Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3137372e3133302e302e302f32302d3234203d3e203238323630.roa
File:                     3137372e3133302e302e302f32302d3234203d3e203238323630.roa (raw, json)
Hash identifier:          EDZ6O16RuTHD9fRGCK+rusM3sCpYUGYTHjyGxoxv0BY=
Subject key identifier:   F7:9E:DD:32:5B:47:FD:71:4B:A7:A4:10:E4:13:67:61:AF:56:13:D4
Certificate issuer:       /CN=EDDE9456DFB0E0B6141479B36FE32CA0BF98688B
Certificate serial:       750085DA78F138FFB84483AA80E971F793682CFC
Authority key identifier: ED:DE:94:56:DF:B0:E0:B6:14:14:79:B3:6F:E3:2C:A0:BF:98:68:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3137372e3133302e302e302f32302d3234203d3e203238323630.roa
Signing time:             Mon 27 Jan 2025 20:48:36 +0000
ROA not before:           Mon 27 Jan 2025 20:43:36 +0000
ROA not after:            Mon 26 Jan 2026 20:48:36 +0000
asID:                     28260
IP address blocks:        177.130.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:00:85:da:78:f1:38:ff:b8:44:83:aa:80:e9:71:f7:93:68:2c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDDE9456DFB0E0B6141479B36FE32CA0BF98688B
        Validity
            Not Before: Jan 27 20:43:36 2025 GMT
            Not After : Jan 26 20:48:36 2026 GMT
        Subject: CN=F79EDD325B47FD714BA7A410E4136761AF5613D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bb:26:86:fd:1d:88:1b:7e:21:ba:b0:77:9a:
                    76:54:2e:a3:09:15:a4:87:12:17:e9:83:9e:13:21:
                    e9:93:66:8a:50:47:21:df:02:c3:96:b7:84:f2:f1:
                    a2:18:b1:c1:b8:31:74:26:38:5f:9b:fa:64:24:d1:
                    19:77:ae:61:a4:a0:ca:a3:b1:4a:0e:82:83:41:c7:
                    00:02:80:85:7d:0f:72:3c:cc:b2:02:10:ad:ea:11:
                    d7:5e:66:e5:b6:58:03:39:41:15:51:96:b5:73:63:
                    00:9d:f0:af:ad:05:97:6e:6e:03:b1:e0:fa:fe:5e:
                    92:22:61:e1:a6:cc:db:1e:be:ae:5e:62:33:b1:46:
                    cc:f6:49:e7:45:89:27:a5:45:58:61:69:0b:93:5c:
                    d4:cf:e6:68:c9:79:59:c4:8b:ba:cd:19:14:88:72:
                    71:9f:c4:50:93:94:b2:89:b9:c2:d2:47:5d:b2:62:
                    51:68:8f:75:a4:9e:7f:28:7f:46:df:bc:c5:b5:49:
                    37:3f:1e:5f:63:72:74:9a:fe:0a:34:9d:3d:b2:ed:
                    7f:c1:c9:c2:f6:73:6e:de:50:f7:2e:97:de:31:73:
                    9e:13:0b:81:4e:9a:b1:93:2c:c0:37:52:6b:78:39:
                    c2:f9:95:28:c3:b5:dd:5c:c6:6a:67:0a:fc:06:79:
                    6a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9E:DD:32:5B:47:FD:71:4B:A7:A4:10:E4:13:67:61:AF:56:13:D4
            X509v3 Authority Key Identifier:
                keyid:ED:DE:94:56:DF:B0:E0:B6:14:14:79:B3:6F:E3:2C:A0:BF:98:68:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3137372e3133302e302e302f32302d3234203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:78:97:e6:e6:6c:fb:83:09:d5:6a:93:af:83:68:45:6f:2b:
         6a:30:1d:7f:72:80:36:61:2b:b3:26:31:5b:88:2c:6d:8f:12:
         f7:48:a8:2c:b8:b1:68:5c:71:5c:13:e2:64:ec:30:76:62:d0:
         70:60:f1:f4:7d:31:c7:b0:8d:eb:02:e6:50:28:f6:a3:85:9e:
         b8:74:3d:e1:c0:4b:02:ff:ca:bc:c9:b4:95:fe:06:51:b8:89:
         6b:c6:ae:e6:ca:93:c0:b4:80:23:0a:ec:6b:29:9e:5a:8c:35:
         a0:0c:c4:3e:20:df:73:25:61:3c:57:09:ea:a8:90:08:19:c6:
         ea:67:13:2c:2e:dc:af:39:0e:4b:8a:e7:04:38:b2:50:6f:83:
         85:7d:64:ca:45:48:15:92:bd:82:71:04:26:3a:65:eb:2d:0c:
         e6:b8:1e:51:1a:bb:1f:06:41:c3:05:1c:23:42:45:63:37:16:
         96:19:c8:eb:49:2b:bc:94:43:96:96:8c:87:80:5f:56:75:a0:
         1e:78:58:80:1e:ca:aa:0c:f4:8a:24:17:76:a8:21:41:fe:e9:
         a8:fb:55:31:05:f2:5f:f6:36:f4:d5:cd:95:7e:6e:ed:d1:d0:
         af:24:4c:88:4f:45:46:58:74:75:78:6c:c7:ab:9a:f6:bb:c6:
         23:96:b9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:16:51 2025 by rpki-client