Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3137372e33392e3136302e302f32312d3234203d3e203238353834.roa
File:                     3137372e33392e3136302e302f32312d3234203d3e203238353834.roa (raw, json)
Hash identifier:          LDKc7wJ74lMxuqZTJQfHbF8m4/DiveRwtcIQAQKk6bk=
Subject key identifier:   66:4C:98:20:30:5B:36:68:0C:C4:E1:A1:88:FD:13:03:2D:11:A2:77
Certificate issuer:       /CN=31A0D65979DD9912F3B220BB4A873ED35729257C
Certificate serial:       5A26557519281CE7AE4DFD61D92EF487FC59729C
Authority key identifier: 31:A0:D6:59:79:DD:99:12:F3:B2:20:BB:4A:87:3E:D3:57:29:25:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3137372e33392e3136302e302f32312d3234203d3e203238353834.roa
Signing time:             Thu 06 Mar 2025 19:19:22 +0000
ROA not before:           Thu 06 Mar 2025 19:14:22 +0000
ROA not after:            Thu 05 Mar 2026 19:19:22 +0000
asID:                     28584
IP address blocks:        177.39.160.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:26:55:75:19:28:1c:e7:ae:4d:fd:61:d9:2e:f4:87:fc:59:72:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31A0D65979DD9912F3B220BB4A873ED35729257C
        Validity
            Not Before: Mar  6 19:14:22 2025 GMT
            Not After : Mar  5 19:19:22 2026 GMT
        Subject: CN=664C9820305B36680CC4E1A188FD13032D11A277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:21:fd:35:2f:41:f8:01:ff:77:93:99:4c:
                    c2:a8:9a:b5:b4:18:4a:df:d1:60:76:f1:4b:8e:d4:
                    96:91:78:ec:e8:24:a8:e3:b8:18:7a:d4:05:f2:bf:
                    ed:5c:a9:91:e1:f9:38:7a:c4:82:35:5e:27:65:e6:
                    aa:33:d8:6c:7d:e2:b0:48:e1:19:bf:d1:3b:33:da:
                    61:d0:a6:99:28:5a:7e:75:3b:ae:41:7b:37:00:96:
                    ce:d9:80:b0:ab:a4:dd:ea:7c:21:3d:73:b2:1c:b3:
                    43:12:82:36:fc:85:66:29:57:8d:8a:9e:a6:d3:78:
                    b3:be:21:b0:10:9d:21:cf:97:62:65:7a:d9:b9:85:
                    f2:ec:e9:29:c5:78:02:1f:a9:15:a1:49:c4:c0:77:
                    8b:d4:6d:55:d0:2e:95:2e:7f:9f:b8:8e:2a:c1:bc:
                    3f:a6:a0:73:c9:fb:5c:f6:3e:60:0c:52:e1:8e:72:
                    96:69:d7:8c:7a:4a:11:8f:43:71:59:16:f5:e3:dd:
                    13:c9:09:85:90:26:d0:c7:ed:19:9e:47:68:40:b9:
                    ef:ba:cf:23:3b:05:b7:c5:8d:80:fa:ba:51:21:9c:
                    69:48:78:00:71:fb:7e:67:33:67:09:7c:99:db:be:
                    3a:e5:10:f0:a9:6c:0b:cc:0e:ba:27:f8:25:b9:cf:
                    65:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4C:98:20:30:5B:36:68:0C:C4:E1:A1:88:FD:13:03:2D:11:A2:77
            X509v3 Authority Key Identifier:
                keyid:31:A0:D6:59:79:DD:99:12:F3:B2:20:BB:4A:87:3E:D3:57:29:25:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/31A0D65979DD9912F3B220BB4A873ED35729257C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3137372e33392e3136302e302f32312d3234203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:08:be:22:68:c4:4b:48:77:05:2b:2c:03:2a:d6:80:8f:31:
         6b:ce:78:ec:3f:a4:b5:60:3b:3c:e4:d4:15:c3:2b:fc:a7:b9:
         e4:b3:9f:2f:6d:62:7d:ff:d2:7d:74:61:56:12:83:71:92:47:
         bb:83:47:c9:73:ee:a4:21:91:4e:3e:04:51:2b:07:42:1a:d9:
         dd:45:36:ff:ad:cf:aa:d5:3d:65:0e:a5:1b:35:62:e2:d5:a6:
         17:21:3f:59:65:b4:10:99:65:ee:d8:a6:6c:69:53:f9:c4:0a:
         db:f9:5c:00:9a:6f:f8:1e:f8:d5:3d:ee:ff:59:ba:32:b0:68:
         ec:cf:01:71:24:eb:c3:f6:df:b1:ae:4e:6c:d8:b2:8d:fe:04:
         11:f9:f6:5e:3c:11:7a:69:d6:8a:e1:c3:20:74:d7:56:2b:78:
         ee:89:04:31:41:ca:dc:ec:3a:18:fd:44:e5:f7:9a:3a:af:81:
         b1:39:3f:b5:ae:79:31:a9:fd:cc:e3:e7:ca:e1:fe:94:3a:0f:
         24:c1:8e:bb:c1:ff:14:6d:79:b6:4f:9f:82:a1:b4:a8:c8:83:
         99:fd:b1:b0:23:b5:ac:53:eb:23:22:9c:57:0c:36:45:57:f3:
         fb:77:4e:4c:2a:e3:0d:f8:3c:da:63:43:76:f1:c8:d2:18:c8:
         d4:55:af:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:29:43 2025 by rpki-client