Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32352e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32352e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          Po/Q4K7GTI2ZDu+NkN0uzGRznGkJAAGjWMdXngpLksE=
Subject key identifier:   EF:45:8D:F4:A1:4A:D6:2D:A7:E1:2E:94:7B:E2:46:62:1F:DA:76:BA
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       42B0761D001DF6B9FB5B4288B1ADDB667A630736
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32352e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:41 +0000
ROA not before:           Thu 06 Mar 2025 02:26:41 +0000
ROA not after:            Thu 05 Mar 2026 02:31:41 +0000
asID:                     52706
IP address blocks:        177.126.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b0:76:1d:00:1d:f6:b9:fb:5b:42:88:b1:ad:db:66:7a:63:07:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:41 2025 GMT
            Not After : Mar  5 02:31:41 2026 GMT
        Subject: CN=EF458DF4A14AD62DA7E12E947BE246621FDA76BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:33:6b:c3:2a:4e:33:a7:61:90:95:81:e4:58:
                    59:19:9d:ce:70:82:e8:46:ff:dd:94:5c:d4:63:88:
                    4c:9a:99:90:cb:83:54:41:ff:de:f1:e6:cd:42:db:
                    20:72:23:90:bd:5c:35:cd:f7:66:31:9f:ff:e7:bf:
                    21:b0:4e:d3:36:68:42:22:41:0d:a1:2e:1f:45:82:
                    af:50:c5:23:f2:b7:d9:e2:5c:de:3b:6f:58:80:88:
                    b6:1f:d1:33:e8:f7:27:88:f1:33:0c:a1:88:bf:2a:
                    5d:93:9b:f1:c5:8e:1e:7d:a1:92:01:3c:1f:e8:75:
                    c2:2a:98:c9:e1:7f:a5:67:cb:80:36:26:89:7d:a6:
                    8e:6a:40:a0:6e:2a:59:6e:f1:3b:74:51:00:21:9b:
                    80:ed:3d:00:37:ed:eb:15:a9:8c:97:8a:c8:b9:47:
                    38:5a:c6:46:bd:f7:b6:af:96:4f:ad:f3:ec:dd:3e:
                    0f:88:53:6b:74:c8:1e:4e:56:05:50:4a:dc:72:43:
                    ac:8f:6b:d9:8d:45:ce:58:76:cf:b6:69:2a:08:25:
                    1c:52:04:60:67:cd:38:99:2d:0e:75:f2:ab:c2:3f:
                    ad:b5:b6:30:c5:aa:58:16:e0:2b:ea:ba:d6:e8:d4:
                    cb:f4:b1:66:20:c6:b2:3b:9d:d8:7d:5d:00:a6:79:
                    39:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:45:8D:F4:A1:4A:D6:2D:A7:E1:2E:94:7B:E2:46:62:1F:DA:76:BA
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32352e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:d4:db:ba:f6:6f:d3:89:b1:a5:91:5e:35:04:92:f8:4c:87:
         1f:e9:ab:c8:34:94:c1:b4:f9:03:dd:da:49:ac:3b:b7:7f:1b:
         13:81:91:c4:c9:d9:3c:92:f0:f4:b8:98:98:f8:e2:be:5f:db:
         71:67:2c:23:ea:98:51:06:b8:2a:b7:aa:c7:c5:ac:f2:b8:d1:
         8e:c5:43:f9:25:1e:9a:40:8f:28:3d:d7:04:c1:ac:65:96:26:
         69:0d:fd:f9:e8:ea:7c:14:72:72:cd:77:02:9c:c8:bd:bf:95:
         26:66:1d:b7:12:60:e6:cb:df:14:fa:79:ca:f2:e1:7a:9d:29:
         14:28:cd:6a:2a:96:c5:cf:93:5b:19:a0:7f:36:da:8e:2d:97:
         9b:c8:b2:79:11:61:81:73:38:1b:2e:83:e7:67:37:c0:8b:1d:
         66:92:a7:a1:16:1f:85:b7:e9:33:1d:de:7c:8e:92:ca:1b:c8:
         9d:63:61:dc:0b:6e:ac:da:1a:38:0f:7d:5b:4f:de:4b:8a:f5:
         6c:65:2f:7f:0e:b5:de:eb:c5:7f:63:f9:dc:e0:ca:bf:04:46:
         ab:65:7c:ee:d6:75:3c:9b:fc:bf:b9:da:f1:31:76:49:ac:02:
         11:db:38:50:f0:aa:b7:3c:d1:e8:d1:1f:79:8d:85:a8:25:28:
         be:dd:28:eb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQrB2HQAd9rn7W0KIsa3bZnpjBzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNTAzMDYwMjI2NDFaFw0yNjAzMDUwMjMxNDFaMDMxMTAvBgNV
BAMTKEVGNDU4REY0QTE0QUQ2MkRBN0UxMkU5NDdCRTI0NjYyMUZEQTc2QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkM2vDKk4zp2GQlYHkWFkZnc5w
guhG/92UXNRjiEyamZDLg1RB/97x5s1C2yByI5C9XDXN92Yxn//nvyGwTtM2aEIi
QQ2hLh9Fgq9QxSPyt9niXN47b1iAiLYf0TPo9yeI8TMMoYi/Kl2Tm/HFjh59oZIB
PB/odcIqmMnhf6Vny4A2Jol9po5qQKBuKllu8Tt0UQAhm4DtPQA37esVqYyXisi5
Rzhaxka997avlk+t8+zdPg+IU2t0yB5OVgVQStxyQ6yPa9mNRc5Yds+2aSoIJRxS
BGBnzTiZLQ518qvCP621tjDFqlgW4Cvqutbo1Mv0sWYgxrI7ndh9XQCmeTn9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU70WN9KFK1i2n4S6Ue+JGYh/adrowHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzEzNzM3MmUzMTMyMzYyZTMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsX4ZMA0GCSqGSIb3DQEBCwUAA4IBAQBc1Nu69m/T
ibGlkV41BJL4TIcf6avINJTBtPkD3dpJrDu3fxsTgZHEydk8kvD0uJiY+OK+X9tx
Zywj6phRBrgqt6rHxazyuNGOxUP5JR6aQI8oPdcEwaxlliZpDf356Op8FHJyzXcC
nMi9v5UmZh23EmDmy98U+nnK8uF6nSkUKM1qKpbFz5NbGaB/NtqOLZebyLJ5EWGB
czgbLoPnZzfAix1mkqehFh+Ft+kzHd58jpLKG8idY2HcC26s2ho4D31bT95LivVs
ZS9/DrXe68V/Y/nc4Mq/BEarZXzu1nU8m/y/udrxMXZJrAIR2zhQ8Kq3PNHo0R95
jYWoJSi+3Sjr
-----END CERTIFICATE-----
Generated at Wed Apr 9 21:04:16 2025 by rpki-client