Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hfcH6aRRCNUeoRXHYnQNkNM8XQyBMpvsr3Rm3cAfCSB/0/3137372e37352e34302e302f32312d3234203d3e203533303430.roa
File:                     3137372e37352e34302e302f32312d3234203d3e203533303430.roa (raw, json)
Hash identifier:          +usPaJgFK6IAHqpmR2Ty7pl2P3JibJXX42COU682x0c=
Subject key identifier:   DD:91:9C:31:F1:B4:C6:0F:FF:9E:A3:83:E0:7B:EC:E8:55:BA:46:D1
Certificate issuer:       /CN=7A802A6EBF1AA8211D8D3736A55331593F4FC244
Certificate serial:       0379E94ACD03ED4F7849F7031B34AE75A9B2E31C
Authority key identifier: 7A:80:2A:6E:BF:1A:A8:21:1D:8D:37:36:A5:53:31:59:3F:4F:C2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A802A6EBF1AA8211D8D3736A55331593F4FC244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hfcH6aRRCNUeoRXHYnQNkNM8XQyBMpvsr3Rm3cAfCSB/0/3137372e37352e34302e302f32312d3234203d3e203533303430.roa
Signing time:             Tue 18 Mar 2025 19:23:40 +0000
ROA not before:           Tue 18 Mar 2025 19:18:40 +0000
ROA not after:            Tue 17 Mar 2026 19:23:40 +0000
asID:                     53040
IP address blocks:        177.75.40.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:79:e9:4a:cd:03:ed:4f:78:49:f7:03:1b:34:ae:75:a9:b2:e3:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A802A6EBF1AA8211D8D3736A55331593F4FC244
        Validity
            Not Before: Mar 18 19:18:40 2025 GMT
            Not After : Mar 17 19:23:40 2026 GMT
        Subject: CN=DD919C31F1B4C60FFF9EA383E07BECE855BA46D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:b2:90:0d:51:5b:7c:92:94:8c:e6:76:73:
                    4c:b6:1e:1d:a3:66:68:a5:1a:06:0b:f8:0e:e7:3d:
                    d3:0b:d5:14:85:d0:d8:16:ed:36:dc:81:5d:f7:c3:
                    d3:d3:c8:df:c8:f4:72:04:e8:3f:c3:7e:6d:0e:bc:
                    7f:d3:14:5e:5e:07:bc:b3:65:8d:8a:4e:bf:6f:80:
                    4b:2d:6c:80:24:30:39:3e:4a:11:03:04:15:1f:40:
                    fc:1a:f5:d1:91:31:2d:d8:66:db:16:96:01:20:86:
                    00:77:76:56:00:90:2f:7e:4f:8d:04:cb:44:a7:59:
                    71:d7:e5:3a:35:f2:21:1c:33:08:c3:c6:2b:c9:fc:
                    3c:d7:b5:41:83:7c:2e:83:68:60:b6:d1:3b:dd:12:
                    1e:e4:62:f5:44:cf:62:4f:38:69:46:a3:43:4d:45:
                    e1:f1:f7:75:11:2b:ff:b0:81:55:e2:b0:82:c3:60:
                    b4:92:9e:fb:72:86:19:6c:fb:7d:95:72:0f:8d:b6:
                    f3:ba:ef:ff:4f:c9:b7:c3:2f:21:87:0e:01:63:40:
                    aa:98:ea:1c:e7:cc:1b:f3:28:2e:db:ae:bb:b0:9b:
                    5a:17:61:07:78:8c:a2:be:2c:29:b5:fc:59:60:c3:
                    fc:a5:c6:f5:3b:dc:cd:82:55:75:d0:52:db:18:78:
                    ba:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:91:9C:31:F1:B4:C6:0F:FF:9E:A3:83:E0:7B:EC:E8:55:BA:46:D1
            X509v3 Authority Key Identifier:
                keyid:7A:80:2A:6E:BF:1A:A8:21:1D:8D:37:36:A5:53:31:59:3F:4F:C2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hfcH6aRRCNUeoRXHYnQNkNM8XQyBMpvsr3Rm3cAfCSB/0/7A802A6EBF1AA8211D8D3736A55331593F4FC244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A802A6EBF1AA8211D8D3736A55331593F4FC244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hfcH6aRRCNUeoRXHYnQNkNM8XQyBMpvsr3Rm3cAfCSB/0/3137372e37352e34302e302f32312d3234203d3e203533303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:69:24:09:5f:46:21:00:f0:25:d8:8f:c4:98:2c:dc:90:28:
         3b:ea:f2:48:a9:bc:c9:d6:19:30:ab:cf:d5:38:3a:25:10:b4:
         4e:8d:44:4c:90:2e:03:f8:72:0c:77:69:f8:96:6f:06:a3:57:
         90:19:50:9e:58:33:2d:08:ac:69:ff:db:5a:bc:ab:c8:fd:ac:
         69:1a:b4:39:86:24:aa:a5:f8:c0:cd:b5:e5:7b:a5:d1:f4:f1:
         99:42:7f:5c:77:b1:31:fe:70:54:96:e0:cd:4b:36:86:ce:87:
         61:cb:b1:4a:08:7a:91:ac:31:6a:e5:17:1c:8e:0b:56:3c:df:
         b8:47:45:2a:bd:90:fd:07:90:ad:f3:97:9b:02:10:d6:29:45:
         16:2c:42:76:2e:5e:3d:88:bd:57:31:2c:5f:ca:3c:14:0b:b0:
         67:e0:28:1c:eb:0a:e8:37:18:f9:44:bb:8f:97:a4:e0:39:b4:
         a0:cd:73:44:3f:2e:ee:8d:df:83:a7:2d:5f:ad:d6:61:9d:eb:
         e6:46:e3:3a:a6:9e:b8:12:56:a9:73:9c:18:f3:28:5a:90:bf:
         e8:2c:00:28:3e:c3:e3:8c:5a:70:45:f7:f1:9b:7c:b9:92:67:
         eb:13:3c:c1:e7:ed:af:e0:e4:f3:b9:b8:11:87:92:c2:d5:00:
         c9:09:e9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:09:25 2025 by rpki-client