Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e322e302f32332d3332203d3e203232333831.roa
File:                     3137372e3132362e322e302f32332d3332203d3e203232333831.roa (raw, json)
Hash identifier:          pjkA2MjSe+gw87X/wt7GAPgUWrEH7SOdyCOni6uMgR0=
Subject key identifier:   19:88:05:1D:F8:CE:25:E8:38:0B:6C:DB:1E:DB:BA:E3:EC:73:E8:A9
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       5684DACEEE7C2760C85ECEC3B7E58B9D5C7903D4
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e322e302f32332d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:09:44 +0000
ROA not before:           Fri 07 Mar 2025 19:04:44 +0000
ROA not after:            Fri 06 Mar 2026 19:09:44 +0000
asID:                     22381
IP address blocks:        177.126.2.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:84:da:ce:ee:7c:27:60:c8:5e:ce:c3:b7:e5:8b:9d:5c:79:03:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:04:44 2025 GMT
            Not After : Mar  6 19:09:44 2026 GMT
        Subject: CN=1988051DF8CE25E8380B6CDB1EDBBAE3EC73E8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:81:0a:b1:25:18:8d:1a:f6:00:4d:84:dd:
                    23:a7:ff:2d:89:51:7c:88:38:3e:40:b5:39:b6:de:
                    0d:69:40:62:cb:2a:47:b3:e6:93:c5:ae:27:0c:d1:
                    2a:6b:08:54:84:71:08:f3:6a:18:d1:fe:a0:e8:a7:
                    9a:e4:64:f9:7d:da:88:24:b7:89:dd:b1:b4:1f:81:
                    73:1d:4c:44:19:63:68:f1:ed:1d:d5:1c:b2:08:dc:
                    3b:60:f2:79:50:a9:b9:b3:7d:04:f4:eb:51:b0:44:
                    20:29:2e:8b:b6:b2:8b:14:e8:31:2b:45:f4:c5:1c:
                    9b:2b:63:ed:74:3a:f4:b2:3c:14:1b:89:9f:13:56:
                    77:eb:e0:20:fc:40:6e:cc:dd:0a:56:21:31:4b:88:
                    fa:d1:ef:6a:35:84:a3:8d:80:57:b9:94:97:f9:94:
                    03:2c:06:76:fc:68:84:86:d5:f7:b2:a8:66:9f:d4:
                    df:8b:c1:84:5b:1a:35:69:df:7a:17:5c:24:33:5c:
                    20:85:7f:46:72:e3:4c:87:6a:93:b2:2d:55:0f:68:
                    3d:26:b1:98:d7:10:f0:8f:b3:8d:2b:bd:cc:5f:b2:
                    23:5a:77:6e:ba:a9:4f:81:3d:4f:fe:3c:8d:b2:c5:
                    04:cc:88:7a:ad:d8:80:7e:3d:0e:1d:2d:9b:81:97:
                    fb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:88:05:1D:F8:CE:25:E8:38:0B:6C:DB:1E:DB:BA:E3:EC:73:E8:A9
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e322e302f32332d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:3f:d4:23:8b:6e:5a:62:a5:99:88:65:ab:f4:93:de:ba:ee:
         db:25:a0:2c:ec:91:50:4a:06:68:3a:9a:da:18:ef:f9:e2:c9:
         c6:1b:aa:12:f3:88:e6:3b:3c:b2:f7:95:64:73:cc:0c:dc:aa:
         57:a2:05:95:0a:6e:e2:1f:d9:ab:35:e7:4b:82:a8:2a:ea:f4:
         ae:15:e2:82:f6:6c:c7:d2:f7:b1:6f:8e:19:00:be:85:d7:3d:
         92:9a:6f:1f:70:22:ac:85:82:76:77:e0:76:bd:3a:dc:3c:67:
         d9:f0:7b:2e:20:3d:58:6f:1b:e5:50:9e:28:f3:72:cf:28:3d:
         5e:95:8b:d2:7f:7d:91:2a:bc:96:fd:ba:9f:fc:ac:7d:38:a3:
         c7:49:22:8d:31:46:c3:d7:7c:05:d9:f8:41:30:9b:b6:5d:5a:
         84:30:8c:20:c6:12:6f:8a:df:6a:d9:ef:14:a1:f1:3c:16:ea:
         8d:0e:dd:9a:f3:ae:29:05:86:cf:16:09:ab:9b:d6:a5:e0:f2:
         af:27:ad:b9:33:c3:a2:d9:28:61:51:c7:8f:04:ec:8b:45:ed:
         e9:f0:f5:22:9d:cd:e4:f8:f1:f0:b4:c8:02:e0:80:f0:ba:5b:
         30:eb:16:5a:c3:f8:4a:96:b1:04:d4:69:77:a0:16:44:fd:ee:
         43:e5:b0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:33:00 2025 by rpki-client