Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3137372e3132392e3231322e302f32322d3332203d3e20323633303437.roa
File:                     3137372e3132392e3231322e302f32322d3332203d3e20323633303437.roa (raw, json)
Hash identifier:          pY+BxtqK2jZIfSHUVqLDhXZiX8cixTtLdRslgTuVBkY=
Subject key identifier:   65:33:46:A2:1E:07:88:26:A8:6B:86:86:93:6D:4C:D5:C3:53:2C:48
Certificate issuer:       /CN=2D5218850067B1879FF7D928A844733CA008C908
Certificate serial:       161793B4BB55EEFBF997F0CEC9FFC46F3B874956
Authority key identifier: 2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3137372e3132392e3231322e302f32322d3332203d3e20323633303437.roa
Signing time:             Wed 29 Jan 2025 13:26:08 +0000
ROA not before:           Wed 29 Jan 2025 13:21:08 +0000
ROA not after:            Wed 28 Jan 2026 13:26:08 +0000
asID:                     263047
IP address blocks:        177.129.212.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:17:93:b4:bb:55:ee:fb:f9:97:f0:ce:c9:ff:c4:6f:3b:87:49:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5218850067B1879FF7D928A844733CA008C908
        Validity
            Not Before: Jan 29 13:21:08 2025 GMT
            Not After : Jan 28 13:26:08 2026 GMT
        Subject: CN=653346A21E078826A86B8686936D4CD5C3532C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:b3:9a:8b:44:9d:e7:42:d1:29:6c:bb:30:
                    09:aa:1a:0b:f1:80:e5:43:b1:1e:10:29:be:82:75:
                    39:5a:a1:e1:c5:43:cf:56:91:e6:4b:0f:16:61:8b:
                    5b:b4:6e:85:ff:17:72:e5:0b:bc:ee:c0:e0:34:cd:
                    c8:8d:4a:1a:ef:f1:a5:60:8b:a5:fb:16:31:52:b3:
                    a5:48:ba:7c:68:2d:18:f6:39:ba:46:03:d3:d5:04:
                    95:13:a9:66:8e:d0:fe:97:af:5a:8e:a1:c5:4c:dc:
                    bd:cf:c1:54:e8:e7:3a:55:27:0a:d2:c6:ce:32:1a:
                    7e:0b:ce:88:4c:96:e7:a0:d8:23:f6:01:55:c1:b3:
                    bd:9d:dd:a0:a6:2c:5f:47:01:1f:4a:c6:43:a4:66:
                    2d:e7:ac:5c:bc:4e:9a:ce:57:05:1f:02:3d:51:5b:
                    6f:4d:6c:28:09:b5:32:c7:e2:b2:1a:c3:8f:aa:c3:
                    b2:40:e7:bd:c1:6f:57:0c:d9:e9:39:cd:5f:f1:e1:
                    db:8d:76:b3:77:c8:3a:59:97:02:5b:db:2f:02:28:
                    57:05:7c:12:fe:be:78:d0:aa:8c:d2:3e:d1:10:d4:
                    84:50:46:b8:a3:29:02:d2:39:84:02:0e:74:f6:c7:
                    5c:aa:8a:56:5f:24:77:ba:e3:8b:76:c0:79:4d:22:
                    3e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:33:46:A2:1E:07:88:26:A8:6B:86:86:93:6D:4C:D5:C3:53:2C:48
            X509v3 Authority Key Identifier:
                keyid:2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3137372e3132392e3231322e302f32322d3332203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:c9:3e:d8:38:b5:87:4e:e3:9f:7c:14:c8:e0:0c:12:7a:be:
         c3:49:44:bc:44:55:09:9e:fc:0e:ba:2f:87:8d:ad:d2:15:fc:
         4d:7d:bc:c7:db:4f:9c:d7:65:cd:36:84:1f:31:12:52:9e:18:
         b2:bd:5f:bf:c7:3f:4f:47:a7:ff:f2:30:38:bc:e8:7e:f6:9d:
         8a:54:b3:0b:7a:4f:1a:80:9c:2f:a9:a5:eb:d1:8d:28:76:b1:
         7a:5c:c5:09:cc:61:6a:d7:c8:07:0b:72:5e:4d:43:c4:61:c9:
         46:89:78:f3:73:6d:aa:ce:04:4e:09:81:a2:a1:15:e9:ec:8e:
         b7:01:b8:44:75:39:28:ff:be:6f:a9:60:97:fe:97:34:01:7f:
         ad:f4:9a:a6:e5:e4:35:12:dc:e6:e1:fe:75:e1:96:31:7c:dc:
         2c:3a:88:96:40:6f:e0:38:d3:24:5c:0b:4d:ed:19:7a:40:91:
         14:7e:56:26:48:56:38:93:51:e9:df:57:49:da:e4:d5:04:8f:
         94:b0:12:47:29:43:a9:b2:f8:11:0a:75:82:1c:75:3a:87:d6:
         84:98:25:a5:61:7d:c5:5c:a4:88:4f:9a:ec:12:73:bd:ad:51:
         b1:49:b6:92:0c:14:3d:42:2e:f5:d9:11:cc:fb:a0:6e:e9:75:
         3f:44:54:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:11 2025 by rpki-client