Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138302e302f32332d3234203d3e203238333036.roa
File:                     3137372e39312e3138302e302f32332d3234203d3e203238333036.roa (raw, json)
Hash identifier:          FZFZR7lULL7HCC2LTzVFmJaPt9YYhn5e/TAvUtjwxP8=
Subject key identifier:   E6:DA:54:8A:FA:2F:73:A2:5D:E4:CE:E9:A7:0B:BA:40:D8:10:96:B1
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       2D679F01E6C17219BDCE8CAB42CE9E6A555EF730
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138302e302f32332d3234203d3e203238333036.roa
Signing time:             Wed 15 Jan 2025 04:50:31 +0000
ROA not before:           Wed 15 Jan 2025 04:45:31 +0000
ROA not after:            Wed 14 Jan 2026 04:50:31 +0000
asID:                     28306
IP address blocks:        177.91.180.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:67:9f:01:e6:c1:72:19:bd:ce:8c:ab:42:ce:9e:6a:55:5e:f7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jan 15 04:45:31 2025 GMT
            Not After : Jan 14 04:50:31 2026 GMT
        Subject: CN=E6DA548AFA2F73A25DE4CEE9A70BBA40D81096B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:79:87:57:cf:fd:69:3d:3d:e8:82:5c:54:
                    c3:d4:5a:21:1c:bf:ae:f9:6b:a0:66:73:3a:cf:cc:
                    ff:09:19:54:1f:1f:3a:4d:12:6d:3f:43:17:1a:24:
                    d8:da:92:4b:4f:6b:99:f8:08:b1:68:80:f5:0b:18:
                    e7:df:41:48:34:66:eb:9a:98:e8:8b:58:84:4d:46:
                    15:c7:2b:33:99:f1:5f:e3:ca:5f:c1:01:f4:09:8e:
                    88:5e:47:c2:a8:58:a6:bd:34:c4:15:15:e3:17:01:
                    ae:10:a9:1a:0c:9c:3b:4c:f0:b2:e5:65:2e:b8:58:
                    a3:df:97:50:b1:66:80:8c:af:6b:49:ce:1d:ff:13:
                    10:77:df:de:5f:31:f7:ab:2f:1f:3f:2a:14:3b:e4:
                    78:b8:d9:e2:37:56:a4:d1:00:c2:7f:e0:b0:b1:84:
                    b1:74:b4:53:4d:0b:16:f0:a7:b6:a0:b4:4c:73:bf:
                    7e:d6:93:8a:10:70:38:d7:09:8b:0d:26:ee:c9:2c:
                    91:73:b0:47:8a:44:b1:86:b6:56:c7:1f:c5:1a:22:
                    6e:ac:f6:b8:22:72:6e:69:13:4a:19:5c:65:5e:e3:
                    6c:d4:3e:76:23:5f:91:cc:a7:8b:d9:1c:1a:3c:f3:
                    c4:b8:5c:d6:7d:86:03:5d:39:d8:d3:44:c0:8a:3f:
                    cb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DA:54:8A:FA:2F:73:A2:5D:E4:CE:E9:A7:0B:BA:40:D8:10:96:B1
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138302e302f32332d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:ae:87:49:0c:b3:67:aa:ad:83:3a:b8:d3:17:65:05:66:cc:
         1e:a6:a1:da:d8:5b:6b:79:7e:81:ba:e2:90:52:9b:02:3b:80:
         39:df:53:f4:7b:ca:c6:92:e1:63:f1:be:fc:7d:be:15:a3:38:
         21:ca:8a:31:36:6b:49:0f:49:d3:ef:94:79:3a:95:1a:74:29:
         0a:60:fe:1d:b6:78:4c:e9:17:6e:fb:ee:9c:b5:8d:82:91:13:
         d9:d7:10:97:f9:71:9e:22:23:ca:d0:38:1f:84:d9:05:85:92:
         65:90:da:ac:20:90:65:32:66:00:15:2b:26:98:27:54:4a:f2:
         d2:3b:f5:0e:e4:61:db:38:d7:a5:e6:c9:ba:16:03:0d:4a:ce:
         53:88:49:e8:60:05:ff:12:cc:11:56:b0:24:1a:17:26:a6:ed:
         bc:33:37:e2:9f:9b:2e:2f:38:2b:22:d1:13:97:fd:84:59:8f:
         b9:76:66:bc:8b:dd:5c:0e:cb:99:0f:93:b1:74:71:dc:9b:af:
         e5:8d:31:be:ba:45:10:17:76:75:d7:79:97:8a:2e:1c:94:11:
         ee:b3:65:23:04:e9:58:0e:42:d5:3e:42:0e:af:5d:ec:d2:36:
         e5:31:64:ec:9a:f4:4b:75:95:8e:99:2d:b3:f8:a0:9e:f9:5b:
         bb:31:90:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:09:29 2025 by rpki-client