Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32322d3232203d3e20323632333532.roa
File:                     3137372e3132362e38302e302f32322d3232203d3e20323632333532.roa (raw, json)
Hash identifier:          DUgnp6uIWV3gK2HJ+6bvU8ako+Ay6ck+qWrHnwPDCA0=
Subject key identifier:   DB:1D:DF:FD:7F:1F:2A:3E:74:C6:D2:63:0D:A2:85:0B:99:87:CE:F0
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       4897AED6F13E846131B5DF00A6744528B9822629
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32322d3232203d3e20323632333532.roa
Signing time:             Thu 06 Mar 2025 15:41:20 +0000
ROA not before:           Thu 06 Mar 2025 15:36:20 +0000
ROA not after:            Thu 05 Mar 2026 15:41:20 +0000
asID:                     262352
IP address blocks:        177.126.80.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:97:ae:d6:f1:3e:84:61:31:b5:df:00:a6:74:45:28:b9:82:26:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Mar  6 15:36:20 2025 GMT
            Not After : Mar  5 15:41:20 2026 GMT
        Subject: CN=DB1DDFFD7F1F2A3E74C6D2630DA2850B9987CEF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:3c:3e:b2:5b:a1:b7:c2:62:4f:7e:7b:9f:
                    04:04:5a:01:bc:c7:83:0f:14:d8:c2:58:28:98:fd:
                    d1:e4:14:3d:77:61:92:58:f0:44:13:09:99:76:eb:
                    7f:09:0b:cc:a1:61:37:2d:f9:cd:31:68:6b:ba:21:
                    23:12:23:fc:2b:5a:3a:5d:74:b6:6f:50:ca:78:89:
                    d2:ed:13:13:c0:6e:10:f9:b5:86:d4:67:07:e5:76:
                    16:e7:57:41:31:39:f6:40:46:cd:83:34:83:fe:d0:
                    1f:7b:fc:a7:84:fc:eb:9e:0a:bd:5e:35:b5:b5:f4:
                    63:0b:b7:85:de:fc:0b:5a:c3:4b:20:26:84:65:90:
                    e6:90:76:d8:33:ed:f6:33:4c:88:15:ee:47:81:05:
                    18:6c:15:af:09:99:17:7b:b6:f5:44:1e:87:13:1e:
                    52:0d:32:63:33:46:63:6f:17:6b:14:2f:bb:2c:c8:
                    56:4a:87:a3:49:b3:d1:b4:35:31:ad:a8:4b:96:94:
                    1e:34:d9:8f:fd:d4:14:de:b1:9c:90:7b:9d:71:0f:
                    52:4d:75:cc:98:f9:2a:16:2e:d8:0d:58:3d:72:49:
                    2b:f9:56:cd:f6:3a:2a:86:5e:f4:ab:21:fe:a0:fc:
                    9d:2f:d7:14:70:ae:86:b1:85:28:2b:49:55:3a:76:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1D:DF:FD:7F:1F:2A:3E:74:C6:D2:63:0D:A2:85:0B:99:87:CE:F0
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38302e302f32322d3232203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:3d:93:25:35:93:92:23:23:5b:b8:f3:21:45:84:f9:c3:1f:
         f7:93:a3:d7:19:06:cf:ce:5f:63:42:f4:dc:59:0d:12:f5:6a:
         b1:b9:0a:db:79:92:70:94:bc:69:11:93:a9:a2:d4:fa:24:67:
         5d:46:1c:75:31:bc:5c:d5:80:96:f2:03:e5:51:68:25:72:e3:
         ac:e2:61:ba:1a:11:d0:87:2d:97:0f:65:f5:fa:6a:f7:57:5e:
         8a:46:cd:ff:00:4e:68:38:97:e5:6a:20:46:8e:fe:4c:73:a0:
         bc:67:50:d1:e3:eb:1b:cd:1d:23:5f:8c:e6:db:1b:ce:0d:bd:
         74:de:f7:99:4a:00:c3:64:89:dd:ce:db:2c:b0:39:c9:cf:13:
         3a:d2:76:85:ee:b6:8e:23:31:23:da:a9:19:ba:99:94:40:0b:
         8d:f4:6e:48:2a:85:4a:56:b5:36:11:1f:37:d4:ca:82:64:01:
         ab:19:de:62:2e:1d:bc:c5:d9:f9:a7:29:95:1e:17:16:a1:dc:
         0e:93:b8:0a:f3:ea:b1:63:de:85:de:7e:7d:78:34:18:65:4b:
         65:8c:97:1a:a8:e3:3e:50:d0:40:38:f3:97:e1:13:c6:61:c5:
         1e:4d:67:e2:64:fb:3f:c5:38:80:aa:82:28:40:ba:cd:1b:62:
         07:26:6c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:35 2025 by rpki-client