Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39322e302f32332d3233203d3e20323632333532.roa
File:                     3137372e3132362e39322e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          SrTc4zIFDXWRrqgu/HqfAskygUcyY7MNLpn+ohUmANk=
Subject key identifier:   78:F0:F9:64:10:59:0A:42:FE:D1:68:C1:0A:EE:19:0D:E4:F3:6E:ED
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       453CAEC306DCFBA0B3A55FF8B4861A91CD645B42
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39322e302f32332d3233203d3e20323632333532.roa
Signing time:             Thu 06 Mar 2025 15:41:21 +0000
ROA not before:           Thu 06 Mar 2025 15:36:21 +0000
ROA not after:            Thu 05 Mar 2026 15:41:21 +0000
asID:                     262352
IP address blocks:        177.126.92.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3c:ae:c3:06:dc:fb:a0:b3:a5:5f:f8:b4:86:1a:91:cd:64:5b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Mar  6 15:36:21 2025 GMT
            Not After : Mar  5 15:41:21 2026 GMT
        Subject: CN=78F0F96410590A42FED168C10AEE190DE4F36EED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:37:51:f4:95:48:22:97:e9:c1:0c:e7:b7:
                    75:82:65:36:6f:35:40:71:23:77:2f:c2:1f:d7:38:
                    27:2e:60:b8:6a:82:09:c2:bb:5e:f7:54:76:bc:19:
                    b7:d1:ed:3c:73:f4:8a:ea:3f:bd:c2:d9:8e:37:d7:
                    79:10:4f:1b:57:45:4f:e7:8b:85:29:0b:5a:4c:73:
                    22:c2:21:6a:5f:9c:ac:a7:65:10:ed:5a:e3:54:3c:
                    c1:ac:6f:41:78:f6:6f:a2:a4:1d:5a:f6:d6:b4:77:
                    46:d8:d1:39:ff:37:51:af:1f:17:f9:c2:02:0a:cd:
                    c2:c9:7a:72:d7:9d:b3:2b:86:36:ff:e5:fe:94:00:
                    c3:99:e0:ea:23:fc:21:eb:8a:8d:03:97:e1:59:a7:
                    66:79:19:08:ec:5c:d5:92:ee:3c:60:ba:23:59:30:
                    a6:22:fc:21:e5:fe:84:36:b2:63:21:d0:cf:29:9c:
                    b3:15:d9:d8:52:ae:fc:9d:c5:2d:1d:64:67:2b:2c:
                    bb:4d:16:4d:ff:d8:5f:9a:2f:50:85:43:ee:c8:30:
                    63:05:1c:43:51:ec:8a:2a:dc:c1:1d:1a:57:ff:f1:
                    2f:19:3b:0f:d3:5b:a2:5b:f6:47:9d:5d:80:bb:76:
                    86:9b:35:c8:8f:0f:25:46:ec:9d:ea:54:42:ca:4e:
                    cd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F0:F9:64:10:59:0A:42:FE:D1:68:C1:0A:EE:19:0D:E4:F3:6E:ED
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39322e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:2c:8b:84:49:c5:0b:d6:6f:1b:72:ce:50:02:9b:9a:87:6a:
         9e:f8:a8:2e:c0:e9:00:f9:e8:71:0b:1d:1b:ce:ba:14:dd:75:
         aa:4f:53:e0:ce:8a:d4:64:c7:99:42:b0:26:52:3a:8b:c8:c1:
         d1:b1:ba:3c:22:d8:75:51:7f:c8:aa:5e:6f:f7:a9:1b:d9:a7:
         39:10:d9:46:e5:50:49:a5:3e:0f:a6:7e:13:a0:35:0c:80:e0:
         de:44:47:53:d9:f1:a9:9c:fd:07:76:05:a6:2d:57:bc:3e:65:
         4b:e9:6e:aa:59:96:3e:6c:02:c6:9e:79:bc:5f:c2:ed:a2:f9:
         2e:0c:0d:ab:bd:20:a6:a5:eb:a6:c5:3d:95:18:b0:73:81:df:
         0b:df:3d:69:15:80:5d:87:b9:4a:5d:5a:0a:8d:9f:eb:ff:07:
         0a:85:80:28:d4:45:21:87:44:f5:11:2e:58:a3:f4:fa:b3:3c:
         69:e6:c8:6c:da:79:f9:fe:27:7c:eb:b1:01:61:a3:0c:48:5b:
         77:eb:f0:6f:bd:b5:28:8c:89:41:49:ad:5b:52:fa:27:02:42:
         0c:43:c8:f1:a8:c9:3a:87:c6:e8:35:03:da:8f:a0:c3:f9:af:
         69:98:e9:04:7d:9c:82:f2:1d:ac:7c:69:16:74:5f:4d:f9:b5:
         3b:ae:1b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:50 2025 by rpki-client