Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38372e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38372e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          2/1WsCxDJSDdrNh3Ea171PL/OzG4jwD98Gm91HJ2qmg=
Subject key identifier:   18:6F:E9:5B:3A:C5:E4:FA:64:11:C3:E7:9D:66:C3:90:95:50:1E:41
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       1012C0E5E84DACEE6D0C0E60AB9EACAB76066B53
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38372e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:06 +0000
ROA not before:           Wed 05 Mar 2025 23:55:06 +0000
ROA not after:            Thu 05 Mar 2026 00:00:06 +0000
asID:                     52653
IP address blocks:        177.221.87.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:12:c0:e5:e8:4d:ac:ee:6d:0c:0e:60:ab:9e:ac:ab:76:06:6b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:06 2025 GMT
            Not After : Mar  5 00:00:06 2026 GMT
        Subject: CN=186FE95B3AC5E4FA6411C3E79D66C39095501E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:28:7d:f8:13:31:b9:c6:ae:49:b9:d6:35:1f:
                    c3:53:0f:02:bf:33:0e:ff:90:fb:a1:9f:07:7d:cc:
                    97:f3:9d:09:b2:ac:18:4a:17:0d:c9:2a:6e:2f:b9:
                    a6:32:0d:e1:11:29:bc:5b:d7:f5:b7:ea:02:b8:c2:
                    39:72:fb:1a:6a:3c:9b:bc:c3:25:82:4b:f8:8e:d1:
                    c6:92:fd:f6:fc:d7:06:6a:7b:75:06:66:98:cd:47:
                    84:c2:53:2e:ac:3b:9f:17:d2:dc:60:53:9c:5b:4f:
                    78:d5:c9:2a:45:7c:ee:71:73:5a:76:73:c8:6d:a7:
                    ab:04:f6:bc:7f:f6:e4:29:5d:83:5f:79:62:6b:be:
                    8a:ea:79:ca:03:00:f4:fe:78:e2:fb:74:3d:2f:4b:
                    8b:11:7c:81:09:c9:cd:59:b9:47:86:af:45:c1:12:
                    e9:5b:f7:8e:dd:e9:74:8f:b0:d6:5f:01:b5:21:86:
                    37:1b:40:04:85:9c:25:7e:1a:bb:4b:7b:dd:0f:a9:
                    25:1e:cf:5f:9d:f6:b2:08:49:f7:cb:c8:d2:c6:24:
                    2e:c9:6b:08:2a:a6:ed:f8:b1:9f:6c:e1:96:e3:29:
                    8f:db:7a:c8:69:e3:12:d7:47:18:65:42:5a:c1:12:
                    3f:94:79:f5:ab:c9:51:bc:55:e1:0c:5c:1a:89:6e:
                    d9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6F:E9:5B:3A:C5:E4:FA:64:11:C3:E7:9D:66:C3:90:95:50:1E:41
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38372e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:3a:e3:12:43:c4:d6:19:ae:53:15:cb:60:0e:8b:7a:89:fd:
         84:0c:fd:7c:5e:7d:31:1a:07:28:3e:9c:f4:c7:15:32:14:4b:
         e0:6b:11:ed:41:06:f4:f9:43:07:de:bd:ec:b1:57:52:ad:2a:
         d4:aa:f6:c5:c1:1d:b2:99:90:a1:8d:4d:86:66:bb:e7:41:f6:
         92:9e:38:6a:78:0b:c1:82:9a:81:b8:31:45:ac:8d:0b:d8:54:
         87:84:81:7e:8c:97:64:82:95:ef:48:25:c0:4b:ca:a5:a1:b0:
         d6:21:88:f5:a0:bb:c9:2b:1b:88:5c:d4:32:29:76:38:b3:8a:
         d5:fc:7a:d9:ce:85:ec:6a:f7:6d:ae:50:3d:39:5d:c7:2f:fd:
         e6:13:25:a4:fc:f4:d5:05:e8:b2:0c:ff:69:ce:d3:79:9d:47:
         53:0b:a1:07:da:f4:c9:6b:89:cd:75:f5:40:27:bc:24:67:c6:
         bd:4f:96:e3:79:48:e9:c8:56:0b:83:79:d4:13:1b:fd:65:34:
         13:3c:54:19:df:b9:58:10:95:a7:df:11:61:c0:b3:ad:f2:11:
         cf:b9:9c:f2:f5:c4:05:73:d3:73:22:3c:9b:b2:e7:05:56:03:
         b4:ca:a6:a4:c8:c3:a7:54:48:df:4f:01:ba:9c:ed:8c:47:c2:
         b2:82:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:10:08 2025 by rpki-client