Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137372e37312e33322e302f32302d3234203d3e203533303232.roa
File:                     3137372e37312e33322e302f32302d3234203d3e203533303232.roa (raw, json)
Hash identifier:          zsmNOs/REh8y4q61SIXGYIfZm3+Vgq+87qt4Rk/IYFM=
Subject key identifier:   C6:7D:D0:83:A6:E1:80:B5:95:18:21:46:FE:FB:74:29:AF:CC:C0:6E
Certificate issuer:       /CN=93E4BA76EC60DA98DE98103D4C88131B429F3326
Certificate serial:       43E74C54EE9AA28183BEEDAB6D54F035E2635BE6
Authority key identifier: 93:E4:BA:76:EC:60:DA:98:DE:98:10:3D:4C:88:13:1B:42:9F:33:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137372e37312e33322e302f32302d3234203d3e203533303232.roa
Signing time:             Thu 06 Mar 2025 10:36:52 +0000
ROA not before:           Thu 06 Mar 2025 10:31:52 +0000
ROA not after:            Thu 05 Mar 2026 10:36:52 +0000
asID:                     53022
IP address blocks:        177.71.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e7:4c:54:ee:9a:a2:81:83:be:ed:ab:6d:54:f0:35:e2:63:5b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E4BA76EC60DA98DE98103D4C88131B429F3326
        Validity
            Not Before: Mar  6 10:31:52 2025 GMT
            Not After : Mar  5 10:36:52 2026 GMT
        Subject: CN=C67DD083A6E180B595182146FEFB7429AFCCC06E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:72:d4:da:f1:2d:17:89:0e:99:5e:50:25:d9:
                    5c:b7:83:5a:6d:ce:6f:2c:1c:e1:fa:b9:03:b0:b9:
                    7e:5f:da:3e:6f:b0:0d:28:8c:ad:2a:45:b3:f9:1b:
                    0d:ab:4e:ac:d7:c8:b0:63:21:64:80:54:6f:ca:ca:
                    55:34:b8:72:ab:bd:37:07:7c:e6:1b:c4:f0:b1:ad:
                    3e:e6:a0:6b:17:a1:79:b0:1b:6e:16:34:11:ac:a3:
                    3d:bf:b8:96:25:ed:be:07:40:57:09:10:d1:d3:2a:
                    a3:c4:05:9a:12:b8:46:05:87:81:96:11:1f:e7:b2:
                    30:27:a4:83:8d:33:22:12:d8:89:95:d8:c9:2b:c8:
                    bb:e6:8e:d2:85:50:ee:39:c4:c9:c5:2f:95:f0:36:
                    e8:dc:f1:43:01:93:06:27:ae:58:8b:d0:df:72:0e:
                    d4:6a:b5:4d:10:e9:30:a1:a5:f0:cb:b8:74:17:af:
                    38:e1:88:eb:da:ba:c0:6c:a6:3a:94:f9:ac:a2:a8:
                    37:40:8e:d9:a5:17:0c:d5:fa:f2:e7:54:d6:b4:ef:
                    c7:9c:42:5e:8a:cf:ba:cd:cb:0f:2e:c3:78:3c:44:
                    09:39:a4:b5:f5:a3:55:69:d3:62:66:c6:5b:d4:d3:
                    d0:d2:ce:37:e3:32:8e:52:10:e6:5c:48:68:9e:31:
                    24:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7D:D0:83:A6:E1:80:B5:95:18:21:46:FE:FB:74:29:AF:CC:C0:6E
            X509v3 Authority Key Identifier:
                keyid:93:E4:BA:76:EC:60:DA:98:DE:98:10:3D:4C:88:13:1B:42:9F:33:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137372e37312e33322e302f32302d3234203d3e203533303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:14:f9:15:58:aa:e5:d3:81:a6:1b:71:0b:3b:2f:8a:8b:8e:
         a1:a3:5c:60:c4:9b:14:77:fc:7c:6d:ce:d1:80:88:2f:37:b4:
         c8:3b:a0:dd:5f:a0:07:ab:e8:c5:74:cc:a1:3c:7c:ad:68:5e:
         b1:f6:8b:15:ba:b8:fa:f7:d6:a6:1e:a2:c9:4c:9d:a7:5d:75:
         b9:41:91:9c:90:91:80:a4:93:bc:68:be:4c:a5:ea:20:b1:08:
         20:40:35:05:d8:85:f9:69:41:76:66:f8:df:a1:81:59:7d:6a:
         22:1b:f8:3e:2d:69:2a:7d:7e:63:fb:32:2f:8b:74:cd:59:43:
         35:b2:30:1e:83:dd:53:9e:2c:b3:a0:12:e2:36:6b:d5:64:80:
         76:95:c3:60:83:7b:a9:93:3e:fc:14:34:67:e9:27:50:3a:be:
         7c:52:4f:28:1a:bb:fe:89:f9:31:a1:b8:a5:22:cb:82:0e:c8:
         90:ea:00:b0:c3:e7:51:32:78:18:53:1e:1a:9d:31:5e:54:02:
         64:3a:db:d9:f4:cd:13:06:36:28:68:2e:55:5c:8f:8a:54:f4:
         19:62:0f:65:1b:43:fe:d5:23:64:07:a9:d6:78:c2:78:01:d3:
         31:88:76:81:30:93:59:8b:31:a9:6c:f5:f6:a7:2d:41:8c:ae:
         84:e2:41:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:43 2025 by rpki-client