Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3137372e3133302e3136302e302f31392d3235203d3e203238323032.roa
File:                     3137372e3133302e3136302e302f31392d3235203d3e203238323032.roa (raw, json)
Hash identifier:          E6FVeSHcQ3lad+6OLOiE2o7ZHeLjBASNE4aly7/V6cQ=
Subject key identifier:   B8:EC:C0:AE:06:E3:E1:0C:A3:42:E1:F6:CC:76:05:12:BD:89:24:C8
Certificate issuer:       /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial:       53A4DE0F7444DD0CEE07BE247849D7932F2A7FD7
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3137372e3133302e3136302e302f31392d3235203d3e203238323032.roa
Signing time:             Fri 10 Jan 2025 14:19:44 +0000
ROA not before:           Fri 10 Jan 2025 14:14:44 +0000
ROA not after:            Fri 09 Jan 2026 14:19:44 +0000
asID:                     28202
IP address blocks:        177.130.160.0/19 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a4:de:0f:74:44:dd:0c:ee:07:be:24:78:49:d7:93:2f:2a:7f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
        Validity
            Not Before: Jan 10 14:14:44 2025 GMT
            Not After : Jan  9 14:19:44 2026 GMT
        Subject: CN=B8ECC0AE06E3E10CA342E1F6CC760512BD8924C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:88:e7:5e:3c:14:f8:f8:fe:48:ce:7d:15:
                    52:1c:32:fb:94:ef:6d:f0:96:e8:72:06:a1:d5:5c:
                    55:3e:0b:a0:8c:4f:d2:d9:a5:dd:07:7f:16:92:88:
                    d3:57:16:4f:58:35:b5:76:26:9e:64:d7:46:81:1a:
                    9a:53:78:26:a2:7e:04:14:b9:9a:a7:a4:f8:f6:99:
                    1d:9c:71:0c:e1:4a:00:d6:f1:0a:3d:e7:2d:15:83:
                    24:0f:a7:ad:25:8b:73:bf:aa:58:18:2a:f8:aa:49:
                    4c:93:56:c9:be:22:8a:6d:85:9d:4f:2a:e6:55:78:
                    79:54:78:45:f9:16:1f:67:c4:65:87:1c:3d:76:ab:
                    8b:ae:6a:64:19:bb:de:f5:11:e3:de:84:01:61:f4:
                    51:e8:d8:22:d4:f8:23:4b:f3:06:8b:b0:2e:e2:53:
                    43:49:39:dd:c0:dc:fd:fe:7a:e7:06:d7:fb:2c:67:
                    2f:56:c9:aa:32:ca:af:35:f3:c0:dd:5f:6e:9e:ff:
                    4c:70:05:2e:21:4d:98:b3:43:81:00:50:76:29:51:
                    4b:c9:90:f6:ab:8d:fd:4f:26:9f:9a:ae:bc:32:76:
                    52:4a:b2:90:1f:8e:df:a5:a3:6c:6a:de:7e:01:f7:
                    d0:a2:9c:6d:2b:de:ee:f3:71:17:21:26:a9:27:85:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EC:C0:AE:06:E3:E1:0C:A3:42:E1:F6:CC:76:05:12:BD:89:24:C8
            X509v3 Authority Key Identifier:
                keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3137372e3133302e3136302e302f31392d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         74:e4:50:86:01:51:4b:71:3b:b1:29:17:6a:78:da:ca:7e:1e:
         c5:74:0d:8b:c9:58:7a:e2:7d:14:02:52:e4:0f:cc:16:df:9a:
         f5:8a:46:7f:dc:60:fe:8b:0a:c4:74:23:e9:53:20:d7:73:ef:
         8e:65:86:45:a3:1b:8b:05:2e:7c:24:a2:26:0b:9a:b4:99:85:
         5c:1f:84:7b:ed:42:8c:31:4e:db:fa:d7:60:c3:18:7c:fe:f3:
         6e:7e:9b:a4:d8:6a:fb:da:bb:ba:fb:7d:40:b6:ec:1e:dd:89:
         96:b4:37:7d:7a:9a:b0:c7:68:78:83:3e:34:c9:3d:1a:9a:17:
         e0:73:48:60:17:c4:5a:3f:4a:82:2e:b6:bf:58:9d:71:94:3d:
         a1:b2:a4:10:d8:b0:2d:cc:c0:11:3e:e6:bd:04:63:7a:7b:bd:
         ff:97:6d:8b:73:13:90:6f:c6:d1:c2:f5:88:00:fb:e8:ef:21:
         60:cb:5d:fe:70:c3:a4:54:7d:40:08:04:a2:9b:45:24:a8:68:
         40:ef:48:f5:af:a0:54:2e:a6:d3:4f:85:24:fb:d0:40:77:c3:
         33:53:c1:b1:0c:ec:4b:3a:3f:fe:20:25:b2:9f:99:3d:a0:67:
         b8:89:a6:35:48:51:6d:b8:b3:2a:07:04:36:5c:aa:51:33:c1:
         70:ff:d7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:20 2025 by rpki-client