Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233372e302f32342d3234203d3e20323632333133.roa
File:                     3137372e3130352e3233372e302f32342d3234203d3e20323632333133.roa (raw, json)
Hash identifier:          6LERWxtlIvOrpXpIi9c8hxlsIsuMl5mZ7im+AXf6Ylk=
Subject key identifier:   A1:61:0C:05:FC:8E:21:EB:B0:A7:92:04:7F:B6:BB:2B:33:E1:27:2D
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       1E658BB35805F897BD5F9F7CF427BA346F259848
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233372e302f32342d3234203d3e20323632333133.roa
Signing time:             Wed 05 Mar 2025 22:00:29 +0000
ROA not before:           Wed 05 Mar 2025 21:55:29 +0000
ROA not after:            Wed 04 Mar 2026 22:00:29 +0000
asID:                     262313
IP address blocks:        177.105.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:65:8b:b3:58:05:f8:97:bd:5f:9f:7c:f4:27:ba:34:6f:25:98:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Mar  5 21:55:29 2025 GMT
            Not After : Mar  4 22:00:29 2026 GMT
        Subject: CN=A1610C05FC8E21EBB0A792047FB6BB2B33E1272D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ca:4b:d9:db:32:87:38:b5:79:cf:49:98:57:
                    f4:fe:33:fe:b7:e0:73:64:12:25:e2:c8:fe:4a:b7:
                    31:a0:3f:4e:61:96:8e:8f:cc:a6:ea:42:2e:70:2e:
                    c4:99:30:db:d3:d8:5f:2b:76:d1:f8:43:71:90:2c:
                    c2:0f:a2:ac:b5:99:12:30:95:f5:71:15:5c:cf:5f:
                    26:67:55:f1:6e:02:8d:8a:d1:b3:21:bf:c0:69:29:
                    e8:92:db:06:5e:a6:af:ab:49:56:ba:bb:04:b9:3c:
                    4e:67:1b:cb:fa:95:96:25:e3:11:3c:2c:dc:08:7e:
                    8f:7f:da:c6:b1:12:26:a6:ea:cc:43:ed:53:38:6b:
                    fb:bb:39:81:0d:b5:d5:07:b2:02:0f:2c:f5:61:01:
                    9f:6d:3b:51:8c:e6:4c:ea:b0:26:91:6c:47:8a:51:
                    21:a5:9d:e0:0d:ef:f4:1e:c7:c5:56:43:f7:e4:5c:
                    b7:5a:19:67:e2:86:41:a6:54:d7:42:5f:dd:39:5a:
                    00:25:68:ee:3f:e4:26:00:8d:18:ee:4e:a9:db:cb:
                    15:04:1e:b4:b2:17:8b:3e:c6:89:23:90:07:a1:1b:
                    18:66:e5:4e:0c:6c:95:d2:a8:e7:e6:e0:fb:a9:c1:
                    33:52:27:2a:2b:ac:7c:94:e6:9b:3b:fd:2a:d9:6c:
                    8e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:61:0C:05:FC:8E:21:EB:B0:A7:92:04:7F:B6:BB:2B:33:E1:27:2D
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233372e302f32342d3234203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:b2:9c:a2:b7:98:0c:6f:94:f4:8e:a8:64:95:24:f8:2d:a8:
         06:8e:25:e3:f1:ab:9e:5a:95:50:21:90:58:07:2a:57:3f:c0:
         e5:c7:bb:65:c3:0a:a9:82:0f:5f:23:db:5f:ee:35:66:01:8c:
         4e:64:21:fb:91:d0:87:96:09:e3:59:c8:c2:b7:0a:3c:e2:7d:
         b8:87:d3:72:7a:0a:18:d6:d0:f0:1d:da:41:bf:43:45:73:8d:
         e7:1c:81:19:ca:a1:35:ba:b2:bc:a5:7b:ec:35:d4:11:ca:68:
         00:b9:50:2e:94:1a:6b:b2:56:a4:0f:43:b2:83:53:ca:f1:70:
         d8:5a:16:0b:a5:3a:c7:a4:12:7c:79:94:ee:89:69:fe:e8:de:
         da:54:f5:3a:dd:4e:34:0a:c5:4b:b6:ed:6e:15:d8:4a:75:2d:
         a2:92:91:ff:05:3d:6e:93:63:67:61:3d:41:bf:94:ac:d1:06:
         95:78:25:8d:f4:9c:86:3e:7a:54:03:f3:5a:9a:ed:c6:4c:db:
         e2:5a:55:cf:81:cd:94:b3:3e:b5:33:97:f8:f5:7c:ed:2e:04:
         ce:8e:de:90:5f:02:ef:53:e9:00:5f:21:18:7f:6c:71:60:f2:
         e1:11:7e:16:39:c2:58:c6:01:79:1b:38:5a:f3:65:38:ce:e3:
         05:0a:89:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:17:14 2025 by rpki-client