Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138362e302f32332d3233203d3e203532373538.roa
File:                     3137372e33382e3138362e302f32332d3233203d3e203532373538.roa (raw, json)
Hash identifier:          EqcMaJa8DaUmRHYaQfsUeCbzLIm/7yO+sMi1Ma35eJs=
Subject key identifier:   88:EF:96:18:3C:A1:BE:D6:A7:1A:CF:C2:F5:82:DE:41:EA:3A:1E:05
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       14FB9E5F769A30449F959629CD78FC6FA689DE28
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138362e302f32332d3233203d3e203532373538.roa
Signing time:             Fri 27 Dec 2024 13:13:42 +0000
ROA not before:           Fri 27 Dec 2024 13:08:42 +0000
ROA not after:            Fri 26 Dec 2025 13:13:42 +0000
asID:                     52758
IP address blocks:        177.38.186.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fb:9e:5f:76:9a:30:44:9f:95:96:29:cd:78:fc:6f:a6:89:de:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Dec 27 13:08:42 2024 GMT
            Not After : Dec 26 13:13:42 2025 GMT
        Subject: CN=88EF96183CA1BED6A71ACFC2F582DE41EA3A1E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:45:3a:ab:b2:3a:ed:b1:0f:be:9a:a6:75:1b:
                    ab:8d:f4:bb:af:a3:c4:9e:0a:65:0c:02:c6:c0:c2:
                    27:44:ae:54:ef:af:74:bf:f7:a3:ad:94:58:d2:30:
                    52:d7:0d:a9:63:be:79:fe:39:e8:04:ad:3b:af:f5:
                    72:0a:ea:9b:87:8d:c0:c9:d3:7e:4c:ae:2f:db:d5:
                    bd:30:91:eb:17:86:de:f9:98:3d:53:38:56:55:0d:
                    4d:14:40:14:2a:19:d8:a6:aa:34:e1:9b:83:f9:88:
                    1e:47:e4:b6:57:63:85:74:b1:92:a7:40:4e:a2:17:
                    9f:9e:d4:c4:28:f4:cf:8d:db:83:0e:2d:1b:7c:7b:
                    36:d9:de:5b:11:40:45:35:b1:f0:62:cd:3e:55:71:
                    0e:1c:1b:b4:6a:82:06:7d:c7:2d:a7:68:27:f3:ff:
                    7d:99:b1:89:67:5e:96:68:fd:1a:7b:ab:12:5e:07:
                    9a:8e:9e:5c:c9:a7:25:82:cd:ed:4d:e4:ed:d9:34:
                    7f:2b:b2:90:b9:b2:1b:20:ff:b8:d9:e7:74:15:b7:
                    6d:09:89:46:85:ee:e6:8e:3c:a2:63:b5:dd:62:f9:
                    2b:dc:20:22:b2:8e:ff:4c:31:9c:b0:9d:09:90:47:
                    d3:e6:47:75:52:d8:dc:0f:e4:43:a1:f0:c6:22:cc:
                    5c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EF:96:18:3C:A1:BE:D6:A7:1A:CF:C2:F5:82:DE:41:EA:3A:1E:05
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138362e302f32332d3233203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:e6:eb:20:9e:0f:7f:5b:cf:e4:c3:7c:cd:67:c6:e3:23:c9:
         b6:c1:0d:2e:35:7d:b0:b2:43:ce:b9:e9:1d:b9:a9:c9:4d:bc:
         0d:8c:e8:1e:db:4a:1b:ad:b5:eb:12:af:ac:2f:ba:e2:f3:e5:
         0b:49:6d:5b:a3:7d:65:a8:15:03:ea:76:5e:56:12:06:45:7f:
         f1:29:dd:45:77:7a:ca:94:09:4e:40:7c:f7:47:33:29:cb:40:
         47:42:ff:f8:7b:f6:fb:c8:af:35:bf:a9:3e:e4:91:1f:ee:75:
         4d:3d:c5:45:af:6e:9d:3e:81:d3:33:56:bf:36:99:5d:f7:0d:
         8f:22:1f:02:32:0b:8c:3e:e6:91:53:b2:9f:e5:b1:9e:a1:95:
         97:2b:11:e1:b3:ed:b7:fe:69:20:4a:2c:e3:02:15:96:61:64:
         f5:1c:ca:4c:95:2c:33:85:33:8a:34:a5:b2:fa:7b:2e:e3:fe:
         10:7f:09:26:89:64:fc:84:22:50:8b:d1:7e:e6:92:55:f9:ae:
         b0:2c:54:9f:5b:51:29:4b:fc:00:79:92:1c:e8:f5:78:c3:49:
         fe:2c:6f:4c:bb:7e:16:84:a3:3a:55:09:4d:d3:07:ea:4e:f4:
         dc:8d:84:32:ba:c6:18:a5:c8:a6:cf:89:94:cb:f4:f3:a5:f4:
         a7:a7:d2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:58:34 2025 by rpki-client