Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32382e302f32332d3233203d3e203532373036.roa
File:                     3137372e3132362e32382e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          e6VXkJzPZ7Jw01OZhj/hYcDfW2ea1pnnEmim+LdazMI=
Subject key identifier:   F0:73:93:C5:C2:7D:EB:C4:E4:59:63:01:55:A3:D9:A6:CD:62:AE:99
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       0D6BA0EAAEDB4AF193BB62D44E2D4250FDC277CC
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32382e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:35 +0000
ROA not before:           Thu 06 Mar 2025 02:26:35 +0000
ROA not after:            Thu 05 Mar 2026 02:31:35 +0000
asID:                     52706
IP address blocks:        177.126.28.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6b:a0:ea:ae:db:4a:f1:93:bb:62:d4:4e:2d:42:50:fd:c2:77:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:35 2025 GMT
            Not After : Mar  5 02:31:35 2026 GMT
        Subject: CN=F07393C5C27DEBC4E459630155A3D9A6CD62AE99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7f:62:1c:ae:5f:f6:5f:c1:26:2c:2c:1b:6a:
                    52:6a:c8:9d:8f:1c:c4:f7:38:92:63:76:1c:a3:40:
                    d6:24:fc:83:ec:ca:8c:c2:5d:22:d6:00:fd:3b:78:
                    2e:3a:9e:b6:4c:ef:1b:ed:cf:02:68:70:67:1d:25:
                    e7:34:a1:2c:d7:15:ee:8e:0b:a0:a1:74:75:ea:11:
                    a6:f9:fb:c3:71:a3:cf:b0:db:9d:76:cc:b2:d4:53:
                    f6:34:9d:77:83:26:9a:77:56:a9:7c:f0:18:6f:ee:
                    df:f9:0a:e6:07:22:be:4e:80:f8:b1:d3:66:75:f9:
                    72:72:e2:0b:d7:08:4c:51:4d:04:fd:20:e5:19:0a:
                    e1:76:c2:19:4f:a7:b5:de:0d:08:00:74:7c:df:d1:
                    a1:47:9c:1b:c1:c5:e2:c1:1a:64:6c:9a:11:e6:9d:
                    65:5a:9f:c7:90:b1:bf:fd:6b:ab:a1:fa:86:e5:31:
                    79:ea:8d:44:e6:05:01:f3:d9:ac:24:16:68:d7:fb:
                    2d:31:b0:97:d8:67:8b:b9:78:d1:c4:67:46:6a:c0:
                    b6:e0:b8:9b:fe:e0:4b:89:c8:03:4c:23:f7:de:72:
                    75:31:d3:ce:ca:12:f4:48:fc:65:d8:23:57:11:ab:
                    b7:3e:7a:19:a7:73:bb:11:5e:5c:ca:4f:ad:55:30:
                    16:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:73:93:C5:C2:7D:EB:C4:E4:59:63:01:55:A3:D9:A6:CD:62:AE:99
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32382e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:df:2e:74:cb:f0:6c:e8:a3:fe:3f:e1:53:43:4d:a1:8d:d1:
         5b:80:79:82:f2:b8:79:ec:e9:0c:0a:e6:43:e1:26:01:19:a0:
         99:d5:d4:dc:6b:c6:70:cf:39:0c:d0:14:7a:64:ec:1f:29:8e:
         c2:2c:c2:6b:7e:79:a7:57:01:9c:c7:2a:5d:30:97:b0:98:71:
         18:6b:29:5f:f9:0b:d6:27:6c:be:bd:13:b1:04:dc:e5:c6:c3:
         d1:d2:01:ee:ea:9f:e4:d5:cd:f4:5e:da:e0:ba:eb:20:9d:68:
         07:a7:04:95:4a:45:8f:a7:79:bb:d2:7c:8b:65:61:24:d1:ae:
         b4:09:2d:e2:a4:57:75:8e:d2:47:e7:ae:a9:9c:12:4c:5f:9e:
         28:6d:45:36:b4:e2:e4:d3:0f:00:41:3b:26:8d:38:23:5f:ed:
         4c:30:79:ac:23:72:47:c0:d5:16:f5:1b:85:01:c2:e2:2d:41:
         5a:98:c6:15:df:f8:20:7f:3a:2a:ad:ca:fd:e8:ed:03:a7:15:
         ee:f6:3c:cb:fa:4b:c4:7a:a0:a8:2f:b7:9e:32:b1:f4:ac:b5:
         57:13:9d:83:39:d4:1b:e4:4d:f9:68:e6:1d:ce:ea:31:ea:69:
         50:99:4d:b9:03:4d:be:53:bc:b7:e8:1d:90:68:70:2d:22:a8:
         4e:73:e9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:56:13 2025 by rpki-client