Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231322e302f32342d3234203d3e203532383438.roa
File:                     3137372e38352e3231322e302f32342d3234203d3e203532383438.roa (raw, json)
Hash identifier:          YrtDDdgdDhc5SA6HhVGR9ZJxHKBa4x42R2ilOtPIlQ8=
Subject key identifier:   67:8A:67:2D:0D:DC:CF:C6:89:72:A2:61:CE:76:4F:82:F8:99:59:43
Certificate issuer:       /CN=F805B6A0C0363F0117691C0481A12D30CEF456BF
Certificate serial:       6A3EBA0328E5D8AED015D9B5C819D5787E56DDAF
Authority key identifier: F8:05:B6:A0:C0:36:3F:01:17:69:1C:04:81:A1:2D:30:CE:F4:56:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805B6A0C0363F0117691C0481A12D30CEF456BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231322e302f32342d3234203d3e203532383438.roa
Signing time:             Wed 18 Dec 2024 17:33:05 +0000
ROA not before:           Wed 18 Dec 2024 17:28:05 +0000
ROA not after:            Wed 17 Dec 2025 17:33:05 +0000
asID:                     52848
IP address blocks:        177.85.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3e:ba:03:28:e5:d8:ae:d0:15:d9:b5:c8:19:d5:78:7e:56:dd:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F805B6A0C0363F0117691C0481A12D30CEF456BF
        Validity
            Not Before: Dec 18 17:28:05 2024 GMT
            Not After : Dec 17 17:33:05 2025 GMT
        Subject: CN=678A672D0DDCCFC68972A261CE764F82F8995943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:f3:8f:25:fa:ba:ea:9c:cf:ec:c0:48:a8:
                    06:ae:75:07:e2:66:71:20:14:4d:bf:9e:76:a7:15:
                    9b:45:0c:e6:b1:9a:17:6c:f3:ef:59:37:ac:28:0b:
                    69:fd:c0:c3:4f:e7:ed:81:6a:aa:fd:88:a9:f7:5b:
                    ef:37:34:98:1d:c2:60:61:8a:f8:df:88:fb:f4:92:
                    26:69:1a:8a:66:78:f7:cf:0d:38:82:b7:ee:8f:f3:
                    56:00:bd:24:55:df:9a:af:d8:35:60:af:cd:05:02:
                    b2:fd:76:95:4e:55:dc:e5:08:92:3e:87:2f:7c:8e:
                    e4:f2:f9:51:07:f2:82:68:c0:0e:fa:44:d3:92:4f:
                    b6:a1:3b:e8:82:79:5e:44:89:f9:75:46:53:6c:64:
                    b7:cf:bd:d3:be:22:09:fa:a4:a4:00:54:6e:20:2f:
                    75:bf:dc:a3:3e:63:2b:63:a3:a0:a8:32:c5:cc:b5:
                    f1:57:b3:2a:6c:26:12:85:eb:c9:f1:ac:08:b2:3c:
                    11:d5:f5:69:91:ef:55:48:80:b3:22:60:85:7e:d7:
                    a3:c7:00:a5:86:6b:25:33:c6:5e:c0:0f:0c:f5:bf:
                    f5:99:9e:de:8a:b9:58:c7:3e:1d:74:61:a3:f1:ca:
                    9e:1d:45:c5:7a:fb:88:dc:71:d3:ba:f5:6d:69:1b:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8A:67:2D:0D:DC:CF:C6:89:72:A2:61:CE:76:4F:82:F8:99:59:43
            X509v3 Authority Key Identifier:
                keyid:F8:05:B6:A0:C0:36:3F:01:17:69:1C:04:81:A1:2D:30:CE:F4:56:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/F805B6A0C0363F0117691C0481A12D30CEF456BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805B6A0C0363F0117691C0481A12D30CEF456BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/3137372e38352e3231322e302f32342d3234203d3e203532383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:d5:20:3b:05:ff:8f:28:d9:81:8b:1e:bb:bc:d1:69:c2:ce:
         a5:14:85:0f:ac:22:1f:1a:73:f3:a7:e1:66:79:5f:eb:3c:e4:
         39:f6:c2:dc:50:9b:dc:c8:7e:9f:15:f1:66:86:b0:09:fe:75:
         08:58:e6:d8:48:c3:6f:ca:b1:da:e3:5e:e7:5b:4f:78:7f:07:
         dd:71:61:98:11:4c:2f:c8:e4:8f:bf:99:a3:9d:6e:50:b2:46:
         be:36:9f:d8:4d:5e:b5:5f:8d:dc:5d:02:11:7e:ba:ff:ec:cd:
         04:25:4c:df:46:41:e5:34:ba:56:6f:e7:4c:37:83:c9:e4:2a:
         89:9a:7e:81:b8:75:b3:91:59:b4:10:d6:31:e5:f7:23:d2:84:
         ff:8b:60:3e:6e:7e:47:49:a9:44:30:c3:7a:bd:31:8e:3b:c1:
         f8:72:45:8a:95:2a:86:b0:d5:69:c9:ce:30:78:e9:3f:12:1e:
         3f:17:f7:73:9f:8a:89:31:da:a6:54:61:a3:12:37:1b:3b:1f:
         5d:6e:e1:aa:9b:7f:41:e7:60:e7:9b:d4:f9:d2:48:dc:15:68:
         81:6e:06:e6:4d:a2:e0:b9:75:00:e4:b5:37:da:7c:fc:49:cb:
         74:af:28:e8:e5:b2:c3:4a:1b:71:a5:c1:ee:68:7e:a0:8d:77:
         1d:7f:f8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:14 2025 by rpki-client