Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136322e302f32342d3234203d3e20323633343434.roa
File:                     3137372e39312e3136322e302f32342d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          87GtjZM4nQbfpjqrYTtRmS+t5ugbeYRtFRkFHRqOqiU=
Subject key identifier:   B4:47:41:B9:6E:85:0F:F1:BA:DC:C2:74:E9:6C:B2:74:AD:D3:33:99
Certificate issuer:       /CN=414013A25F77129C74B069C1772DF23C085FA9FC
Certificate serial:       58D79CB37460E51A159CB15BC8A89EC575BAC93D
Authority key identifier: 41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136322e302f32342d3234203d3e20323633343434.roa
Signing time:             Thu 07 Nov 2024 01:23:50 +0000
ROA not before:           Thu 07 Nov 2024 01:18:50 +0000
ROA not after:            Thu 06 Nov 2025 01:23:50 +0000
asID:                     263444
IP address blocks:        177.91.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d7:9c:b3:74:60:e5:1a:15:9c:b1:5b:c8:a8:9e:c5:75:ba:c9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414013A25F77129C74B069C1772DF23C085FA9FC
        Validity
            Not Before: Nov  7 01:18:50 2024 GMT
            Not After : Nov  6 01:23:50 2025 GMT
        Subject: CN=B44741B96E850FF1BADCC274E96CB274ADD33399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:d6:9c:be:7f:84:81:9f:83:6d:2b:88:5f:
                    84:b7:60:00:a2:8b:02:07:86:71:c5:83:7c:9e:4f:
                    7b:f9:15:9c:5f:18:ed:58:98:3c:4f:30:5f:b4:bb:
                    91:d0:82:02:39:34:00:9e:6f:4a:15:3c:54:cc:5f:
                    65:ce:6c:e7:0d:b0:b5:30:20:d7:37:60:f0:29:21:
                    78:0b:e7:42:0f:e3:0f:35:29:5c:56:bb:4d:04:ef:
                    4d:ed:39:bd:19:f0:38:eb:bb:09:86:64:d1:fd:ff:
                    25:1c:23:e9:c5:73:34:75:d9:2f:14:a8:59:56:93:
                    f3:cb:c2:ca:bd:b7:78:b4:a2:be:cd:5b:f8:03:a6:
                    0d:ac:12:1e:56:48:77:36:54:08:ef:99:c7:ff:82:
                    46:62:de:65:a4:e6:ed:50:7a:da:c6:fd:96:61:f5:
                    9b:31:5a:09:47:10:08:ad:64:fd:b6:89:58:ee:7a:
                    47:af:48:2a:f1:31:5b:86:1c:55:26:7a:23:90:36:
                    d4:a5:bf:24:71:a0:8a:5e:24:be:2f:ec:3d:a8:91:
                    d8:e1:2c:9a:1e:fe:bd:92:fc:64:61:bc:ac:70:db:
                    a9:0b:4a:b5:4a:ce:c6:7c:6d:e6:7c:5c:2c:c0:81:
                    cb:79:19:6d:b1:b3:cf:d8:17:cd:e1:60:1d:bf:d5:
                    ec:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:47:41:B9:6E:85:0F:F1:BA:DC:C2:74:E9:6C:B2:74:AD:D3:33:99
            X509v3 Authority Key Identifier:
                keyid:41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136322e302f32342d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:94:07:36:00:00:de:1d:a5:ed:e1:76:80:c9:32:fe:85:4f:
         be:3a:ba:0a:c1:d7:63:96:f3:4b:81:28:3b:28:50:09:84:00:
         ed:c6:26:25:8c:4c:06:56:64:65:e7:bc:69:d6:6a:34:17:de:
         f7:f1:76:bc:6a:6b:d4:9b:43:31:aa:41:73:34:67:82:89:b7:
         f5:c7:65:62:c4:09:89:59:64:b1:1d:62:bf:d0:98:8b:f9:69:
         7f:b7:9e:3b:cc:fc:4a:49:6f:f5:68:0f:51:fb:a0:8c:35:cb:
         ba:c0:a6:48:78:dd:eb:ee:14:b2:ef:d3:bd:1f:41:c5:98:62:
         6b:73:d1:21:1f:da:da:64:45:f4:33:fa:b9:4c:94:63:0a:1d:
         38:2a:bc:c1:fc:25:95:31:c5:f5:58:46:ba:0b:02:6a:8d:3a:
         25:3e:1c:ee:bf:7d:4e:4c:43:91:a1:fe:f3:dd:33:be:e1:9b:
         53:14:1b:f9:72:d4:35:bd:3d:82:2c:36:94:bd:f1:59:1e:7c:
         30:f3:4e:9d:e4:98:c9:22:1d:eb:e6:a4:03:8a:af:b7:27:b8:
         39:bd:d0:86:fb:bd:01:e9:ec:3b:4e:93:48:8f:e3:60:51:cf:
         45:ed:ea:b8:c1:d5:27:9c:e5:7e:b3:74:fe:78:3c:a6:41:ec:
         41:12:9f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:10 2025 by rpki-client