Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/3137372e3132392e38382e302f32312d3234203d3e20323632333934.roa
File:                     3137372e3132392e38382e302f32312d3234203d3e20323632333934.roa (raw, json)
Hash identifier:          8+lDyM4Fm7U9BSlXPpXY4YS8rbjXaJ16gQUJ2Kc0GSQ=
Subject key identifier:   99:88:1D:26:8A:60:11:17:D9:40:DF:F1:BA:CD:2A:9C:5D:8A:47:26
Certificate issuer:       /CN=7F262696BA0E69FA1058BEF98B1386A9CCEB7D71
Certificate serial:       68A0BEF4428B6E9D197226675A651D28D537C177
Authority key identifier: 7F:26:26:96:BA:0E:69:FA:10:58:BE:F9:8B:13:86:A9:CC:EB:7D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/3137372e3132392e38382e302f32312d3234203d3e20323632333934.roa
Signing time:             Thu 06 Mar 2025 18:06:06 +0000
ROA not before:           Thu 06 Mar 2025 18:01:06 +0000
ROA not after:            Thu 05 Mar 2026 18:06:06 +0000
asID:                     262394
IP address blocks:        177.129.88.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a0:be:f4:42:8b:6e:9d:19:72:26:67:5a:65:1d:28:d5:37:c1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F262696BA0E69FA1058BEF98B1386A9CCEB7D71
        Validity
            Not Before: Mar  6 18:01:06 2025 GMT
            Not After : Mar  5 18:06:06 2026 GMT
        Subject: CN=99881D268A601117D940DFF1BACD2A9C5D8A4726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:2a:d4:ba:27:8f:c7:51:f5:6d:a9:f3:42:
                    55:db:99:84:64:1b:7d:1b:24:8d:fa:67:a5:73:2a:
                    81:9c:b2:d0:4c:b3:77:54:e9:81:5d:f7:73:7d:b6:
                    90:ec:de:f3:18:f0:a2:c3:98:db:82:b7:1b:00:8e:
                    80:f4:fb:f7:1f:b4:77:70:6c:a4:ad:e2:4c:69:ed:
                    32:3f:23:7f:62:0b:cd:96:24:94:de:a7:d4:08:fa:
                    1b:75:55:c2:b1:f6:66:79:9e:bd:3f:6b:75:9e:94:
                    b9:30:32:68:85:61:05:52:49:ac:ca:9d:a3:a0:51:
                    ed:bb:c6:85:f7:92:13:e8:1c:00:2f:9d:e9:b7:44:
                    5d:55:52:5f:62:15:1e:f4:7d:fc:ee:42:c5:55:73:
                    61:11:9d:dd:72:52:67:13:c3:12:25:04:a7:51:f0:
                    5f:48:04:db:b9:90:81:55:cf:a2:7e:5a:c8:39:65:
                    40:a3:bc:43:8d:2a:c0:b0:a3:8a:6c:03:a2:fd:80:
                    c3:77:4a:57:d4:ec:7e:10:4c:c8:f2:85:68:41:34:
                    1d:d4:aa:03:a6:19:ac:8f:1b:7e:93:2b:94:ed:5f:
                    a4:b6:fd:a7:c4:fa:26:2a:e7:f2:9d:97:fc:5e:72:
                    ea:17:d7:da:bb:94:29:05:dd:f2:51:0e:7e:d0:35:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:88:1D:26:8A:60:11:17:D9:40:DF:F1:BA:CD:2A:9C:5D:8A:47:26
            X509v3 Authority Key Identifier:
                keyid:7F:26:26:96:BA:0E:69:FA:10:58:BE:F9:8B:13:86:A9:CC:EB:7D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/3137372e3132392e38382e302f32312d3234203d3e20323632333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:d0:79:23:b9:d2:a2:9c:9b:64:ac:f9:a9:82:e0:dd:8f:c8:
         82:54:3c:c7:cd:42:2d:5e:28:f0:ff:6b:4e:02:76:aa:86:f6:
         18:ca:ae:0d:05:55:f4:6c:bc:70:f2:b8:4e:6a:a0:3f:40:4b:
         34:c9:bd:ed:bc:8b:ca:13:bd:9c:ca:14:17:a7:33:8c:09:7e:
         cf:69:06:32:17:28:65:e1:6e:34:b8:5f:e6:29:6c:a9:1d:63:
         65:f4:2c:4f:ed:51:34:45:fb:f8:46:42:95:d5:5e:c3:f4:14:
         82:6a:68:66:a7:a7:7d:8e:cb:08:33:41:d7:10:c1:04:b4:8c:
         04:0c:f7:1d:0d:cf:e1:33:39:ee:ec:cc:10:4d:ee:10:68:db:
         61:d8:dc:64:89:51:9c:2d:b2:4c:6c:63:d7:f3:e8:2e:1d:34:
         62:14:04:cb:e8:f0:10:80:7f:e0:80:14:8f:98:8a:76:02:e3:
         72:7b:0e:cc:04:17:05:a1:67:59:63:f2:b5:97:2a:86:ef:49:
         1f:34:76:44:f5:73:24:f7:ef:5a:67:8c:6d:42:c7:2c:51:fc:
         e5:e7:41:33:15:87:d8:01:a4:c6:f4:ea:9a:2c:d8:38:23:92:
         61:81:29:2b:86:f8:80:ff:55:74:09:3f:b9:7c:3e:78:86:90:
         0f:a6:80:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:16 2025 by rpki-client