Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139332e302f32342d3234203d3e20323632353033.roa
File:                     3137372e36362e3139332e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          Y+1D9+dvuWlFVVd9zUMeIQNVDCuSc6vbKSpPeQE7Ayc=
Subject key identifier:   D5:04:5B:04:AA:BA:7F:84:FF:0F:76:08:E5:D6:78:ED:F2:E7:D1:D5
Certificate issuer:       /CN=A5A5E563B461C001EA666874188010075B6CA70D
Certificate serial:       7E06FD80954F112C9AC5B5CA2010DD7DC5B39064
Authority key identifier: A5:A5:E5:63:B4:61:C0:01:EA:66:68:74:18:80:10:07:5B:6C:A7:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A5E563B461C001EA666874188010075B6CA70D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139332e302f32342d3234203d3e20323632353033.roa
Signing time:             Sun 05 Jan 2025 18:58:47 +0000
ROA not before:           Sun 05 Jan 2025 18:53:47 +0000
ROA not after:            Sun 04 Jan 2026 18:58:47 +0000
asID:                     262503
IP address blocks:        177.66.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:06:fd:80:95:4f:11:2c:9a:c5:b5:ca:20:10:dd:7d:c5:b3:90:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A5E563B461C001EA666874188010075B6CA70D
        Validity
            Not Before: Jan  5 18:53:47 2025 GMT
            Not After : Jan  4 18:58:47 2026 GMT
        Subject: CN=D5045B04AABA7F84FF0F7608E5D678EDF2E7D1D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:62:9a:9c:c8:19:70:dd:39:39:13:6f:fa:
                    a0:15:b9:a3:5a:ca:f0:f3:84:bc:b8:ee:19:57:c3:
                    44:19:87:95:d4:6e:88:9e:fd:e9:bf:0a:38:0b:fd:
                    7d:24:2a:c1:b1:b8:98:1e:68:8a:ce:96:ab:a0:f1:
                    a4:eb:2f:c6:7f:a2:19:1e:5d:05:b5:5a:82:79:f5:
                    5f:0d:36:e6:62:46:19:2d:c5:51:aa:7f:df:0b:4c:
                    f0:b1:90:d5:93:36:e4:2e:4e:70:3e:f3:2d:68:29:
                    51:9c:75:44:86:c5:2a:be:cc:71:0c:de:1f:03:1a:
                    b8:84:b3:e0:4a:a7:93:ac:08:c7:cb:e6:8b:43:03:
                    75:d6:74:e8:ff:e0:db:39:c5:2c:a7:85:c8:3a:12:
                    fb:dd:1e:32:29:02:bb:23:bf:a8:6b:9a:cc:2f:19:
                    7b:3c:43:4b:31:f8:77:61:83:f6:a2:86:56:2e:12:
                    f1:2e:85:72:39:a4:17:03:65:2b:87:5a:af:6d:55:
                    1c:fa:0b:e0:53:5c:04:c6:4f:8d:93:93:c3:06:ab:
                    10:47:f2:74:38:1f:de:60:c7:b2:72:30:68:4c:04:
                    dc:d0:40:76:15:e8:0c:e3:15:85:c7:a8:37:0e:80:
                    26:36:36:16:5b:1e:8a:d4:f1:d2:88:14:42:a0:d0:
                    f9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:04:5B:04:AA:BA:7F:84:FF:0F:76:08:E5:D6:78:ED:F2:E7:D1:D5
            X509v3 Authority Key Identifier:
                keyid:A5:A5:E5:63:B4:61:C0:01:EA:66:68:74:18:80:10:07:5B:6C:A7:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/A5A5E563B461C001EA666874188010075B6CA70D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A5E563B461C001EA666874188010075B6CA70D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139332e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:bf:44:07:24:bd:42:e8:e7:48:d2:c6:cb:55:36:2a:e3:2b:
         f7:ef:60:56:19:17:71:6f:5c:39:e4:66:c7:a0:e7:1a:0b:b1:
         1b:2e:ad:e6:f1:3b:e1:69:ef:5f:2b:c8:28:4f:29:bb:be:f8:
         57:7d:c4:b2:9a:5a:c7:7c:60:53:90:4d:96:69:f2:0c:dc:03:
         0d:1c:aa:2f:a2:18:c2:de:ce:65:43:7b:56:7c:8a:cc:cd:ed:
         a8:1b:ce:ad:9a:47:68:e5:1a:af:29:bb:49:be:33:6f:d7:6b:
         f5:ae:c8:c7:f0:e5:e9:3d:fb:15:7a:e9:db:d5:b7:d9:e3:a2:
         4a:95:98:4a:7f:01:45:e5:61:aa:da:41:de:13:c6:82:e2:bd:
         23:9f:89:be:46:d1:5f:22:30:88:cc:06:68:c8:3a:89:f6:81:
         b1:f7:13:1f:b0:78:73:ef:2c:52:3c:0a:67:2b:a3:7e:92:b4:
         3d:3f:0a:a2:59:d5:32:3b:7a:a0:41:47:49:ba:74:0f:d7:5f:
         be:31:c1:50:08:a1:b6:3c:1a:d3:98:2c:26:25:fd:34:56:44:
         1b:84:84:89:ca:e6:fd:48:97:ba:8a:0c:1b:b3:bf:4f:d6:e5:
         5e:74:87:3d:18:e4:70:8d:38:80:9b:92:a8:7f:5b:5d:98:f6:
         59:e8:6e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:53:52 2025 by rpki-client