:9c:7b:68:7d:06:62:b5:c4:50:4e:26:bc:d4:9c:
         6a:02:46:0d:a6:4d:79:72:7c:10:5e:91:3d:f1:b7:a8:c3:b9:
         ab:fa:62:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:04 2025 by rpki-client