Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e31312e302f32342d3234203d3e20323632363137.roa
File:                     3137372e38372e31312e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          cTYgkOEsVuf+vNcMcvA3r7vAnmkHCyDQ+bYPsA+FQm8=
Subject key identifier:   CE:B7:3D:C8:42:31:06:74:CA:9F:03:13:DF:8C:7D:43:BB:19:BC:4A
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       5E2C50F80364A53B23EACB7AC0114A3258126EF7
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e31312e302f32342d3234203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:35:58 +0000
ROA not before:           Wed 05 Mar 2025 20:30:58 +0000
ROA not after:            Wed 04 Mar 2026 20:35:58 +0000
asID:                     262617
IP address blocks:        177.87.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2c:50:f8:03:64:a5:3b:23:ea:cb:7a:c0:11:4a:32:58:12:6e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:30:58 2025 GMT
            Not After : Mar  4 20:35:58 2026 GMT
        Subject: CN=CEB73DC842310674CA9F0313DF8C7D43BB19BC4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:fe:15:8b:63:5e:4e:24:df:b0:7b:cb:a8:
                    e7:0d:f9:0f:48:a3:f0:d8:0c:d0:67:9a:bd:ec:a6:
                    e7:0f:b3:ed:db:50:85:54:f8:e2:ea:b3:55:b1:12:
                    74:46:82:16:c4:cf:d7:b8:c4:14:d4:ba:dc:ba:4c:
                    14:db:97:77:91:08:ab:d1:17:0b:db:24:66:27:4c:
                    8c:e3:bf:d6:4f:4e:fb:1f:f8:2f:94:91:fe:6e:5e:
                    1d:fd:96:97:3f:de:99:41:3b:a6:98:8b:a7:2d:e4:
                    27:09:93:f6:e3:c6:d1:d1:d6:93:ae:fc:fe:92:91:
                    ba:ac:53:6e:71:aa:b7:c1:35:ba:8a:69:9d:f9:69:
                    ea:2e:e0:cb:aa:6d:57:3b:86:fd:b8:f8:56:1b:4e:
                    78:28:75:a4:2b:d2:78:87:bf:cc:bc:59:d6:66:3d:
                    b0:81:ed:ee:74:49:ef:ed:a1:6b:9b:89:eb:a1:13:
                    cf:9e:3b:4c:52:0f:a1:c6:7b:fc:23:04:21:a0:44:
                    62:c3:4b:f0:a5:83:fa:3c:a2:48:b0:10:24:29:18:
                    30:29:53:97:5d:57:93:3e:ee:23:09:da:68:89:e6:
                    7b:25:d8:ec:9b:3f:a1:1d:73:ae:76:46:b5:d8:6b:
                    4e:56:de:b7:74:b7:8c:cc:86:1d:fe:42:a1:aa:1e:
                    95:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B7:3D:C8:42:31:06:74:CA:9F:03:13:DF:8C:7D:43:BB:19:BC:4A
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e31312e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:71:21:d7:4c:a9:ce:bf:0d:ab:65:2b:26:63:99:fb:f2:85:
         be:7b:9e:76:65:7d:f0:19:06:10:ad:62:e0:86:32:65:68:ac:
         90:0f:c1:48:5c:b8:5d:d8:83:28:f1:0f:a7:4f:bc:da:cb:d5:
         53:5e:ca:e5:44:60:aa:1a:54:a0:9f:d0:4d:96:42:b0:79:c0:
         03:2b:65:5e:01:e3:18:25:88:32:df:c0:49:ad:3a:e2:e2:f0:
         d7:34:b8:4a:94:0c:3b:99:b3:d5:4b:41:09:8b:db:c5:4e:2d:
         ab:6a:23:ad:10:1c:47:9a:e8:10:de:38:e6:f1:81:b6:dc:c8:
         79:bd:38:27:29:03:3c:79:18:a7:d8:ab:a1:17:81:f2:d2:6c:
         6a:53:b2:21:85:e2:c2:85:63:8a:c0:6c:b6:45:6d:59:30:53:
         d5:78:e6:2d:e8:9b:c4:ea:72:7e:88:8c:98:76:41:42:b5:b8:
         d4:f2:b9:e3:83:ed:5a:56:db:cf:94:ce:ec:2d:1a:05:5d:f6:
         31:88:46:37:6e:58:f8:bd:22:6d:e4:bc:01:4e:f3:2a:ee:40:
         31:d5:15:c6:08:2a:7f:7e:f7:41:d4:c8:f8:c3:b4:b0:80:a5:
         a1:bb:9b:2d:4a:8d:b7:f2:a9:85:14:2e:2f:dc:40:8d:44:03:
         96:a6:13:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:29:29 2025 by rpki-client