Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234382e302f32312d3231203d3e20323632383636.roa
File:                     3137372e31322e3234382e302f32312d3231203d3e20323632383636.roa (raw, json)
Hash identifier:          MTlmWdm2KrzpA3VA6OliDsX4S1HhZOB/gyb5Y/hJzQA=
Subject key identifier:   47:1A:69:9E:26:A4:2A:C6:81:30:B2:AD:DE:92:30:CE:5F:02:30:7D
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       27C4109CFE9F63A168A59114D88694ABA3634A1C
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234382e302f32312d3231203d3e20323632383636.roa
Signing time:             Thu 06 Mar 2025 01:21:39 +0000
ROA not before:           Thu 06 Mar 2025 01:16:39 +0000
ROA not after:            Thu 05 Mar 2026 01:21:39 +0000
asID:                     262866
IP address blocks:        177.12.248.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c4:10:9c:fe:9f:63:a1:68:a5:91:14:d8:86:94:ab:a3:63:4a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Mar  6 01:16:39 2025 GMT
            Not After : Mar  5 01:21:39 2026 GMT
        Subject: CN=471A699E26A42AC68130B2ADDE9230CE5F02307D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:71:82:10:40:3d:b8:bb:d9:ab:08:63:82:
                    53:38:f3:36:43:c2:82:c3:17:7c:33:2e:04:8d:c6:
                    c4:15:b4:86:ea:9e:37:c9:c8:f9:10:4c:f4:a6:da:
                    c0:15:79:d5:df:2e:70:7a:c3:3f:3f:66:a5:ad:47:
                    f3:f6:b1:1d:17:50:9b:c0:1d:af:f7:9e:08:ce:24:
                    e2:77:78:de:da:2f:01:79:c7:1f:18:91:97:88:d7:
                    ca:ab:a1:16:04:22:bf:f7:96:a7:fe:aa:41:09:c2:
                    4a:ff:cd:83:1a:43:8e:2f:2e:79:53:ba:bc:37:4b:
                    82:11:3c:9b:49:b5:ce:ae:68:7c:d8:84:91:ff:61:
                    19:c5:27:14:24:d6:6c:09:c5:5a:d3:db:c6:31:be:
                    d2:77:78:81:eb:b4:c4:38:ac:09:17:53:1e:78:8a:
                    3c:7e:b1:de:dd:34:21:c5:7f:8b:9c:bc:70:a2:bd:
                    d3:58:12:3f:a0:25:77:c7:f2:fb:c3:41:75:78:90:
                    a1:73:ce:78:65:95:a1:7c:61:93:0f:b6:1b:50:80:
                    92:d6:44:26:05:ec:1b:c3:ff:39:89:49:ab:68:5e:
                    61:c7:f9:4e:83:ec:e1:ee:a3:16:a9:91:16:d8:da:
                    11:e4:ca:b2:45:38:5b:91:c5:8d:1c:ad:55:10:cd:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1A:69:9E:26:A4:2A:C6:81:30:B2:AD:DE:92:30:CE:5F:02:30:7D
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234382e302f32312d3231203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c0:33:71:96:69:d4:63:7e:03:16:ab:d5:96:75:2b:09:5d:b2:
         9e:f0:cb:9e:a8:29:25:fb:89:23:27:5a:03:b1:bf:e9:a6:22:
         4d:ee:df:95:2e:a0:bb:00:84:e4:8d:a6:a9:e5:b6:47:ec:ae:
         bd:51:3c:44:3b:63:fa:a5:99:8e:83:79:1e:fd:39:23:2d:e6:
         4a:9b:8c:33:20:61:74:71:19:b8:00:08:41:d9:62:c3:d9:78:
         36:74:f3:2e:66:dd:1c:03:15:c0:67:96:9b:91:c5:4a:15:85:
         3e:da:2a:29:5b:2e:51:4e:a2:93:74:b4:a7:38:60:c6:1f:5d:
         3e:76:97:02:9e:bf:66:d8:95:b0:ec:da:eb:67:a9:99:0a:2e:
         44:59:91:04:46:47:89:a7:63:b4:ce:03:9c:02:55:d6:ba:29:
         4b:c0:d6:ce:1f:0d:91:b2:02:fb:cd:61:5e:dd:dd:d4:57:8f:
         74:ee:6a:44:69:bf:29:5b:c6:d0:51:6b:55:85:5e:6b:fe:5d:
         ee:14:55:06:ac:a0:0f:a0:74:65:04:58:ed:49:00:d5:5d:6d:
         53:3c:82:61:be:c6:73:ca:ca:7c:92:ea:d5:90:c5:ed:8f:56:
         d8:f2:75:64:31:d3:4c:da:0b:ac:fa:e4:67:82:ac:d8:fb:d6:
         4f:35:8c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:28:37 2025 by rpki-client