Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38392e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38392e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          ZlpPdS9lbrzNKaYvPDymAgudfqS3GJTggD7SyVbeIwA=
Subject key identifier:   B6:EB:AE:DD:BA:E2:61:A6:9D:3C:38:BD:F1:3C:13:13:D6:E7:C6:3D
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       2380D76A6036BDC8914DF9D3CA0F38AC795BD61F
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38392e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:05 +0000
ROA not before:           Wed 05 Mar 2025 23:55:05 +0000
ROA not after:            Thu 05 Mar 2026 00:00:05 +0000
asID:                     52653
IP address blocks:        177.221.89.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:80:d7:6a:60:36:bd:c8:91:4d:f9:d3:ca:0f:38:ac:79:5b:d6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:05 2025 GMT
            Not After : Mar  5 00:00:05 2026 GMT
        Subject: CN=B6EBAEDDBAE261A69D3C38BDF13C1313D6E7C63D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:1f:26:2a:d9:22:ea:91:6c:a4:68:ef:8f:
                    8b:54:ad:3d:2c:dc:12:d1:66:38:dc:8e:96:aa:58:
                    51:7b:65:b6:0f:fc:ae:a4:70:59:ef:47:2e:34:d8:
                    cd:dc:57:b6:9a:ee:b9:9c:17:76:5e:99:f8:ce:ca:
                    69:b6:98:63:fe:5b:37:4d:40:a3:cf:dd:83:3b:25:
                    90:7e:fd:f6:83:87:52:bc:12:a1:c9:c7:1c:2f:10:
                    70:2e:40:b9:36:2c:f4:a4:88:da:d8:8f:8c:82:b3:
                    e1:1d:1f:cd:0e:4b:d7:a9:4b:a3:c9:cc:ef:63:3e:
                    0e:04:d3:94:7e:c7:f0:bc:d4:0a:68:e8:b8:4a:be:
                    a0:21:bf:d6:b3:d8:82:33:9e:bb:23:7a:c2:52:f8:
                    ac:3e:0b:8d:98:24:1c:86:6d:2a:1a:b7:3a:67:c5:
                    da:00:b9:9b:64:ab:32:d2:6c:d4:3e:1d:ae:11:33:
                    50:1d:ef:94:24:53:62:9c:86:ee:35:3e:ff:e8:64:
                    9e:37:a6:9d:bc:f6:63:4f:56:92:5d:02:3b:12:42:
                    0c:dc:13:bd:cc:af:ad:38:80:9e:f6:ba:8f:75:b3:
                    d2:e8:35:58:d5:73:a6:af:46:37:48:4d:34:34:7c:
                    f2:d5:aa:47:10:53:2e:61:53:24:2c:95:f3:5f:e1:
                    19:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EB:AE:DD:BA:E2:61:A6:9D:3C:38:BD:F1:3C:13:13:D6:E7:C6:3D
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38392e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:d2:af:96:be:dc:dc:5e:0d:cf:d3:f6:08:7d:3d:1a:b6:07:
         c8:8b:1f:d0:fd:b7:04:8f:fa:b2:5c:c2:ff:72:e2:78:9f:c5:
         76:d5:93:97:5b:7c:d9:ca:3a:f1:2e:a7:47:51:fe:e6:5b:6d:
         ed:39:74:86:a2:33:01:20:3f:75:c3:5e:3e:ae:5b:92:b5:e1:
         da:1c:84:09:50:40:79:9c:b9:9b:82:e6:58:dc:2f:f7:e5:40:
         33:f2:71:e5:10:09:0c:ff:b7:fe:d4:40:d8:10:1d:b6:22:e8:
         29:45:ae:bd:a5:19:c7:39:bc:62:9a:32:70:a0:93:46:fc:72:
         d1:7d:34:c8:72:32:2a:2e:87:be:c7:bd:d5:8e:73:e8:b9:2a:
         e2:47:e8:3a:74:62:c3:27:a9:7b:f9:d1:0d:d2:04:19:eb:3d:
         3e:fb:86:2f:55:a9:73:06:12:fe:59:39:23:a3:98:01:ca:78:
         35:9c:3c:32:31:5f:c2:b4:79:05:eb:35:25:cd:bc:c0:58:3d:
         90:05:fa:5a:e6:82:ed:12:ae:94:0b:cf:0b:dd:dd:fd:fd:2f:
         a6:5b:ba:de:d1:f4:ff:29:cc:5a:b7:c7:60:79:ee:e1:f5:37:
         86:eb:39:48:64:24:0e:70:1a:30:57:f9:f6:0a:43:fc:fd:b5:
         9f:5e:75:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:13:17 2025 by rpki-client