Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32302e302f32332d3233203d3e203532373036.roa
File:                     3137372e3132362e32302e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          o0CJa4IgqgbnKoEODs5Uhq34T8uoNd3GPMX7tT3JieM=
Subject key identifier:   54:19:59:57:24:56:E2:66:15:A6:69:93:7D:A4:A7:7D:C1:02:FF:D6
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       6674F78F0561643666A77DE833D2862A529BD820
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32302e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:40 +0000
ROA not before:           Thu 06 Mar 2025 02:26:40 +0000
ROA not after:            Thu 05 Mar 2026 02:31:40 +0000
asID:                     52706
IP address blocks:        177.126.20.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:74:f7:8f:05:61:64:36:66:a7:7d:e8:33:d2:86:2a:52:9b:d8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:40 2025 GMT
            Not After : Mar  5 02:31:40 2026 GMT
        Subject: CN=541959572456E26615A669937DA4A77DC102FFD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2b:a2:bc:74:e0:df:e6:91:8c:60:8f:55:84:
                    49:0e:08:a4:70:86:42:67:9a:97:6e:63:a5:7d:c1:
                    78:a5:a3:e4:cb:b4:ab:53:03:ef:09:5c:83:20:88:
                    36:d1:29:e0:5c:d3:03:76:73:1c:33:f6:01:80:be:
                    f5:03:31:63:cf:ff:4c:7f:f1:ee:f9:56:34:f9:a2:
                    56:af:5a:d8:03:e4:5a:77:2f:4c:4c:8e:ec:6c:f8:
                    d9:7f:ea:9c:0d:86:e2:9d:4a:02:44:0e:55:c2:0e:
                    59:5e:e1:d3:85:8e:9d:58:66:06:ef:79:b5:88:b1:
                    d8:cc:d5:10:9a:a2:41:56:4c:ff:10:3a:35:c8:31:
                    81:2c:72:8a:b5:97:7a:ed:c8:1a:93:45:e7:ff:dd:
                    f3:ee:5a:d9:eb:39:59:67:c3:98:cf:07:0d:48:8d:
                    35:ac:94:dc:cf:0f:78:2d:fd:8c:dd:49:4f:db:99:
                    56:c1:79:e3:97:1d:5a:e8:bd:3a:da:3c:45:72:54:
                    70:07:ea:f3:30:a5:86:3e:d0:51:09:a3:2c:e1:fc:
                    63:0e:24:f4:36:66:46:85:6e:60:b1:32:e7:6a:6e:
                    3e:8b:ad:1e:20:cc:d9:0c:b1:33:e8:ec:44:cb:aa:
                    c9:8e:3e:f1:06:c0:8f:7d:1e:02:84:c8:9e:76:d4:
                    1f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:19:59:57:24:56:E2:66:15:A6:69:93:7D:A4:A7:7D:C1:02:FF:D6
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32302e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:28:7f:34:41:b3:d8:d1:3c:10:bf:d3:ed:d0:2a:b9:59:dc:
         78:61:40:da:ce:bb:ab:f1:73:20:c2:bc:ed:d5:72:5d:b3:3e:
         46:a6:41:50:5e:e3:74:45:41:09:ed:5c:53:50:a3:b1:74:8e:
         6a:8c:ee:b5:30:13:2b:af:f3:a5:7a:10:f3:38:05:27:4c:cc:
         89:98:25:5a:6b:5e:52:78:33:c2:3e:5c:09:cf:86:1b:1f:2e:
         96:84:e8:4c:a7:ff:85:f5:52:f5:dc:93:fd:6a:57:51:7d:4f:
         a7:95:c7:fb:83:7a:12:38:e2:3a:0c:01:a8:97:89:76:8f:ad:
         b4:85:b3:55:3c:d0:06:61:0a:33:32:1f:4b:f0:4a:2b:61:a4:
         b7:b5:5a:8e:f3:19:df:a1:1e:2e:43:78:18:db:c5:6c:03:0a:
         bc:e9:26:a8:d6:0e:79:07:11:ec:81:80:68:5f:a4:8a:f0:1f:
         d4:bc:c5:21:dc:79:16:19:7d:61:ce:eb:2f:a2:9f:cd:16:67:
         18:63:ad:22:aa:77:d6:49:1d:39:a9:91:9e:1a:ff:02:5a:7b:
         24:77:52:20:ba:24:50:4a:36:bf:a1:69:13:ff:d6:d5:2a:3a:
         cc:57:6b:7d:48:d8:c2:aa:00:35:6d:4f:66:22:3b:fa:6d:10:
         9a:b0:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:56:13 2025 by rpki-client