Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa
File:                     3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa (raw, json)
Hash identifier:          0nuMeX5EANupB1yBcaH0wVgZ/3zjBj40xscmfunbmj8=
Subject key identifier:   58:7E:B0:57:74:0A:32:CF:8B:90:7B:63:D5:FD:2B:2A:A8:02:F1:66
Certificate issuer:       /CN=84952BD36EF412E113A81649D3C5602505743767
Certificate serial:       1E71434D84874D1A51E402052EF4CD1E7CDF25
Authority key identifier: 84:95:2B:D3:6E:F4:12:E1:13:A8:16:49:D3:C5:60:25:05:74:37:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84952BD36EF412E113A81649D3C5602505743767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa
Signing time:             Tue 18 Mar 2025 11:23:01 +0000
ROA not before:           Tue 18 Mar 2025 11:18:01 +0000
ROA not after:            Tue 17 Mar 2026 11:23:01 +0000
asID:                     262669
IP address blocks:        177.22.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:71:43:4d:84:87:4d:1a:51:e4:02:05:2e:f4:cd:1e:7c:df:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84952BD36EF412E113A81649D3C5602505743767
        Validity
            Not Before: Mar 18 11:18:01 2025 GMT
            Not After : Mar 17 11:23:01 2026 GMT
        Subject: CN=587EB057740A32CF8B907B63D5FD2B2AA802F166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c3:3a:f8:c1:b3:15:d6:62:ce:ae:4b:3f:f3:
                    61:f3:44:2e:ce:ef:58:be:2f:6e:f9:d9:63:98:bd:
                    b6:fe:8e:f7:a0:aa:9d:54:6d:36:4c:5d:ed:2f:5c:
                    23:b5:44:e8:11:e6:56:53:5a:ef:1c:98:dd:e4:13:
                    e3:88:74:69:f0:cf:f6:44:70:fe:2d:15:7e:89:af:
                    5d:e8:20:95:f3:53:3a:64:34:4e:c5:25:b5:49:c0:
                    19:4a:42:65:17:7c:2e:7b:77:3a:96:17:b6:fe:b4:
                    43:bd:9d:7a:fa:c5:e2:32:76:1a:c6:0e:72:17:7f:
                    21:58:27:8f:b1:c3:4f:49:e4:72:63:f1:90:50:4c:
                    5e:d0:bd:0b:98:34:f6:c5:12:71:bb:32:3e:83:60:
                    4c:d1:80:2c:46:4b:f1:9b:47:52:96:51:e7:e8:f8:
                    8b:fb:b0:e8:89:1d:c8:52:02:52:34:6d:d9:63:9d:
                    df:4b:40:6c:e9:0e:3c:75:7e:fc:b7:6d:ba:95:32:
                    03:aa:eb:64:d6:90:43:ae:e1:f0:0b:10:ef:11:0b:
                    25:60:7b:6c:a2:33:65:9c:d4:87:2b:ec:bc:59:0a:
                    18:b7:a5:6b:f1:8c:6b:af:c6:53:02:0e:5e:18:fe:
                    e1:a7:43:3e:86:c0:70:e1:cc:54:8f:ff:2a:1e:6a:
                    cf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7E:B0:57:74:0A:32:CF:8B:90:7B:63:D5:FD:2B:2A:A8:02:F1:66
            X509v3 Authority Key Identifier:
                keyid:84:95:2B:D3:6E:F4:12:E1:13:A8:16:49:D3:C5:60:25:05:74:37:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/84952BD36EF412E113A81649D3C5602505743767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84952BD36EF412E113A81649D3C5602505743767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:24:96:02:5a:76:9f:49:d1:c3:90:26:f9:dc:8c:22:ff:c3:
         0e:c0:0d:77:b3:7a:92:3c:09:3c:ba:dd:1c:53:1e:39:87:67:
         76:2a:41:82:d7:b2:90:cb:eb:8f:72:b7:59:bf:88:6f:58:92:
         d9:18:b1:8e:0d:28:0b:20:ff:27:a1:0e:0f:c0:12:45:48:42:
         80:cc:f8:07:e7:27:8c:e4:0f:39:90:f1:6c:5b:af:77:66:34:
         80:97:1b:72:f3:a6:89:d1:b4:a4:df:3d:2e:6b:ae:ef:33:16:
         77:26:04:88:d5:3c:3c:75:3d:85:16:7a:4d:d5:a0:98:1f:e9:
         b1:35:3d:7c:4a:ea:50:05:c7:e6:45:14:8b:4b:4f:08:54:a2:
         5b:53:e0:23:23:7c:7d:85:db:b2:a4:c6:2a:95:07:53:9e:85:
         15:84:97:03:51:b4:b1:73:d1:07:69:15:7c:5b:de:d0:1b:87:
         65:5c:11:dc:3e:9f:bc:a2:da:58:76:43:95:6d:a8:2c:a0:06:
         71:9c:88:30:8e:26:66:c0:f8:ec:14:4f:c7:5a:8d:94:6c:7b:
         7d:e3:99:38:67:77:0a:43:d1:ee:40:33:a5:f8:d1:1c:4c:22:
         eb:03:0c:3a:c8:d9:92:52:8d:61:e6:26:41:ec:d0:58:ce:d4:
         2e:43:28:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:32:37 2025 by rpki-client