Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32302d3230203d3e20323632333532.roa
File:                     3137372e3132362e38302e302f32302d3230203d3e20323632333532.roa (raw, json)
Hash identifier:          zVTPv1IZeo/yZcKXSiAtaaUM2o/rCtCn1/urK28PW50=
Subject key identifier:   6C:CC:35:88:6E:FC:C2:21:73:55:D8:88:F3:98:84:D7:1F:A9:E2:75
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       68C28F2E4922D38F6978A4DCD3311947749EDE1C
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32302d3230203d3e20323632333532.roa
Signing time:             Thu 06 Mar 2025 15:41:21 +0000
ROA not before:           Thu 06 Mar 2025 15:36:21 +0000
ROA not after:            Thu 05 Mar 2026 15:41:21 +0000
asID:                     262352
IP address blocks:        177.126.80.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c2:8f:2e:49:22:d3:8f:69:78:a4:dc:d3:31:19:47:74:9e:de:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Mar  6 15:36:21 2025 GMT
            Not After : Mar  5 15:41:21 2026 GMT
        Subject: CN=6CCC35886EFCC2217355D888F39884D71FA9E275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:46:f0:a7:43:e0:6d:8b:f6:5f:28:5c:27:48:
                    97:34:be:c5:9b:00:60:78:5f:4a:f3:61:39:d5:50:
                    24:89:56:f4:ed:21:fb:c9:fc:a9:67:75:99:dc:4d:
                    99:8a:f4:f4:7e:da:ad:d1:32:14:28:10:9f:20:9d:
                    84:2f:ad:0a:e1:b6:2f:d4:a1:47:57:45:de:24:07:
                    9e:8f:58:41:47:4e:57:3a:cd:8e:a3:32:7e:34:cb:
                    8f:16:65:2d:6a:6b:4e:39:d4:a5:8d:15:97:82:34:
                    42:5a:d5:e7:bc:32:0a:22:00:ca:e6:b6:ee:6d:80:
                    f4:9f:26:7a:dd:9c:46:31:f2:69:83:fc:8e:e1:5d:
                    27:5d:02:93:04:2b:3d:3d:6a:17:54:58:c2:9e:71:
                    9f:a8:40:f4:a3:7d:38:f7:09:9e:d5:72:23:4b:cd:
                    f1:5f:f9:51:07:22:46:ad:30:b5:b9:a3:6a:89:14:
                    6b:25:51:b9:15:11:9f:b6:c3:f9:97:a7:c2:48:7f:
                    60:7f:63:8d:64:80:9d:4f:d4:5e:97:96:c7:4c:52:
                    a8:bd:b7:56:b7:0f:47:04:11:c2:99:09:1c:46:ab:
                    43:4c:9c:2b:40:0f:01:cc:f0:8b:2d:c0:53:19:b2:
                    f9:6f:a7:48:68:3f:3f:fc:2a:df:76:ad:32:cd:c4:
                    4e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CC:35:88:6E:FC:C2:21:73:55:D8:88:F3:98:84:D7:1F:A9:E2:75
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32302d3230203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:c3:ef:8b:98:9e:c1:74:df:da:bc:d3:67:d1:f9:b3:c3:b4:
         65:17:eb:0d:42:08:59:ad:b1:57:f7:bc:03:dc:5c:5b:01:ea:
         37:e4:92:e3:c7:7a:41:8d:43:1e:4b:d1:3f:36:6e:bb:01:2f:
         e5:e4:dc:58:8a:20:d5:e1:84:dc:ed:59:a3:1a:48:27:20:d2:
         96:40:a4:22:56:a0:54:4c:39:6a:73:8a:3d:65:9a:f0:34:06:
         b1:4d:fc:9a:c3:7c:27:18:63:70:7d:29:ca:ef:60:e5:51:d7:
         43:2d:d1:99:9c:ca:df:41:15:e5:ab:0c:4e:b4:16:c6:13:6c:
         9c:86:4f:4e:de:ed:1c:17:88:6a:0e:10:6d:37:35:27:ae:64:
         e9:9d:40:52:7f:85:28:6f:9c:61:1c:7a:9c:8d:01:20:d6:c0:
         7d:fd:e0:5f:40:29:be:7c:1a:b1:bb:06:be:d7:a3:2f:79:5d:
         f6:5f:32:9b:1b:c5:33:7b:7e:e4:89:e4:2c:4b:fe:dd:76:0f:
         8d:2b:62:20:5e:3c:2d:2e:06:cc:1d:0f:25:d1:b7:24:e3:25:
         f3:35:1f:f8:e0:fb:bd:02:ad:66:2f:e6:89:8a:35:18:b3:dc:
         c4:45:da:b1:20:12:48:5b:83:c2:77:93:d3:b7:e5:12:85:74:
         7b:30:67:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:35:43 2025 by rpki-client