Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3137372e37342e3135322e302f32312d3234203d3e20323633363530.roa
File:                     3137372e37342e3135322e302f32312d3234203d3e20323633363530.roa (raw, json)
Hash identifier:          OrXhQQlp7RZ6/MIGX1Taycaaqe9MXNKl7a134sAYK6k=
Subject key identifier:   40:A5:7F:8A:E1:D2:F7:F1:F1:C8:F9:77:20:EC:9C:52:8E:90:3D:8D
Certificate issuer:       /CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
Certificate serial:       45E525CE8E5EE5FEAE8416C79B2D44C1E6A99947
Authority key identifier: A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3137372e37342e3135322e302f32312d3234203d3e20323633363530.roa
Signing time:             Thu 06 Mar 2025 22:10:34 +0000
ROA not before:           Thu 06 Mar 2025 22:05:34 +0000
ROA not after:            Thu 05 Mar 2026 22:10:34 +0000
asID:                     263650
IP address blocks:        177.74.152.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e5:25:ce:8e:5e:e5:fe:ae:84:16:c7:9b:2d:44:c1:e6:a9:99:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
        Validity
            Not Before: Mar  6 22:05:34 2025 GMT
            Not After : Mar  5 22:10:34 2026 GMT
        Subject: CN=40A57F8AE1D2F7F1F1C8F97720EC9C528E903D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:a2:7c:3a:1e:0f:59:46:e1:3b:ea:f1:77:
                    08:cf:1b:aa:88:3e:9d:51:4f:f3:e3:d8:96:82:ea:
                    e1:a0:77:85:95:e7:73:34:1e:ac:a6:2f:d4:bb:53:
                    b7:0f:62:77:bf:d2:e3:4a:89:1d:45:35:e5:97:0e:
                    84:d5:48:96:5e:f4:28:c3:ff:35:0c:2d:80:19:ee:
                    6a:c3:5e:50:29:d2:11:72:63:c7:ba:75:04:32:8a:
                    1d:16:94:06:c7:01:cd:9a:95:0d:d5:42:55:7a:f8:
                    74:62:5d:e1:9b:ef:29:59:65:49:ca:7e:6a:64:86:
                    b1:de:ed:3c:bd:fa:90:ed:8d:c2:2c:6e:47:58:34:
                    cb:8b:b1:1c:e9:2a:e0:d6:51:88:27:18:07:83:25:
                    5c:a3:8e:0d:e8:82:d4:8f:09:d8:a0:4a:7b:b5:23:
                    54:51:51:96:69:9d:65:ab:a7:87:45:98:9d:5e:d6:
                    df:a1:ce:11:58:da:1a:23:d7:db:17:48:77:68:9c:
                    84:0e:40:09:bd:b2:b8:b3:26:c2:1c:ab:9c:4e:2d:
                    97:24:1f:a0:4b:a4:16:17:73:ad:29:4b:2a:da:af:
                    6a:73:89:09:a6:87:3f:88:21:5a:22:b1:9f:a8:1b:
                    2b:3a:62:a1:72:05:91:9a:fb:47:20:95:ff:39:d3:
                    40:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A5:7F:8A:E1:D2:F7:F1:F1:C8:F9:77:20:EC:9C:52:8E:90:3D:8D
            X509v3 Authority Key Identifier:
                keyid:A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3137372e37342e3135322e302f32312d3234203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:1a:76:9d:8e:36:1f:c8:e2:f3:6a:e5:09:e9:b7:c1:e5:06:
         ca:2d:9c:39:f8:7e:2d:ce:03:29:9f:f2:ac:ac:ff:34:64:1b:
         4c:dc:7c:59:e6:2d:2c:62:54:5f:ad:c0:64:d6:6c:7d:e8:84:
         41:cb:1b:20:2d:ad:09:ef:2f:05:7c:b0:fc:f7:5b:02:e2:9f:
         0f:38:35:74:99:5a:bb:49:19:98:1f:b4:89:a2:a4:73:53:a8:
         64:d9:65:91:ae:39:ac:2d:82:fc:3a:48:c9:b1:9d:21:d1:01:
         79:a5:92:54:fb:7f:73:6d:d2:eb:1e:f6:d6:5f:05:7a:ac:78:
         17:ff:b6:fb:1f:c6:36:6f:f0:b6:cb:50:85:7a:f2:38:83:af:
         14:df:fd:bc:fc:1a:ad:9f:80:40:81:55:af:a6:25:fd:23:0d:
         26:a7:31:43:ba:39:b5:9f:21:d2:54:17:f4:4a:57:dd:65:10:
         cc:d1:f3:8f:cd:f2:29:b1:f3:d9:37:52:4f:2a:ff:a6:0f:d2:
         aa:4b:df:35:7d:f3:89:0a:5d:02:6e:1e:0b:28:4d:20:61:f9:
         ff:ef:4e:b0:89:d8:aa:7f:ed:7c:30:5c:90:f7:77:92:56:ca:
         31:f1:8a:f2:1e:7f:52:5b:2e:93:ee:e3:eb:49:7c:33:ea:cc:
         c6:9f:0a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:54:12 2025 by rpki-client