Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3137372e34342e302e302f31372d3235203d3e203238323032.roa
File:                     3137372e34342e302e302f31372d3235203d3e203238323032.roa (raw, json)
Hash identifier:          zJV3l6oK7B6ePa+qXgLykxI9vLDmuC/FzqI6Pp8rnJ0=
Subject key identifier:   E0:8C:E1:48:BF:45:87:AC:3A:83:B0:D7:5E:FA:B1:80:B4:46:FF:A4
Certificate issuer:       /CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
Certificate serial:       622C116F7DCAE9B48716833CE7A17F3121059428
Authority key identifier: 65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3137372e34342e302e302f31372d3235203d3e203238323032.roa
Signing time:             Fri 10 Jan 2025 14:19:25 +0000
ROA not before:           Fri 10 Jan 2025 14:14:25 +0000
ROA not after:            Fri 09 Jan 2026 14:19:25 +0000
asID:                     28202
IP address blocks:        177.44.0.0/17 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2c:11:6f:7d:ca:e9:b4:87:16:83:3c:e7:a1:7f:31:21:05:94:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6561C6A8E635ED091BE5A553F7EB0B12F5E44495
        Validity
            Not Before: Jan 10 14:14:25 2025 GMT
            Not After : Jan  9 14:19:25 2026 GMT
        Subject: CN=E08CE148BF4587AC3A83B0D75EFAB180B446FFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:a4:7c:9f:5c:10:61:6a:21:f3:92:e0:32:
                    45:5d:04:65:6c:b5:c6:c3:94:f1:b2:26:7f:75:2f:
                    61:ff:39:28:5a:07:13:e0:68:2f:7e:30:04:75:9f:
                    53:24:f1:da:4a:59:88:71:0a:cc:b7:9e:3b:0d:44:
                    71:54:92:cd:27:1e:ba:39:94:43:f3:aa:4d:52:a0:
                    ba:e9:be:fd:85:59:b3:e3:88:ae:08:21:52:00:ac:
                    87:ed:f7:90:d9:4e:c4:74:e0:8e:95:f6:40:bd:aa:
                    f7:ca:71:c1:0b:f4:d9:36:77:e1:43:ca:7f:dc:08:
                    a3:85:dc:3d:59:4b:73:b2:d9:64:59:f2:d5:9c:52:
                    0d:b4:da:4a:aa:7b:b7:8a:77:60:37:91:54:db:90:
                    bd:06:22:1d:84:ed:0f:ed:35:23:28:db:62:62:47:
                    43:ac:10:af:6c:b3:f2:48:7b:c9:b9:c4:79:eb:11:
                    54:92:48:be:aa:ad:4a:e1:6c:aa:98:e8:b7:26:96:
                    ea:f2:4e:9a:06:9f:c3:08:ca:51:e7:1f:56:f3:91:
                    81:55:34:d1:41:c5:62:ee:b9:70:c8:9e:55:5e:0a:
                    a0:9f:60:d1:b0:40:85:db:1b:a5:f2:e8:5e:03:91:
                    1d:d6:a4:1b:d4:3d:25:2f:d3:b9:d5:8a:bd:51:19:
                    1c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8C:E1:48:BF:45:87:AC:3A:83:B0:D7:5E:FA:B1:80:B4:46:FF:A4
            X509v3 Authority Key Identifier:
                keyid:65:61:C6:A8:E6:35:ED:09:1B:E5:A5:53:F7:EB:0B:12:F5:E4:44:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6561C6A8E635ED091BE5A553F7EB0B12F5E44495.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/5/3137372e34342e302e302f31372d3235203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         71:dd:f3:2d:c1:b0:b9:6f:80:0c:bf:8c:9e:7b:52:db:f9:e2:
         9e:fe:10:f1:be:10:b5:4c:9a:bf:54:7e:db:09:f9:d4:86:17:
         ed:c1:01:42:fa:aa:55:8b:f7:73:fc:da:a5:ca:65:2f:e0:22:
         3d:27:6c:a5:32:9e:c2:2c:3f:e3:16:2a:f0:2e:ce:d5:8e:36:
         d4:fb:7a:b5:d8:5a:37:6c:33:4a:6c:4b:78:94:2a:9d:b2:88:
         1e:07:a9:44:e7:c6:15:86:a4:81:ed:d2:3e:5c:4c:53:8c:d3:
         22:36:5b:d2:12:52:02:db:f4:3c:bc:e5:a4:0a:43:ec:3e:5f:
         0c:8d:8c:6d:8f:d8:4e:a8:c5:b4:2e:63:2c:f2:19:0a:ba:2f:
         0b:e3:6d:15:7a:ba:61:8d:56:37:6b:57:c9:39:6f:03:0b:3f:
         cb:c5:3b:4a:c5:24:ab:83:e1:a2:4b:ed:3f:a0:a4:97:bf:91:
         d3:52:59:a2:49:ea:c1:3b:72:50:31:2a:2b:f1:bd:fd:36:ce:
         e7:22:9e:95:13:bf:89:b6:90:79:06:bf:d1:06:3a:5f:43:cb:
         9f:3e:0d:1e:b1:2a:54:6a:a4:00:9f:96:8d:35:90:36:b4:5c:
         90:e1:63:32:08:a4:e1:38:15:a2:4e:d8:16:6a:6c:d2:d6:6f:
         27:6c:49:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:31 2025 by rpki-client