Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e362e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e362e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          +02jweZ//oQx5QC1EEFwKGV5VT05EHVlKTOZUVy3Ic0=
Subject key identifier:   80:58:57:97:35:11:53:F0:30:EA:03:0B:7F:6C:32:7F:60:47:A1:66
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       72EA26D855FD138EE234E1C70C4FC41B9432AE9A
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e362e302f32342d3234203d3e20323632353039.roa
Signing time:             Thu 07 Nov 2024 20:40:15 +0000
ROA not before:           Thu 07 Nov 2024 20:35:15 +0000
ROA not after:            Thu 06 Nov 2025 20:40:15 +0000
asID:                     262509
IP address blocks:        177.67.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ea:26:d8:55:fd:13:8e:e2:34:e1:c7:0c:4f:c4:1b:94:32:ae:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:15 2024 GMT
            Not After : Nov  6 20:40:15 2025 GMT
        Subject: CN=80585797351153F030EA030B7F6C327F6047A166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4a:c8:60:f4:87:fb:c6:33:b7:1d:36:3a:d0:
                    15:9c:61:72:23:ee:90:01:42:7d:7b:7d:b5:04:a7:
                    9c:fa:5c:39:48:be:5c:c1:68:70:c2:29:2f:10:41:
                    a6:ed:25:55:20:fc:85:fd:58:bc:9e:e9:d1:fc:2a:
                    98:20:e6:ef:02:0f:b8:ea:76:d0:72:60:07:00:da:
                    a5:29:0e:cb:b8:12:a7:df:f5:6f:95:ad:a5:c0:fb:
                    82:25:6b:dc:d4:d1:50:2b:b1:36:f3:f3:f9:b7:cd:
                    9d:2d:88:92:ff:c8:b5:e7:2f:5d:34:78:4e:06:06:
                    f5:6f:e2:d1:21:37:d1:72:10:9a:e4:bc:5c:9b:ad:
                    bc:a9:c6:a3:f3:67:ae:5d:f3:03:33:52:85:80:8f:
                    62:91:96:94:27:f6:04:45:34:3b:30:cd:35:5e:69:
                    1c:0e:33:16:19:89:2b:36:1c:98:4b:a6:44:26:2c:
                    28:a6:83:a8:ce:42:1d:48:c0:47:84:0c:9b:57:86:
                    d3:c5:5b:05:25:a8:d3:0a:75:d4:48:fc:da:a4:75:
                    0f:4e:e8:c8:9e:b6:cc:0b:0b:8d:db:10:0c:13:85:
                    d9:93:52:be:2e:87:84:8f:bd:3d:2a:02:24:cf:a5:
                    9c:f1:e1:62:e5:0c:60:10:99:78:9c:e6:88:91:aa:
                    f5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:58:57:97:35:11:53:F0:30:EA:03:0B:7F:6C:32:7F:60:47:A1:66
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e362e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e6:b6:f0:07:69:07:3d:bc:21:7c:3d:40:2c:e6:8d:fb:ae:
         60:be:bc:e3:dc:0d:da:79:b2:02:c4:12:3e:95:43:86:73:c5:
         87:81:dd:d6:f3:2f:f2:b0:33:7a:33:4c:71:30:0c:82:57:a7:
         c5:79:ae:a7:d2:9e:fb:9e:2c:0e:9e:f6:ee:f5:5f:c1:52:cd:
         e1:db:23:2a:b0:ff:2f:2e:25:13:4e:34:d2:84:21:56:82:62:
         0f:b6:11:04:fd:10:d7:a4:4b:d3:d2:29:ee:5f:9d:7d:45:09:
         32:47:67:67:23:f3:77:69:60:16:a1:50:e7:ec:5f:a6:54:01:
         35:72:e7:23:55:55:00:fa:6d:e4:10:d8:b4:86:20:be:73:fc:
         b7:ba:45:92:40:24:03:0f:1d:ff:8d:aa:b9:df:00:24:19:47:
         42:cc:e8:2c:43:e4:71:fc:3b:a7:e2:80:bc:19:ae:2b:b5:2f:
         e4:87:1c:a9:99:89:b0:77:1f:c6:ac:13:5a:e7:cd:b5:82:4b:
         65:22:f1:31:43:2a:0b:4f:8e:e3:3d:ef:1c:0a:6c:ed:31:52:
         61:2b:5f:20:e9:59:d2:2c:2d:f9:44:da:94:c6:db:b7:93:a5:
         22:5c:97:05:72:95:71:51:af:b8:ca:83:8e:43:1d:bf:56:2d:
         2e:e7:41:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:41:26 2025 by rpki-client