Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/1/3137372e38372e3131312e302f32342d3234203d3e203532353934.roa
File:                     3137372e38372e3131312e302f32342d3234203d3e203532353934.roa (raw, json)
Hash identifier:          PRhdtga6qluMSu1E6Nm8NDAZ0SnL0vxqOakM2aEedlw=
Subject key identifier:   B4:45:36:B7:4A:2C:49:A4:CB:3C:E4:2C:3E:87:C4:4F:07:50:45:F3
Certificate issuer:       /CN=DB517D31556AB7DAB8C3C0FD082EDB0CC82B18B2
Certificate serial:       7978F803D20542F163FE72FCA28651BAF665DE06
Authority key identifier: DB:51:7D:31:55:6A:B7:DA:B8:C3:C0:FD:08:2E:DB:0C:C8:2B:18:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB517D31556AB7DAB8C3C0FD082EDB0CC82B18B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/1/3137372e38372e3131312e302f32342d3234203d3e203532353934.roa
Signing time:             Thu 06 Mar 2025 12:05:34 +0000
ROA not before:           Thu 06 Mar 2025 12:00:34 +0000
ROA not after:            Thu 05 Mar 2026 12:05:34 +0000
asID:                     52594
IP address blocks:        177.87.111.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:78:f8:03:d2:05:42:f1:63:fe:72:fc:a2:86:51:ba:f6:65:de:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB517D31556AB7DAB8C3C0FD082EDB0CC82B18B2
        Validity
            Not Before: Mar  6 12:00:34 2025 GMT
            Not After : Mar  5 12:05:34 2026 GMT
        Subject: CN=B44536B74A2C49A4CB3CE42C3E87C44F075045F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2a:4d:e0:5d:56:69:86:ca:f1:62:7a:b1:b1:
                    2c:49:3f:5a:e6:a5:a7:5b:5f:84:e6:91:fd:ae:d9:
                    36:54:a1:63:de:6f:e2:7e:eb:4a:f1:42:1d:a6:92:
                    4d:11:8a:6e:d9:64:0f:60:62:04:19:ca:66:65:cc:
                    64:f6:fa:c3:0d:ed:bd:c1:7f:59:6e:fb:bc:74:88:
                    0d:01:4f:4a:2a:31:91:0a:d3:09:db:65:27:3a:b4:
                    08:1e:42:ed:42:de:7b:a5:50:79:82:ec:88:8c:81:
                    45:9f:54:88:91:b3:cb:68:92:89:34:f4:91:23:ac:
                    da:06:9a:50:d1:0b:5c:9a:18:00:03:e6:27:e9:5e:
                    49:d0:1f:53:8c:46:49:96:c6:76:af:d9:bf:4a:08:
                    cd:32:e6:b8:16:f8:b7:fd:1a:c8:40:e9:f0:25:ee:
                    38:86:e5:aa:ba:41:af:0b:66:19:bc:9b:b0:92:ff:
                    93:e3:e6:4a:45:68:11:c9:a9:ca:4b:c7:e0:d4:ca:
                    c4:22:26:94:bf:b1:2e:57:c1:b7:e3:61:6e:a9:3c:
                    62:0a:87:ce:56:40:af:4e:28:7e:e5:a4:11:06:4c:
                    86:28:c0:9b:1f:51:bb:67:17:86:66:5e:2a:45:f3:
                    15:f2:07:b4:0f:9d:e9:3a:9a:07:83:c6:d3:c4:ed:
                    56:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:45:36:B7:4A:2C:49:A4:CB:3C:E4:2C:3E:87:C4:4F:07:50:45:F3
            X509v3 Authority Key Identifier:
                keyid:DB:51:7D:31:55:6A:B7:DA:B8:C3:C0:FD:08:2E:DB:0C:C8:2B:18:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/1/DB517D31556AB7DAB8C3C0FD082EDB0CC82B18B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB517D31556AB7DAB8C3C0FD082EDB0CC82B18B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/1/3137372e38372e3131312e302f32342d3234203d3e203532353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:96:f3:5f:9e:60:51:af:87:9e:b1:8a:d1:64:40:9c:7b:8c:
         12:7c:82:9a:dc:98:00:52:1d:d4:2f:04:06:93:a9:5c:5a:07:
         73:cf:05:af:0b:fd:63:73:67:aa:4a:bc:10:c3:e5:2d:c1:d2:
         df:6e:f5:d2:01:3b:5a:47:b3:0e:a6:04:9f:b5:95:36:9e:82:
         a2:94:fa:41:45:67:23:47:0b:50:4f:d8:37:28:bf:8d:9b:53:
         64:30:53:99:fa:b4:28:c7:ee:45:9d:01:08:eb:c2:f0:9d:9b:
         64:96:dd:fc:fc:b4:ee:2f:36:4a:10:ee:ca:44:46:44:b1:3d:
         09:96:37:84:4f:f2:11:5d:64:0a:36:3c:c7:7c:de:35:0d:20:
         57:8d:80:a1:29:99:27:97:e1:39:74:d4:c4:2f:94:df:cc:c3:
         7e:10:90:1f:8c:92:b9:f2:98:68:90:a7:14:bf:b4:7d:63:69:
         a5:2b:e5:45:68:ae:49:15:5d:81:1a:9f:4b:98:4d:95:0f:f9:
         80:fb:3f:05:8f:7b:59:ba:a9:0c:91:15:f7:aa:e5:af:92:a6:
         17:6b:a4:4a:57:55:3a:d4:bc:80:b2:ad:44:b5:69:a7:7b:9c:
         76:3e:e6:22:b9:2d:28:b5:bb:61:4b:17:fa:b4:fe:39:19:ef:
         5d:50:ec:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:21:44 2025 by rpki-client