Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3137372e3132362e362e302f32342d3234203d3e20323635333033.roa
File:                     3137372e3132362e362e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          w1QsRrWTxsg7o5ohq2lIx7XcdSebVxM0UfxqUh6My1E=
Subject key identifier:   CF:79:62:79:85:0E:A9:62:96:D9:F4:D5:29:AF:CA:E6:C8:3F:EC:4E
Certificate issuer:       /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial:       685A797AADA57CF2900EA417D7C76E5139932641
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3137372e3132362e362e302f32342d3234203d3e20323635333033.roa
Signing time:             Wed 10 Jan 2024 17:36:28 +0000
ROA not before:           Wed 10 Jan 2024 17:31:28 +0000
ROA not after:            Wed 08 Jan 2025 17:36:28 +0000
asID:                     265303
IP address blocks:        177.126.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5a:79:7a:ad:a5:7c:f2:90:0e:a4:17:d7:c7:6e:51:39:93:26:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Validity
            Not Before: Jan 10 17:31:28 2024 GMT
            Not After : Jan  8 17:36:28 2025 GMT
        Subject: CN=CF796279850EA96296D9F4D529AFCAE6C83FEC4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:9b:41:1f:7c:a4:c7:6e:19:af:e1:74:77:
                    18:27:4d:e3:aa:da:a8:6a:30:87:ed:22:2d:af:e4:
                    4c:fc:61:08:8f:65:54:d3:61:66:6f:de:d4:2e:00:
                    c0:4d:5e:05:f8:43:61:7e:aa:ce:49:43:cc:80:c5:
                    ba:17:51:de:bf:97:24:eb:9a:b0:e6:81:22:16:ea:
                    02:fa:6a:3e:05:dd:d9:6b:1c:12:6c:e4:b0:93:49:
                    96:cf:d8:15:e2:85:de:ca:29:78:40:bd:b9:e8:53:
                    37:c2:9c:36:51:e3:49:76:8d:04:ee:5a:b7:d3:41:
                    c2:e4:96:8b:36:11:44:2b:2b:93:0c:fb:a5:66:0e:
                    37:ec:0f:24:09:35:db:b7:64:00:04:2d:9f:2b:97:
                    ef:93:fc:8e:8f:59:d8:fa:77:19:f3:d1:54:79:b1:
                    bc:b0:1e:47:b0:78:cc:07:ce:5c:a7:c8:d8:8d:b0:
                    9d:96:d4:38:ec:e4:fc:0c:46:f4:5d:5e:b1:3f:6e:
                    eb:10:25:8f:cf:09:80:1c:48:98:f7:65:41:3e:98:
                    f2:bf:14:8c:51:b4:cb:be:2a:78:85:d1:7c:3e:8f:
                    aa:c1:2e:7b:da:92:8e:f9:ad:2a:de:40:cd:9e:54:
                    f9:f1:37:df:03:5c:7f:39:6f:11:2b:0b:b3:ee:77:
                    8c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:79:62:79:85:0E:A9:62:96:D9:F4:D5:29:AF:CA:E6:C8:3F:EC:4E
            X509v3 Authority Key Identifier:
                keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3137372e3132362e362e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:4b:53:48:a5:d7:a5:4d:52:42:65:ba:81:bc:37:a9:a7:57:
         bd:c7:76:51:b3:ef:8e:bc:97:86:2a:4e:54:19:f1:e8:cf:59:
         69:67:cc:06:e7:73:06:3b:86:4a:5a:8e:3b:27:a5:78:9b:28:
         f7:f7:83:0f:58:f7:80:1e:37:2d:26:dc:8c:4e:e6:8c:7c:c3:
         78:84:8e:4d:67:45:ca:5f:8d:f4:04:f4:d1:c7:55:cc:0b:03:
         12:8e:11:db:ac:7a:37:54:9c:1a:b2:30:89:77:45:0c:f4:38:
         82:33:a7:4e:26:bf:08:b0:72:dd:7c:3e:51:9c:8c:2a:db:46:
         ac:10:6d:17:c0:54:a4:bb:2c:28:3e:ad:df:07:2c:04:d8:c6:
         9c:94:25:6a:43:cb:3a:d0:94:e9:fb:be:ad:c3:f0:7b:8d:fa:
         23:16:61:60:e8:c5:9b:81:58:87:f0:bb:4e:b9:45:08:60:0b:
         2b:05:b2:60:3d:72:85:f8:59:cd:fe:5a:8b:d9:95:94:32:3a:
         3b:14:d5:cb:a8:cf:4f:06:82:cf:8d:8d:6d:2a:2e:6b:cb:ee:
         04:4c:ad:cc:b2:45:2b:71:23:20:7d:57:fe:99:0e:c0:59:5f:
         4e:57:6d:77:29:88:d3:7c:83:fd:a8:73:d3:dc:d2:25:99:71:
         81:cc:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:16 2025 by rpki-client