Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3137372e302f32342d3234203d3e203238333036.roa
File:                     3137372e39312e3137372e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          ALtkpnOVehJAa+5hrmFKkFufw4IE6qzcQ1YBMwwog3k=
Subject key identifier:   35:21:62:A4:F7:EA:83:17:7F:0B:09:FC:DA:1B:C2:DE:E0:2A:F3:78
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       562F96EFE6B52C8E66E5F5899CF54F2C190FB808
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3137372e302f32342d3234203d3e203238333036.roa
Signing time:             Wed 15 Jan 2025 04:49:45 +0000
ROA not before:           Wed 15 Jan 2025 04:44:45 +0000
ROA not after:            Wed 14 Jan 2026 04:49:45 +0000
asID:                     28306
IP address blocks:        177.91.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2f:96:ef:e6:b5:2c:8e:66:e5:f5:89:9c:f5:4f:2c:19:0f:b8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jan 15 04:44:45 2025 GMT
            Not After : Jan 14 04:49:45 2026 GMT
        Subject: CN=352162A4F7EA83177F0B09FCDA1BC2DEE02AF378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7a:4c:b6:28:5e:78:be:7b:99:ca:dd:e5:0b:
                    93:95:f9:2f:c3:70:51:dd:b2:cf:98:d7:ec:81:8f:
                    61:cf:59:6d:81:1b:9f:fa:3c:6f:e9:c6:36:82:e6:
                    06:2e:39:9e:22:86:54:e7:1e:62:93:75:0f:34:a0:
                    0c:46:00:5a:e4:15:96:eb:77:9e:ae:e2:b2:47:a3:
                    14:68:a1:9c:05:a1:c7:99:11:45:19:37:67:94:52:
                    2d:a7:a6:7a:8f:f5:59:21:b3:80:58:99:4f:e4:f1:
                    89:68:40:d7:a9:65:a2:15:e7:92:99:88:e6:13:86:
                    35:67:81:29:be:6f:88:86:0c:6a:6d:59:d8:91:fc:
                    1f:f9:85:82:e2:ac:ee:27:ad:f1:15:91:77:14:75:
                    ee:5d:f1:80:72:68:5d:11:eb:f9:03:5f:85:fe:64:
                    9c:a9:07:91:b4:5d:7d:1f:23:3d:0b:55:e6:30:18:
                    78:b3:4c:14:90:f2:d1:aa:e7:1b:98:c2:f6:c5:cb:
                    17:38:27:7b:7f:c2:1b:0d:3b:21:38:81:f8:0b:ca:
                    c1:4c:00:fd:e4:5d:e5:87:7a:7e:78:54:68:9e:40:
                    44:96:03:b9:ac:c0:f8:7d:24:d0:fd:19:19:61:bf:
                    3a:71:19:95:8f:24:03:56:7b:4e:0d:cc:60:48:99:
                    8e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:21:62:A4:F7:EA:83:17:7F:0B:09:FC:DA:1B:C2:DE:E0:2A:F3:78
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3137372e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:fc:8f:ec:e7:24:62:8f:87:de:8e:2c:ee:0a:ad:49:bc:82:
         03:9b:a4:d5:61:06:24:aa:47:99:95:b3:cc:48:f9:3d:ff:e0:
         bc:df:d9:cb:1b:76:d8:38:59:8f:da:3c:49:83:10:e4:fc:76:
         c3:98:38:15:99:62:08:f9:eb:2c:ba:3b:23:50:bf:8e:07:01:
         8c:5f:87:16:0f:4c:8f:5e:ca:2e:35:c1:f9:58:d4:be:fd:59:
         c8:c9:2a:1d:a9:24:91:8b:ba:10:60:c1:14:c2:1d:c3:48:ec:
         3d:59:e0:74:9a:10:42:52:00:ce:b5:ee:8c:e2:52:21:c1:e5:
         18:b3:e0:9e:7d:eb:9a:28:2c:56:c5:00:fc:bb:2e:ad:6f:4f:
         d0:22:4a:f0:29:f9:2e:a7:ba:9f:fa:dd:ac:3d:62:8f:1c:a8:
         df:01:77:5e:b5:e2:c8:3b:ed:31:03:8f:0c:ff:21:5b:52:89:
         d3:de:da:38:a0:2a:d3:84:ab:3a:f7:05:9b:30:56:fc:2e:ee:
         4c:17:d3:14:42:57:0e:0c:a7:aa:08:fc:ea:3b:81:e9:5c:62:
         ac:9c:75:05:32:10:84:24:a4:21:55:b0:94:26:68:1d:c3:ce:
         a9:eb:2c:ec:f2:16:ea:02:a2:d6:8b:63:96:4c:93:7d:eb:45:
         2a:b9:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:34:26 2025 by rpki-client