Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e33302e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e33302e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          bUCZFzCZfBu3Dzek/+Zly8gV/LvunXHiBB4ossxOiCc=
Subject key identifier:   8A:59:BE:A8:DF:4E:C0:09:9F:AD:1C:A6:CA:17:EB:F4:BC:D8:E0:8E
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       506CE9E86D83091445D7BA21D2B5A76729AFCE3C
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e33302e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:45 +0000
ROA not before:           Thu 06 Mar 2025 02:26:45 +0000
ROA not after:            Thu 05 Mar 2026 02:31:45 +0000
asID:                     52706
IP address blocks:        177.126.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6c:e9:e8:6d:83:09:14:45:d7:ba:21:d2:b5:a7:67:29:af:ce:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:45 2025 GMT
            Not After : Mar  5 02:31:45 2026 GMT
        Subject: CN=8A59BEA8DF4EC0099FAD1CA6CA17EBF4BCD8E08E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:bf:a5:68:3e:dc:9a:85:5c:02:99:c5:58:
                    03:eb:77:33:d2:6a:da:4c:a9:01:ad:d0:3f:82:15:
                    bd:0d:9b:f8:08:7a:f8:37:26:22:b8:f2:83:1e:b6:
                    81:c6:08:04:a2:4a:bd:4c:1b:a5:96:5f:56:61:c0:
                    47:6f:14:6f:5c:40:76:a7:b7:1c:f8:11:41:94:86:
                    81:b0:0b:65:2f:2f:62:a3:61:de:df:b7:5e:c0:53:
                    6f:d8:24:4a:21:b1:ad:f7:43:28:05:0a:a6:27:c3:
                    9a:74:a8:08:ee:04:f9:cd:b4:68:f1:41:ff:2f:36:
                    c5:4e:a3:46:fa:e9:71:62:d0:14:ca:ae:b6:dc:27:
                    07:ee:85:e5:ba:3f:b1:33:36:34:b4:97:aa:aa:5e:
                    ed:57:73:8d:34:f5:30:10:a0:df:39:f0:88:45:b3:
                    c2:dc:53:af:d6:9a:76:7d:8b:09:68:75:f3:3d:66:
                    4b:04:4a:d6:a2:4c:2d:b8:ee:dd:d9:01:09:d5:a9:
                    4d:9a:84:de:21:69:54:8f:7e:be:6b:ed:d3:4a:1a:
                    5a:b7:13:6d:04:3c:a7:a8:da:c4:2e:1f:4b:11:4b:
                    0d:7c:cd:f6:af:87:6d:18:81:36:cc:04:1d:27:c2:
                    35:63:22:47:24:91:54:8f:d2:5c:89:3e:10:16:90:
                    38:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:59:BE:A8:DF:4E:C0:09:9F:AD:1C:A6:CA:17:EB:F4:BC:D8:E0:8E
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e33302e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:ab:87:9e:3f:ae:56:3c:03:9a:63:8c:a9:42:b9:98:db:04:
         79:09:9e:52:0d:e0:0e:92:ba:82:d2:d4:1f:b0:93:97:57:55:
         e2:32:ce:94:67:ce:be:a1:28:90:96:d2:39:e5:df:41:0e:ff:
         75:82:1d:21:59:6d:46:10:5d:09:39:59:f4:71:e8:2b:cb:1d:
         a7:5a:6a:2b:3e:77:85:ad:4c:64:b7:f9:73:8f:e7:6c:27:6f:
         50:2e:41:a3:c7:bf:ff:c2:58:c5:0c:2d:da:8a:88:a2:58:bd:
         a1:2e:42:ef:18:3b:59:c0:4e:b4:17:73:d7:8a:16:ef:da:34:
         8a:cf:bb:8e:b7:3b:48:f1:18:83:fe:04:02:49:ba:27:ed:54:
         15:f4:65:4d:e3:8e:23:4b:56:d6:8d:a3:e1:6a:3a:e6:c8:a2:
         4e:ed:90:a8:52:85:cd:3a:a9:aa:71:c6:25:8c:14:ba:28:9b:
         df:83:a2:1f:2c:6e:98:ab:59:68:e2:d9:50:5c:b2:9e:81:0f:
         2d:83:1f:7c:f7:00:f6:3a:ab:5c:2f:c5:16:8d:2d:1b:4d:1a:
         6b:59:13:ba:3c:90:9b:64:84:e6:07:32:d0:d7:0b:87:fc:4b:
         a6:aa:98:a4:69:94:0c:92:09:51:db:f5:03:20:c8:60:43:94:
         79:84:f7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:01:37 2025 by rpki-client