Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137362e302f32312d3231203d3e20323633303335.roa
File:                     3137372e32302e3137362e302f32312d3231203d3e20323633303335.roa (raw, json)
Hash identifier:          gtzGcR5FyD+jdkUHDl1m8CdPRpJBAJTvD0Q7YH259O8=
Subject key identifier:   A1:A8:A2:99:BE:F2:42:10:E2:92:25:52:54:96:FF:3B:71:70:50:53
Certificate issuer:       /CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
Certificate serial:       1165D54BE156AA00C099A343D1C305424C323C31
Authority key identifier: 79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137362e302f32312d3231203d3e20323633303335.roa
Signing time:             Thu 05 Sep 2024 17:39:49 +0000
ROA not before:           Thu 05 Sep 2024 17:34:49 +0000
ROA not after:            Thu 04 Sep 2025 17:39:49 +0000
asID:                     263035
IP address blocks:        177.20.176.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:65:d5:4b:e1:56:aa:00:c0:99:a3:43:d1:c3:05:42:4c:32:3c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
        Validity
            Not Before: Sep  5 17:34:49 2024 GMT
            Not After : Sep  4 17:39:49 2025 GMT
        Subject: CN=A1A8A299BEF24210E29225525496FF3B71705053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b6:78:ea:15:5b:28:ea:f3:e0:77:d7:fe:63:
                    22:08:2e:5f:61:5f:a5:eb:a5:32:ef:cc:b8:da:d3:
                    eb:ca:e0:ee:6f:e4:dc:43:67:ae:48:ee:44:4e:44:
                    84:7e:18:e2:de:32:de:87:ea:40:d8:69:2f:81:5b:
                    31:72:34:82:04:07:ac:cf:bf:bb:78:8e:e3:96:97:
                    91:c0:d9:80:4d:4d:68:62:ff:7c:af:69:5f:1a:89:
                    16:71:ef:12:3f:13:7b:c1:7c:2d:a2:36:a4:6c:0d:
                    69:91:61:69:0a:2c:cd:91:fb:05:46:dd:8b:36:33:
                    d7:a5:ef:00:fc:92:9f:44:4c:df:f8:3e:52:d8:9a:
                    20:3c:2b:8d:44:41:70:de:0e:e2:3e:65:1a:56:7b:
                    1a:02:69:ff:26:4c:d1:2f:64:15:6d:6f:14:5d:45:
                    f6:53:e2:05:72:ba:10:0d:cc:66:51:ca:5e:9e:e7:
                    44:9d:c0:86:9f:46:63:6c:13:5e:89:ff:4b:c2:10:
                    48:5e:a0:49:e7:09:59:79:28:06:1b:9c:6d:72:af:
                    2e:63:f3:07:88:28:73:4d:63:3f:77:9f:f3:cd:3c:
                    18:b4:f8:a2:aa:be:cd:18:90:51:72:f2:21:cf:87:
                    f6:91:a4:e9:e5:d9:ce:4c:87:02:c1:a6:23:1b:0d:
                    da:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A8:A2:99:BE:F2:42:10:E2:92:25:52:54:96:FF:3B:71:70:50:53
            X509v3 Authority Key Identifier:
                keyid:79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/7973A6F7D25B519ADA938A8C3A955ED8765A3404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137362e302f32312d3231203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:3e:14:80:df:cd:db:e9:06:f5:06:48:5c:cf:dd:3e:35:f0:
         4b:e1:8d:8d:b5:2b:cf:60:72:78:26:5d:ae:38:30:5e:7a:79:
         be:40:69:7f:70:bd:3c:d7:d0:87:4a:11:30:5a:4e:f5:ab:16:
         9f:c6:2b:2b:0a:87:06:0c:0c:e6:b7:ba:56:da:ed:82:ac:7e:
         61:30:f7:ad:02:3e:56:78:ee:7b:47:e1:5c:a9:93:f8:ac:dd:
         2e:d8:fb:1d:aa:08:33:62:df:7c:81:39:51:b2:d5:20:73:45:
         cb:67:e2:a2:fd:d7:f7:ab:a8:af:4e:3e:ef:69:27:79:67:ec:
         9b:c4:e6:09:bf:db:05:61:9b:bc:e5:48:2f:6a:60:3e:85:ab:
         41:13:5c:5a:24:9e:97:45:93:83:ab:1f:38:e3:ba:72:c3:1d:
         55:ff:2f:51:b7:b7:cf:d5:7b:96:48:1a:cf:15:f2:e5:18:19:
         7a:75:03:cb:9e:36:2e:7c:bc:6f:f9:4b:a1:c8:c2:bf:9e:fa:
         34:fa:d6:fa:f6:96:89:bd:87:38:46:78:77:45:93:05:b5:ed:
         c4:25:b7:3a:5b:6e:b9:09:2b:d4:23:53:68:cd:34:c5:4e:91:
         77:93:0b:ce:35:38:a1:a2:d2:77:91:8c:b7:e1:bc:2d:ce:5a:
         32:9e:1a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:18 2025 by rpki-client