Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3235322e302f32332d3233203d3e20323632383636.roa
File:                     3137372e31322e3235322e302f32332d3233203d3e20323632383636.roa (raw, json)
Hash identifier:          B3Mbjqwuz4IbNLY3nFcpH+De3hBPfXZF2g6n5mjzXUk=
Subject key identifier:   EE:A4:AA:89:FA:14:5F:D3:C7:06:9B:28:8A:52:C2:92:D3:30:92:F6
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       230A27D2246B0DD2B12FEDAACB735BA47636A8C8
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3235322e302f32332d3233203d3e20323632383636.roa
Signing time:             Thu 06 Mar 2025 01:21:40 +0000
ROA not before:           Thu 06 Mar 2025 01:16:40 +0000
ROA not after:            Thu 05 Mar 2026 01:21:40 +0000
asID:                     262866
IP address blocks:        177.12.252.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0a:27:d2:24:6b:0d:d2:b1:2f:ed:aa:cb:73:5b:a4:76:36:a8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Mar  6 01:16:40 2025 GMT
            Not After : Mar  5 01:21:40 2026 GMT
        Subject: CN=EEA4AA89FA145FD3C7069B288A52C292D33092F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ea:a0:c4:87:eb:b0:c9:46:16:b4:e8:8b:df:
                    55:6d:67:51:48:fd:fa:06:f6:76:72:cd:c0:72:a5:
                    20:f1:7b:80:ab:1e:21:06:84:ce:0b:49:d8:f4:63:
                    79:29:10:a4:9a:9c:b2:ae:da:53:35:fb:d0:e9:98:
                    f3:a0:16:78:27:30:34:a9:1e:1c:35:5d:4a:1c:c5:
                    21:f8:e8:96:8e:b2:cd:7a:3e:78:9a:dd:b9:e5:81:
                    54:11:07:2e:cd:26:33:26:c8:57:32:e1:26:00:6f:
                    70:9c:fd:5f:98:65:1e:34:dd:7e:95:e2:3c:8e:5e:
                    13:bd:d3:c3:c1:61:5e:db:01:a0:fd:68:13:67:ad:
                    3d:1e:2d:da:8c:c2:ff:d3:5c:d9:0f:51:84:d9:01:
                    a0:3a:23:f2:9b:c1:ce:da:75:c7:51:8f:65:9f:75:
                    e4:03:c0:a9:12:3c:7d:32:e3:98:36:ad:57:42:62:
                    71:d5:48:7e:0b:0d:2a:52:4e:ac:89:f3:d3:54:41:
                    c9:be:b4:00:0d:d0:91:f8:55:07:c0:59:ff:b3:1d:
                    c6:c2:3e:2f:4a:22:13:6c:fe:81:04:48:7b:b6:26:
                    a9:00:3a:d4:6c:6a:32:cd:29:1b:a3:2c:40:89:52:
                    a4:8d:f5:8c:8e:ab:53:0c:66:22:0c:18:0d:68:f5:
                    68:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A4:AA:89:FA:14:5F:D3:C7:06:9B:28:8A:52:C2:92:D3:30:92:F6
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3235322e302f32332d3233203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:e1:6b:81:60:5b:78:b3:c2:25:16:55:8a:11:a1:6b:0b:f3:
         8e:85:3e:c1:51:5d:14:b6:d9:ef:ea:e9:9f:74:97:bb:78:8a:
         9c:5e:0f:f5:90:8e:20:2a:a5:39:06:af:d2:c2:71:61:69:1e:
         70:05:18:52:95:b4:49:aa:38:35:97:3e:e6:74:c7:05:07:9a:
         b2:05:5d:1e:0b:d3:75:4d:e0:c1:fd:e3:30:ab:fd:f2:44:4e:
         79:cf:73:8f:18:81:de:79:0f:22:00:15:f0:2f:22:db:82:5e:
         89:83:8b:5a:dc:59:e6:57:05:cf:c1:d1:e9:4b:f3:7a:cf:4d:
         ab:89:a8:de:c7:b5:76:04:7f:3a:00:65:ad:7c:d9:92:80:0a:
         44:d3:0d:4e:e8:55:bb:60:da:41:ec:5e:c0:2d:29:5e:f6:46:
         48:0c:2f:56:6f:30:75:43:e0:f2:ef:cb:50:c2:45:2b:96:9f:
         e3:f1:68:a1:33:cb:5c:6d:c5:c9:81:61:cc:c2:6c:73:6c:ba:
         57:93:9f:b7:1a:06:fa:2e:bc:7a:20:bc:3e:66:72:d3:d2:0e:
         e1:63:f7:28:61:83:eb:9e:ee:a9:07:b4:20:d6:b2:40:80:b7:
         e7:5f:9e:39:28:b0:3b:bd:d0:5f:df:9b:e4:3e:85:0b:90:a3:
         e8:e0:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:27:49 2025 by rpki-client