Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e31342e302f32342d3332203d3e20323632353839.roa
File:                     3137372e3132362e31342e302f32342d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          pkg+8jgx6HTmB59g7I76tZKWYxkiCY+Uavp3zT4S+J0=
Subject key identifier:   46:31:6D:38:47:FF:7D:0A:D6:D6:66:EF:51:E8:0F:91:03:DB:F9:25
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       4E66F39E84C9BFBBCAEA405E14C03EC6332F16EE
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e31342e302f32342d3332203d3e20323632353839.roa
Signing time:             Fri 07 Mar 2025 20:05:34 +0000
ROA not before:           Fri 07 Mar 2025 20:00:34 +0000
ROA not after:            Fri 06 Mar 2026 20:05:34 +0000
asID:                     262589
IP address blocks:        177.126.14.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:66:f3:9e:84:c9:bf:bb:ca:ea:40:5e:14:c0:3e:c6:33:2f:16:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 20:00:34 2025 GMT
            Not After : Mar  6 20:05:34 2026 GMT
        Subject: CN=46316D3847FF7D0AD6D666EF51E80F9103DBF925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:d6:2f:bb:60:a8:12:c9:66:62:9f:22:bb:
                    d0:d7:6d:fc:ee:cd:75:bc:0b:f0:48:34:c7:95:b8:
                    a1:76:0a:72:54:77:c1:62:14:65:d5:97:30:dc:ae:
                    94:09:89:4a:42:a7:34:f1:34:ec:72:ef:29:3f:48:
                    7f:d4:a3:60:77:3f:20:3f:72:f2:47:26:86:35:2d:
                    48:6e:88:b3:ba:38:ca:90:27:e8:e0:61:0e:e5:19:
                    f8:f8:98:aa:4b:34:68:ad:4b:0b:f0:05:c2:54:96:
                    42:84:d9:e9:1d:47:45:c6:ee:91:9f:ef:30:d8:14:
                    1a:fa:1d:3c:b3:4f:dd:69:f6:c1:18:9d:ba:05:3f:
                    49:30:13:22:fc:a6:29:b1:88:aa:e6:44:bf:3c:d7:
                    05:c4:35:f8:2e:48:7d:a4:0f:e6:23:58:4f:95:b3:
                    8b:17:c7:9d:85:11:c5:eb:25:04:ef:21:f9:85:0a:
                    90:b2:d0:4d:3c:f3:e6:10:92:d8:74:06:52:a3:26:
                    8d:e2:eb:02:ea:2f:bf:16:50:72:b6:c7:52:d1:d0:
                    12:5a:34:08:cf:92:aa:59:b5:10:58:6a:5b:a9:bb:
                    a9:bf:d4:8b:fa:dd:27:47:48:b0:4d:dd:f4:33:67:
                    b9:f8:ac:6e:35:45:7d:fc:5c:5e:41:76:3c:74:fe:
                    94:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:31:6D:38:47:FF:7D:0A:D6:D6:66:EF:51:E8:0F:91:03:DB:F9:25
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e31342e302f32342d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:f4:da:16:e3:dc:e6:06:42:e1:f7:43:76:f4:a9:08:4c:0d:
         ae:90:df:17:84:82:91:5e:f4:c0:70:6a:1a:4f:13:bc:b0:f1:
         18:bf:cf:af:a3:94:93:c8:0a:13:c9:b1:b8:44:b9:0a:7e:3b:
         39:f8:ba:f0:bd:69:96:ad:34:a8:41:21:ab:88:31:d4:d4:ac:
         b7:13:55:8e:cb:cb:b5:e5:f9:b7:24:b4:e1:58:61:af:9b:7d:
         d3:e0:27:c4:7e:66:f1:92:77:c4:ad:0e:e7:8e:21:9e:62:46:
         e0:7a:9c:5a:c4:d2:c6:96:3c:8d:66:09:18:6a:ff:21:04:e6:
         11:d5:0e:bf:d0:d4:9c:84:21:dc:30:3a:ae:c6:7c:27:d3:85:
         ac:58:41:90:98:2d:11:88:b2:f0:09:ea:a3:c6:ea:28:57:5b:
         ab:a1:af:81:0b:36:75:f5:69:5d:a4:1d:92:1e:7a:5d:24:a4:
         ee:ba:80:f2:7b:02:ee:f4:d7:6f:bf:86:09:51:d5:38:fb:82:
         51:05:3d:c8:81:ab:38:e9:dd:64:1e:b9:08:b7:80:74:ed:cb:
         94:eb:0a:aa:ab:62:3e:af:85:88:51:b0:01:50:e0:ce:8f:3a:
         d3:78:8f:64:17:46:fe:5d:7a:4e:cf:0c:f0:9a:51:01:1e:ac:
         94:ae:86:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:43:30 2025 by rpki-client