Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e36342e302f32302d3230203d3e20323632333338.roa
File:                     3137372e3132362e36342e302f32302d3230203d3e20323632333338.roa (raw, json)
Hash identifier:          d3MPO4EDZncGNjyjgEkn+lTDxUFoDxl84q4k6YPGqz0=
Subject key identifier:   65:52:10:01:0B:5B:AA:56:F7:4E:0E:94:C6:DE:1A:86:D1:FD:7B:E8
Certificate issuer:       /CN=2F2EEA78F2A61B130D9274580167C650F0352C20
Certificate serial:       62678DDB2F17880EDBEC3C30A45F2F49AC8FA26B
Authority key identifier: 2F:2E:EA:78:F2:A6:1B:13:0D:92:74:58:01:67:C6:50:F0:35:2C:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F2EEA78F2A61B130D9274580167C650F0352C20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e36342e302f32302d3230203d3e20323632333338.roa
Signing time:             Tue 16 Apr 2024 12:20:11 +0000
ROA not before:           Tue 16 Apr 2024 12:15:11 +0000
ROA not after:            Tue 15 Apr 2025 12:20:11 +0000
asID:                     262338
IP address blocks:        177.126.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:67:8d:db:2f:17:88:0e:db:ec:3c:30:a4:5f:2f:49:ac:8f:a2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2EEA78F2A61B130D9274580167C650F0352C20
        Validity
            Not Before: Apr 16 12:15:11 2024 GMT
            Not After : Apr 15 12:20:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c5:3e:89:3e:a9:ee:5b:3b:34:ea:f8:d3:ca:
                    f5:a2:2c:3d:d1:51:d1:bd:e0:33:79:9e:cd:47:44:
                    05:2f:cb:4c:3b:f9:e0:eb:71:ed:45:7a:ed:b2:67:
                    a8:f1:4b:28:5d:cc:dc:2b:7e:ce:70:8f:79:95:a3:
                    9e:89:6f:bf:5e:fe:be:ed:44:6e:e1:b7:7c:95:15:
                    c1:c3:6b:32:e7:d4:43:7b:3e:a6:74:ed:bb:9f:85:
                    36:da:86:be:a5:b8:30:46:34:c3:07:33:b8:f1:01:
                    b5:8e:e7:2a:30:a0:37:4a:d2:24:c1:9b:5c:4e:8e:
                    f9:82:e5:cf:fb:b8:14:ec:c2:29:09:25:11:44:ad:
                    16:1a:b0:b0:26:72:09:94:0a:bd:61:53:9d:6b:a9:
                    89:86:b0:d9:50:34:28:7e:c4:7a:a8:a8:99:b1:a4:
                    84:09:ce:ca:20:c0:d5:27:75:80:ce:75:b6:e0:4b:
                    60:c9:8d:5d:6f:8a:14:ee:69:1a:b3:69:15:3c:26:
                    74:c3:65:9b:ca:73:06:70:39:ce:bd:e3:fa:57:6b:
                    80:2a:e0:d4:0c:cf:19:66:b6:24:04:ee:b7:61:a9:
                    9c:60:cf:da:63:95:e4:de:5c:b4:65:79:84:af:79:
                    b8:4e:6c:7c:d3:7d:7d:2b:01:0c:6d:55:8b:3b:a5:
                    dd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:52:10:01:0B:5B:AA:56:F7:4E:0E:94:C6:DE:1A:86:D1:FD:7B:E8
            X509v3 Authority Key Identifier:
                keyid:2F:2E:EA:78:F2:A6:1B:13:0D:92:74:58:01:67:C6:50:F0:35:2C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/2F2EEA78F2A61B130D9274580167C650F0352C20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F2EEA78F2A61B130D9274580167C650F0352C20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e36342e302f32302d3230203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:74:4e:e7:dc:23:23:44:a9:ab:74:49:55:41:35:94:b6:
         e7:b4:a1:ec:cb:f7:6f:f1:89:e1:d0:6d:88:1f:5a:2a:08:c2:
         12:38:d1:31:47:6c:4d:47:56:76:03:3c:0a:27:60:39:fc:bb:
         0b:5e:3d:77:62:32:08:2e:29:d2:f3:23:f9:42:47:a7:da:7e:
         47:81:64:d1:6e:d9:91:8d:17:fb:99:97:e4:d0:6c:e3:18:f1:
         b1:0f:b5:a0:af:cc:eb:b4:fb:e6:21:76:87:be:15:0c:65:a4:
         1c:0f:40:f4:8f:46:62:81:4e:28:37:80:b0:5b:97:a8:aa:78:
         e4:e2:25:f9:06:1f:c4:96:25:aa:df:75:2b:54:42:1f:83:a8:
         26:3a:a7:74:9a:bf:3a:54:09:c1:62:0b:75:ae:61:05:f2:d1:
         be:27:c9:a4:20:77:22:70:20:0f:87:e6:55:dc:88:38:a6:79:
         4a:a6:84:fb:5b:b7:2b:17:4f:14:5a:83:77:e3:a6:ff:76:64:
         5e:4d:45:22:5b:c3:96:d8:c4:3e:53:44:dd:5f:30:65:18:82:
         12:d4:c9:b0:aa:41:72:36:4d:21:8c:34:2b:46:83:24:bb:2b:
         d4:00:82:a5:6d:bb:0c:24:f2:22:4c:22:18:2b:6d:b7:ae:0a:
         ff:69:1e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:31 2025 by rpki-client