Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e37322e302f32322d3232203d3e20323632333338.roa
File:                     3137372e3132362e37322e302f32322d3232203d3e20323632333338.roa (raw, json)
Hash identifier:          CYiuB34mxjsrn2XgQiA8ZvyyHKXcIi36KzWGXuwigs0=
Subject key identifier:   BE:46:E5:18:E3:1E:57:8F:9A:A7:D9:C7:AA:05:8C:42:92:D4:7A:63
Certificate issuer:       /CN=2F2EEA78F2A61B130D9274580167C650F0352C20
Certificate serial:       07608E2C47CFFB815AC20EFB0887322ECBAD0A1A
Authority key identifier: 2F:2E:EA:78:F2:A6:1B:13:0D:92:74:58:01:67:C6:50:F0:35:2C:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F2EEA78F2A61B130D9274580167C650F0352C20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e37322e302f32322d3232203d3e20323632333338.roa
Signing time:             Tue 16 Apr 2024 12:20:11 +0000
ROA not before:           Tue 16 Apr 2024 12:15:11 +0000
ROA not after:            Tue 15 Apr 2025 12:20:11 +0000
asID:                     262338
IP address blocks:        177.126.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:60:8e:2c:47:cf:fb:81:5a:c2:0e:fb:08:87:32:2e:cb:ad:0a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2EEA78F2A61B130D9274580167C650F0352C20
        Validity
            Not Before: Apr 16 12:15:11 2024 GMT
            Not After : Apr 15 12:20:11 2025 GMT
        Subject: CN=3082010A0282010100A41039231BE75E4B8EF402C59D8ABCF6100693A4872703C38139E61BE435417EAA192380B10ECA8D0677B13CE22B819848C5BDE80A8109DE7DD53E546C44E10D18F25EDA9EAECFB93D0BBBD7A4D7ED6093205FE44302A3EA047DE354F9DE7AE14A3C4077434F296CF90BA8C8EC2B99DC9A9A46C480F19A0DDFC0060C309142981811A688A2D993618B04D1771B0B081F83B23F02E1E2248817F662C5CA2185FF7E693D0540EBF28FF2A863F217CBA64F21D9DD6A9A7BA85130D2D4A4DB030E9BF1C8F39813C3981E25E15C4638B554ACCFED7F4D49B5FB4E9B81FCBC3C5F255333C5B7F4EADBB02D19105B1BB0DF567740F7C4DEAD4A8B2D34A6D87428CC75CB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:39:23:1b:e7:5e:4b:8e:f4:02:c5:9d:8a:
                    bc:f6:10:06:93:a4:87:27:03:c3:81:39:e6:1b:e4:
                    35:41:7e:aa:19:23:80:b1:0e:ca:8d:06:77:b1:3c:
                    e2:2b:81:98:48:c5:bd:e8:0a:81:09:de:7d:d5:3e:
                    54:6c:44:e1:0d:18:f2:5e:da:9e:ae:cf:b9:3d:0b:
                    bb:d7:a4:d7:ed:60:93:20:5f:e4:43:02:a3:ea:04:
                    7d:e3:54:f9:de:7a:e1:4a:3c:40:77:43:4f:29:6c:
                    f9:0b:a8:c8:ec:2b:99:dc:9a:9a:46:c4:80:f1:9a:
                    0d:df:c0:06:0c:30:91:42:98:18:11:a6:88:a2:d9:
                    93:61:8b:04:d1:77:1b:0b:08:1f:83:b2:3f:02:e1:
                    e2:24:88:17:f6:62:c5:ca:21:85:ff:7e:69:3d:05:
                    40:eb:f2:8f:f2:a8:63:f2:17:cb:a6:4f:21:d9:dd:
                    6a:9a:7b:a8:51:30:d2:d4:a4:db:03:0e:9b:f1:c8:
                    f3:98:13:c3:98:1e:25:e1:5c:46:38:b5:54:ac:cf:
                    ed:7f:4d:49:b5:fb:4e:9b:81:fc:bc:3c:5f:25:53:
                    33:c5:b7:f4:ea:db:b0:2d:19:10:5b:1b:b0:df:56:
                    77:40:f7:c4:de:ad:4a:8b:2d:34:a6:d8:74:28:cc:
                    75:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:46:E5:18:E3:1E:57:8F:9A:A7:D9:C7:AA:05:8C:42:92:D4:7A:63
            X509v3 Authority Key Identifier:
                keyid:2F:2E:EA:78:F2:A6:1B:13:0D:92:74:58:01:67:C6:50:F0:35:2C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/2F2EEA78F2A61B130D9274580167C650F0352C20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F2EEA78F2A61B130D9274580167C650F0352C20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/1/3137372e3132362e37322e302f32322d3232203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:39:d3:9d:b6:0d:29:66:74:ed:71:9f:fa:11:45:9a:24:
         15:a1:d5:2e:bc:16:ac:e2:bd:0d:00:e0:50:84:20:28:35:93:
         a9:43:01:bc:81:d4:0a:7d:d3:2e:34:be:c0:92:16:9c:e8:42:
         4c:8d:70:ac:b6:03:b9:dd:98:f0:34:84:81:a9:d7:48:18:75:
         10:10:f4:b0:a7:1f:63:28:a7:63:5b:74:7f:0b:1c:b3:c8:1d:
         7b:54:f6:fd:90:a0:7d:82:85:e0:b8:cd:a2:98:3d:82:c3:3f:
         17:9e:77:6b:cb:24:c6:b5:d0:d6:ac:cd:31:7d:62:34:f8:d6:
         2c:b4:33:da:bc:83:50:1c:47:62:25:43:fd:9b:cf:51:74:b6:
         66:24:9b:c6:cb:b1:cb:07:f5:2c:bd:d9:c5:6e:6e:16:3d:18:
         0d:d6:b6:fa:f6:fa:7b:17:c9:1c:68:55:bf:f7:66:fa:82:86:
         98:33:c8:92:f0:85:e3:6c:22:2d:1e:d0:04:05:c7:1a:a3:82:
         ab:2b:3c:c3:55:3c:4f:b0:f8:b2:6f:ac:39:f4:5a:d6:eb:0d:
         ba:ce:b2:55:21:2e:0b:0e:d8:91:67:e9:13:58:94:b1:c1:36:
         74:aa:d7:e5:96:aa:b3:e8:36:a6:e9:73:ef:b0:78:a2:f5:e9:
         84:34:64:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:21:45 2025 by rpki-client