Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3137362e302f32302d3230203d3e203238333036.roa
File:                     3137372e39312e3137362e302f32302d3230203d3e203238333036.roa (raw, json)
Hash identifier:          B1pzFKzuATISJW5aL4rqXiHqOuxbEKfSQwIQts47O1Y=
Subject key identifier:   22:0D:17:CD:97:58:75:23:91:33:DE:C5:48:60:97:49:EB:80:78:43
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       295D248C890804C24039DEEA8C64DFD290654C9F
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3137362e302f32302d3230203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:14 +0000
ROA not before:           Tue 25 Jun 2024 15:16:14 +0000
ROA not after:            Tue 24 Jun 2025 15:21:14 +0000
asID:                     28306
IP address blocks:        177.91.176.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5d:24:8c:89:08:04:c2:40:39:de:ea:8c:64:df:d2:90:65:4c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:14 2024 GMT
            Not After : Jun 24 15:21:14 2025 GMT
        Subject: CN=220D17CD975875239133DEC548609749EB807843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e0:d0:48:75:fb:7f:b5:b3:66:b2:bb:bf:82:
                    9e:de:2a:9a:8c:6b:38:94:3f:3f:2c:1b:66:07:a9:
                    65:d5:3f:89:63:36:80:67:cd:e0:fb:70:2b:3f:1f:
                    ca:37:ca:3c:bd:07:94:04:23:3a:82:9e:48:7c:a9:
                    bd:d6:d7:00:00:6d:75:eb:70:9c:99:7a:f0:a2:5f:
                    a6:38:b4:3f:8d:8b:e2:53:63:9e:da:25:ba:2f:b7:
                    7d:15:76:a1:7e:c5:0c:06:93:79:98:dd:52:62:0b:
                    65:0a:27:84:9a:be:0a:c6:e4:b9:a9:53:22:87:dc:
                    34:50:89:48:f9:9a:6d:c6:de:41:7a:fa:36:e0:89:
                    8a:1d:b2:e6:55:3e:1c:91:70:50:ae:18:a3:14:b9:
                    e7:e2:28:ae:96:50:16:4b:44:e3:f8:7c:31:c3:de:
                    8b:85:ed:6f:09:e4:1f:26:c9:8c:d2:70:2e:36:eb:
                    7d:ed:f0:b0:ce:42:41:ef:ad:9d:51:2f:ce:fd:12:
                    25:5b:23:7d:f1:60:33:de:15:e6:21:a6:85:1e:c1:
                    52:06:94:1f:23:61:0d:74:a1:54:f6:cb:ce:13:1c:
                    00:16:42:db:a3:d5:1d:56:01:0a:e0:be:75:1e:2e:
                    e1:78:57:be:6f:4e:d6:5d:d1:30:57:93:41:71:75:
                    58:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0D:17:CD:97:58:75:23:91:33:DE:C5:48:60:97:49:EB:80:78:43
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3137362e302f32302d3230203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:de:c9:b1:d0:08:ab:ae:72:b1:6f:0f:48:b7:30:b9:48:40:
         e2:6e:24:c2:ad:bb:bc:68:ba:a7:06:49:61:6a:17:d9:04:a3:
         19:2e:7d:17:14:91:35:3b:b7:ed:22:11:c3:39:87:b3:c1:88:
         5a:9e:e6:b0:f9:42:8f:73:5e:d4:e3:b7:90:69:3e:87:1d:a3:
         9d:6d:a2:98:fe:73:47:3b:bc:c6:2e:9b:f1:9c:3a:df:3b:f0:
         91:e2:3e:bb:b4:b4:79:72:df:30:5d:c0:fd:a7:d3:0c:e4:45:
         09:a9:23:d5:45:47:56:8d:cb:34:ae:bf:fa:ae:66:ee:b2:51:
         71:01:b8:74:be:51:9a:8a:69:b6:ad:91:60:b7:58:43:1b:ae:
         ce:14:39:ab:39:27:12:f6:ab:7d:63:21:b1:f0:db:20:78:34:
         78:59:b8:8b:92:2b:99:78:b5:ba:36:46:51:af:3d:e7:d9:d6:
         90:df:47:94:95:99:63:69:d7:76:ad:1b:24:74:90:c2:5f:2d:
         f3:84:d2:1e:b1:f0:2f:bc:ff:ed:e6:f1:63:ab:61:02:87:22:
         5a:b3:67:3b:33:11:21:cb:ad:37:ba:73:59:9c:fb:b3:1e:86:
         39:69:50:2b:33:0e:38:70:2c:58:f8:15:40:04:ca:1c:e4:c6:
         5b:f0:a9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:29 2025 by rpki-client