Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3132392e38302e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          dOPNOtB1wkfgfHnAwNiJQGVlyDN1mhCNDjK52G6zRSY=
Subject key identifier:   50:EF:01:30:00:7F:04:C8:0D:3F:A0:3D:2A:90:04:7E:52:BC:79:9F
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       3D9BA847F27FCA33A678CA3EADEBDD06C2AA121D
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32342d3234203d3e20323632333933.roa
Signing time:             Tue 17 Dec 2024 13:50:41 +0000
ROA not before:           Tue 17 Dec 2024 13:45:41 +0000
ROA not after:            Tue 16 Dec 2025 13:50:41 +0000
asID:                     262393
IP address blocks:        177.129.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:9b:a8:47:f2:7f:ca:33:a6:78:ca:3e:ad:eb:dd:06:c2:aa:12:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Dec 17 13:45:41 2024 GMT
            Not After : Dec 16 13:50:41 2025 GMT
        Subject: CN=50EF0130007F04C80D3FA03D2A90047E52BC799F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1f:de:02:2b:85:13:1c:15:6f:20:63:15:7f:
                    e3:07:54:1c:19:c3:01:91:18:df:02:9b:e9:a8:92:
                    81:a8:12:3a:62:e5:02:05:42:4a:be:2d:d1:f4:d1:
                    9f:e3:a8:74:57:31:eb:c9:0e:f1:2d:4c:ed:ad:54:
                    a7:ef:01:17:44:25:ad:10:5d:cb:e8:7b:3f:a2:7e:
                    dc:2a:50:98:00:f8:ae:78:a5:f8:ea:7a:31:4e:cb:
                    a0:5b:e1:80:e4:8a:54:38:16:6c:2f:30:f6:c3:c3:
                    bd:35:30:e8:a1:03:fc:0f:9a:67:10:83:25:14:7d:
                    30:b7:1e:8e:27:36:f9:eb:05:55:b0:cf:6e:e1:25:
                    dc:68:51:8c:f0:47:ae:b7:6b:7e:92:f4:02:4a:c1:
                    22:7d:0f:8b:1e:f5:3e:5c:6d:b7:60:a8:79:61:fc:
                    0d:11:8b:de:c9:12:a7:f4:07:cb:e9:c4:b2:b1:e9:
                    6f:ba:21:4d:47:6f:e5:fe:cf:2f:03:be:0d:3a:95:
                    98:df:7a:1a:1b:e4:fb:58:10:63:d3:02:17:23:b1:
                    c7:4d:dc:3f:aa:fa:0d:fc:12:44:c8:18:6b:26:3e:
                    11:ef:ef:f1:22:9e:be:74:02:c8:06:dc:00:50:9e:
                    25:09:f8:4f:ec:f9:0e:a5:c1:b0:39:37:88:46:15:
                    c1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EF:01:30:00:7F:04:C8:0D:3F:A0:3D:2A:90:04:7E:52:BC:79:9F
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38302e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:00:31:f2:12:1c:01:b3:b2:bd:6e:de:0b:14:69:1f:7f:10:
         ba:c5:7d:e4:61:16:86:ac:df:37:ac:d1:25:18:70:04:da:c6:
         f1:be:4f:65:31:77:d3:2e:81:be:93:e7:a9:8f:d5:13:55:f8:
         64:dd:78:0c:d8:3b:84:6a:d2:f6:75:b1:14:f6:75:9a:67:b1:
         35:a4:ba:86:44:ce:5b:e0:63:c9:a3:4b:f3:aa:88:fd:ed:31:
         d7:13:30:02:46:4d:2c:e1:d6:b9:bf:81:98:63:f4:1e:65:d7:
         80:d7:0e:99:3c:23:5b:5f:99:13:1f:9b:b6:29:ea:44:52:1c:
         26:e3:4b:fb:c2:08:76:b3:29:2f:6a:8e:84:ae:29:ce:27:26:
         a3:bc:cf:cb:b2:55:4f:91:a7:55:cf:7f:70:81:8e:be:34:64:
         e8:a3:8f:ce:07:c1:7e:d7:80:46:5d:4d:9e:82:17:92:b6:64:
         4e:18:3f:5b:a6:c2:ca:9d:62:9a:ae:9a:43:d8:05:71:27:03:
         2a:f7:41:ea:60:a2:00:f6:9b:44:eb:aa:d6:bf:ab:c4:35:06:
         bd:99:8f:13:2a:4b:e9:3a:5b:c0:f6:89:57:c0:25:59:c3:ba:
         52:0a:cb:6e:75:23:b7:77:55:98:96:e4:26:f7:bb:f1:c7:e6:
         22:06:54:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:36:51 2025 by rpki-client