Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e38372e3134342e302f32312d3231203d3e203238323730.roa
File:                     3137372e38372e3134342e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier:          hacNn/+vmJABIYbvCpMOyZAo6U9JGKXNaobiigF7IQQ=
Subject key identifier:   43:BD:25:A3:E0:67:AB:90:B2:31:E6:2B:EE:63:C0:F2:0F:20:B7:D1
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       0EE38C11E365C54433F1A63673476FFBE6E67695
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e38372e3134342e302f32312d3231203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:49:52 +0000
ROA not before:           Mon 14 Oct 2024 01:44:52 +0000
ROA not after:            Mon 13 Oct 2025 01:49:52 +0000
asID:                     28270
IP address blocks:        177.87.144.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e3:8c:11:e3:65:c5:44:33:f1:a6:36:73:47:6f:fb:e6:e6:76:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:52 2024 GMT
            Not After : Oct 13 01:49:52 2025 GMT
        Subject: CN=43BD25A3E067AB90B231E62BEE63C0F20F20B7D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:fe:79:0f:c1:48:08:cc:73:77:55:9a:a7:
                    88:08:1e:ce:83:f2:6f:14:f8:34:90:d4:ea:63:c1:
                    8d:37:6b:cf:4f:97:69:07:fa:0d:7f:0a:81:2c:c8:
                    a2:8c:88:37:c6:3e:60:59:fa:3f:30:72:2a:66:5b:
                    f5:28:ee:8f:2f:21:05:38:3f:f4:d3:1e:fe:e6:4e:
                    9d:6d:e2:09:5f:35:66:b5:33:b4:da:2f:8d:17:83:
                    e0:b7:2b:47:3f:f1:7e:dc:f0:57:e2:b8:82:3f:f1:
                    a7:63:9c:5a:c0:fd:ab:18:4f:fa:8c:22:e0:09:5a:
                    c0:6b:ae:2e:0b:07:8c:62:68:0a:97:2e:74:bd:bb:
                    d4:a1:34:ab:b4:c8:46:50:b7:38:28:93:c3:61:8c:
                    d3:ac:2d:cb:6e:c7:ee:b2:fa:b8:41:fc:86:75:ea:
                    61:e2:f8:c6:00:59:c5:a3:4c:f6:4f:30:70:26:1e:
                    4f:73:ad:52:70:10:dc:d1:37:ea:3e:fd:9a:a9:20:
                    14:59:77:52:2f:61:98:89:ef:91:d4:5e:b6:30:f0:
                    62:97:7e:8b:f1:15:84:6c:9f:58:06:78:ab:17:7c:
                    db:74:3f:12:66:e3:f1:ef:f0:56:0f:eb:d7:be:d3:
                    a9:bc:da:97:4f:4d:f9:cd:a8:da:c7:6f:7f:ae:66:
                    7b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BD:25:A3:E0:67:AB:90:B2:31:E6:2B:EE:63:C0:F2:0F:20:B7:D1
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e38372e3134342e302f32312d3231203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:a2:c3:86:ca:1d:9a:2b:47:9b:47:51:a1:a1:18:5b:fa:ad:
         95:28:47:c7:06:a5:60:8c:c2:17:24:d3:f1:36:f7:c4:52:7b:
         8a:65:62:ca:06:7f:fa:3e:89:2c:53:d3:01:50:8e:3b:9a:86:
         ba:f8:5e:11:9e:0f:ec:49:de:5e:5e:85:55:47:1f:71:54:9c:
         ad:a2:f7:32:d2:1e:c0:3e:fe:ff:38:84:a5:1f:4e:a0:a5:fd:
         9e:8f:06:b0:01:2c:31:68:4c:44:72:99:8e:96:db:8a:b3:6b:
         df:00:02:eb:9e:07:57:a4:9d:f0:53:92:c2:42:b0:a7:88:a5:
         91:50:91:0a:c3:36:43:c7:f5:9b:7a:d0:79:9c:9d:f2:d1:b0:
         4a:ef:45:52:6b:10:13:c2:af:2a:a3:0a:03:8f:3c:aa:1f:75:
         2b:36:d4:55:43:07:fc:fd:49:67:88:a0:ce:b8:c1:f7:14:8f:
         78:4d:72:6e:a3:3c:8a:42:4a:ef:1a:1a:a7:3c:f3:16:d4:b9:
         a0:96:85:23:fe:bd:da:fb:94:5b:79:a2:1b:5e:3a:aa:1b:cb:
         8d:97:68:8c:5b:59:43:10:2d:5a:8b:a1:fa:7e:09:ea:5b:04:
         65:f5:e7:23:a9:d1:ff:b4:8c:77:74:10:93:ee:b0:47:be:a8:
         5c:27:3f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:06:21 2025 by rpki-client