Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3232203d3e20323633343434.roa
File:                     3137372e39312e3136302e302f32322d3232203d3e20323633343434.roa (raw, json)
Hash identifier:          OBemFQEMGEBrF3jXe+X8jIlbcbW4mp7ziwjUytsrwog=
Subject key identifier:   1B:DA:35:65:9C:52:45:B7:B8:D1:57:71:D4:B2:EA:8F:6B:EE:1A:44
Certificate issuer:       /CN=414013A25F77129C74B069C1772DF23C085FA9FC
Certificate serial:       429950513AA2FB71F86DF32D52BBD8DBFF60FB52
Authority key identifier: 41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3232203d3e20323633343434.roa
Signing time:             Thu 07 Nov 2024 01:23:51 +0000
ROA not before:           Thu 07 Nov 2024 01:18:51 +0000
ROA not after:            Thu 06 Nov 2025 01:23:51 +0000
asID:                     263444
IP address blocks:        177.91.160.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:99:50:51:3a:a2:fb:71:f8:6d:f3:2d:52:bb:d8:db:ff:60:fb:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414013A25F77129C74B069C1772DF23C085FA9FC
        Validity
            Not Before: Nov  7 01:18:51 2024 GMT
            Not After : Nov  6 01:23:51 2025 GMT
        Subject: CN=1BDA35659C5245B7B8D15771D4B2EA8F6BEE1A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:b0:ea:d3:d4:ed:09:3b:38:39:8a:68:46:
                    66:33:8a:d0:d0:f7:ab:14:f1:7f:a0:96:c2:15:4b:
                    25:9d:ec:4c:a9:07:ee:b4:41:8b:b2:2a:b5:1d:f3:
                    51:c6:dd:a9:76:ca:5e:94:f0:3b:16:df:1b:52:f5:
                    5d:9c:5f:d4:d8:73:15:e7:99:69:8d:a5:e5:b4:da:
                    af:f8:34:4b:13:b7:bd:a4:0f:ba:f7:9a:60:9d:fa:
                    80:3b:8f:c9:41:fd:d8:dd:6e:53:cf:77:00:68:39:
                    e2:29:13:af:87:56:cb:2d:f5:77:8d:6a:27:18:5e:
                    33:53:0b:c7:01:7c:92:76:49:11:bb:fb:48:5f:cf:
                    6e:5e:ab:03:1f:6c:f8:26:02:a1:4e:c3:63:2d:ad:
                    37:aa:32:5c:4b:75:dd:68:f1:5b:18:fc:56:00:a9:
                    c1:d6:b2:ed:1f:69:90:05:1b:88:77:89:ee:52:4f:
                    5f:08:51:4d:43:67:c9:78:7c:6a:93:b5:c7:81:0a:
                    06:4f:d3:13:55:35:3a:c0:da:fb:a3:08:25:c8:59:
                    55:da:63:64:2a:83:92:55:3c:35:7d:38:cf:6c:03:
                    ae:d4:f1:aa:f8:b7:6a:db:69:9d:cc:2e:af:78:11:
                    1f:7b:46:ef:24:4d:ed:94:22:2e:f8:e7:0d:68:26:
                    2b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DA:35:65:9C:52:45:B7:B8:D1:57:71:D4:B2:EA:8F:6B:EE:1A:44
            X509v3 Authority Key Identifier:
                keyid:41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3232203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:40:12:52:c6:03:4d:fe:ad:67:4a:2a:ce:8f:14:91:dd:e0:
         a8:c7:a6:57:38:f9:85:8b:97:f8:f8:4c:ef:ae:cc:4d:12:56:
         d1:12:12:85:16:58:3c:1d:22:a5:b5:89:7a:ff:06:68:2d:19:
         fe:6a:2e:19:72:a3:0a:82:0e:98:a1:37:3e:49:11:3f:68:0d:
         5e:d2:09:18:07:07:8c:2b:19:cd:b3:c7:62:6a:48:99:81:4c:
         be:06:bb:0a:f0:b0:60:2b:41:bb:c8:29:ff:ab:04:78:23:56:
         fd:cc:8b:dc:cd:24:82:3e:26:c0:0a:a5:08:22:ce:1a:c8:8d:
         e6:a3:9f:30:43:49:a0:e3:45:e0:9d:d6:7b:c1:2f:72:3e:a5:
         3e:fa:16:74:38:c5:4f:9d:74:03:dc:d2:0e:a9:13:36:5f:36:
         1a:4e:24:a1:82:4b:40:88:40:75:54:73:0c:4f:3b:01:01:95:
         3d:f7:f1:fd:c9:36:4a:9d:6a:bc:91:f0:88:fd:a9:04:e7:43:
         e8:76:28:90:8a:b4:5f:3c:e8:b4:ef:25:5d:f7:28:2a:dd:7f:
         09:d8:c4:51:dd:7c:a9:2b:96:c3:b9:2d:d7:2c:e7:40:97:6f:
         c8:b1:ff:de:b8:4f:82:64:b0:3a:c6:78:dd:a8:53:72:3a:10:
         2e:fd:1f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:47 2025 by rpki-client