Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32342d3234203d3e20323632353033.roa
File:                     3137372e36362e3139322e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          KFuiEibrRa4yyKkutFHiI0WDXS1/FTLWhIMvmqFMj4w=
Subject key identifier:   42:53:A2:95:81:F3:7E:09:73:98:17:3F:E9:57:66:0D:21:AA:72:6A
Certificate issuer:       /CN=A5A5E563B461C001EA666874188010075B6CA70D
Certificate serial:       29314EDC7071E73E858A9A9E8EC604DE3E6AC34B
Authority key identifier: A5:A5:E5:63:B4:61:C0:01:EA:66:68:74:18:80:10:07:5B:6C:A7:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A5E563B461C001EA666874188010075B6CA70D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32342d3234203d3e20323632353033.roa
Signing time:             Sun 05 Jan 2025 18:58:44 +0000
ROA not before:           Sun 05 Jan 2025 18:53:44 +0000
ROA not after:            Sun 04 Jan 2026 18:58:44 +0000
asID:                     262503
IP address blocks:        177.66.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:31:4e:dc:70:71:e7:3e:85:8a:9a:9e:8e:c6:04:de:3e:6a:c3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A5E563B461C001EA666874188010075B6CA70D
        Validity
            Not Before: Jan  5 18:53:44 2025 GMT
            Not After : Jan  4 18:58:44 2026 GMT
        Subject: CN=4253A29581F37E097398173FE957660D21AA726A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:ac:f1:f5:5d:a9:85:10:db:a4:9f:94:d8:
                    ae:97:ac:14:d4:bd:62:c6:c8:dd:09:5f:c0:ff:1d:
                    68:7d:2a:54:68:c4:19:e9:f7:f0:ea:28:a2:e1:c9:
                    4c:0d:d6:87:9f:a5:14:87:ea:ec:57:22:81:de:9a:
                    44:45:ba:b0:4c:70:a2:e3:5a:87:29:ef:a7:d2:80:
                    9e:bd:f4:fa:dc:d4:54:3d:d1:01:c5:71:3b:0e:a8:
                    d5:ab:e7:03:12:a4:5c:23:fa:47:be:bd:c2:93:ac:
                    6f:d8:18:fd:b9:0a:6c:b6:e2:f4:6d:a4:9a:57:c9:
                    c9:9d:16:23:51:0c:28:cf:a4:d2:d3:30:45:a8:28:
                    96:7a:02:d4:93:84:f1:a5:ee:96:88:55:50:32:60:
                    78:c7:0e:60:2e:85:8c:c7:1d:df:80:97:a5:7d:b7:
                    d7:36:5e:49:43:e3:c4:ae:7d:41:7f:99:13:e9:b1:
                    bf:0d:ff:a6:e4:e7:82:6c:9b:b6:18:64:e2:66:1a:
                    8d:77:90:a7:97:30:69:4c:ec:c7:10:b0:a2:b0:57:
                    f2:00:a9:fe:01:b6:bf:1f:40:60:a1:8e:29:d7:40:
                    e0:94:f4:a4:65:85:34:97:e5:8d:87:0b:52:6c:e1:
                    43:14:10:58:28:d7:b1:4a:a0:0e:2f:71:76:85:2e:
                    00:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:53:A2:95:81:F3:7E:09:73:98:17:3F:E9:57:66:0D:21:AA:72:6A
            X509v3 Authority Key Identifier:
                keyid:A5:A5:E5:63:B4:61:C0:01:EA:66:68:74:18:80:10:07:5B:6C:A7:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/A5A5E563B461C001EA666874188010075B6CA70D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A5E563B461C001EA666874188010075B6CA70D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:67:1c:60:95:d6:27:8a:66:23:da:d8:dd:3e:6b:3a:cf:ab:
         a3:99:72:78:05:03:0b:91:02:d1:74:66:43:5b:4b:f8:6e:41:
         05:70:cf:fc:8b:fb:df:81:a6:dc:b6:b4:a6:fa:8c:73:1e:a4:
         fa:e4:59:64:18:bd:2a:0b:5a:e5:dc:72:73:99:9b:e4:8b:19:
         03:3c:77:99:53:a8:1f:5b:89:ee:47:20:18:6a:e1:11:55:0f:
         43:68:31:36:09:ea:03:38:04:35:70:93:be:b7:aa:93:23:0a:
         be:c0:d7:3f:0e:1e:29:eb:a4:5d:3e:52:6b:27:82:30:4e:13:
         8e:61:43:d4:8f:fc:72:5e:10:24:27:41:63:7c:4a:c4:71:90:
         ef:1d:ae:a4:e7:51:89:76:30:97:a0:6c:bf:44:d7:f7:35:11:
         2f:b8:8e:b6:1a:27:1e:73:44:16:11:42:8b:73:be:cc:a9:16:
         42:4d:aa:ac:5a:fd:c6:5f:15:c3:16:2d:9d:ce:ac:20:5c:25:
         e9:96:32:bd:18:de:9b:73:d8:b1:b0:a3:61:31:de:4f:0c:5e:
         6e:65:2c:80:97:08:52:6b:dc:4f:4d:89:84:de:18:04:da:33:
         00:c7:9d:cc:e0:e2:1a:6f:62:03:58:03:43:71:aa:00:22:f5:
         44:08:ae:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:48:54 2025 by rpki-client