Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3137372e3132362e31302e302f32332d3234203d3e20323635333033.roa
File:                     3137372e3132362e31302e302f32332d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          8PI3UAkotcsWPcXpukt0F0H40e40+pnj09b8SFe7c0Y=
Subject key identifier:   09:81:71:71:6A:A3:02:76:76:60:AD:7F:98:CE:87:F4:C4:A1:6B:FA
Certificate issuer:       /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial:       381B702137FC8CEA3F90760802059E073485F375
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3137372e3132362e31302e302f32332d3234203d3e20323635333033.roa
Signing time:             Wed 10 Jan 2024 17:35:18 +0000
ROA not before:           Wed 10 Jan 2024 17:30:18 +0000
ROA not after:            Wed 08 Jan 2025 17:35:18 +0000
asID:                     265303
IP address blocks:        177.126.10.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1b:70:21:37:fc:8c:ea:3f:90:76:08:02:05:9e:07:34:85:f3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Validity
            Not Before: Jan 10 17:30:18 2024 GMT
            Not After : Jan  8 17:35:18 2025 GMT
        Subject: CN=098171716AA302767660AD7F98CE87F4C4A16BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:45:0e:8b:63:bd:e4:e4:7b:bf:98:6a:08:
                    59:37:e3:b1:1d:91:12:e8:8a:c0:5b:b5:be:c8:e6:
                    cc:50:90:ae:98:45:7e:db:21:00:b9:d1:0d:ea:37:
                    b2:5b:7a:4e:ca:41:13:c2:3c:70:be:c2:c9:e5:9b:
                    ea:b7:49:0f:cc:a2:7e:ff:b4:e0:7c:65:84:90:4a:
                    0d:f7:8c:8c:d5:f7:6e:da:b6:ea:bc:13:d9:e9:1f:
                    53:ae:6f:03:a3:62:48:78:3f:68:ee:c1:ac:64:f0:
                    35:6f:2c:92:25:22:65:5d:2b:be:d1:64:0a:29:81:
                    a4:82:70:ba:e7:90:a3:6a:e7:7f:f8:2b:d1:6a:44:
                    b8:23:fe:cf:3a:b8:40:2b:e3:87:7e:1a:3e:4a:db:
                    7d:86:b9:bd:f0:bc:67:af:ad:04:2f:e9:b4:33:2b:
                    d7:d1:ee:af:75:8b:f9:73:66:4c:a1:3b:d5:4f:16:
                    57:b1:5c:43:dd:d5:69:7f:01:0f:3e:11:3f:21:d1:
                    3d:27:0d:9f:90:cb:66:c5:ac:c6:25:c8:d5:25:bb:
                    58:7b:31:9b:c4:da:7a:bc:03:d8:0d:f8:64:7a:12:
                    0c:bd:63:c6:4f:f3:3d:c3:2a:f4:37:73:79:31:28:
                    07:ea:79:5e:8d:5e:77:16:4c:31:f0:d4:ad:69:9e:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:81:71:71:6A:A3:02:76:76:60:AD:7F:98:CE:87:F4:C4:A1:6B:FA
            X509v3 Authority Key Identifier:
                keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3137372e3132362e31302e302f32332d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:9f:51:62:3e:cc:7b:10:b4:3e:46:f6:97:5e:83:67:41:52:
         56:44:4b:a5:1f:f1:34:af:e6:ce:00:81:52:76:41:9b:ef:77:
         f8:69:46:f5:a7:1d:59:7a:4f:c2:1d:7e:ce:95:db:14:5f:2b:
         8a:89:7d:5c:bf:c0:58:c4:c3:ef:f6:2c:7d:d1:70:39:92:b5:
         81:e3:b9:59:f6:0c:62:54:91:ed:5e:9e:5e:8b:2f:47:09:26:
         53:7a:bf:b6:b8:f1:60:f4:7e:20:34:14:57:39:59:59:4b:29:
         5a:f9:fe:ef:eb:25:d0:ea:ff:36:85:6c:15:36:55:a4:e5:18:
         3c:13:4f:07:c0:87:ec:be:03:8b:04:e7:92:5d:cb:5b:44:b4:
         8c:db:62:9f:16:a2:a7:7d:e6:7e:c4:da:0a:cb:e3:0b:c5:ef:
         ed:e5:c5:d4:f9:c6:5e:87:9e:58:09:7b:96:7f:d2:1b:9f:08:
         fb:f3:7a:13:65:61:9b:2e:d7:52:a9:95:2e:8b:6a:fb:2c:b3:
         cb:e2:cc:04:80:aa:f7:72:f9:03:dd:97:ad:ce:9f:12:48:08:
         ef:94:87:e7:4e:25:50:f3:a3:da:c7:7f:a4:40:16:76:f0:5a:
         d1:4e:0e:d4:70:49:c7:ab:6b:49:c2:11:e9:f9:38:51:b2:0d:
         ab:d5:7c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:05 2025 by rpki-client