Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137372e38342e3139322e302f32312d3234203d3e20323632353930.roa
File:                     3137372e38342e3139322e302f32312d3234203d3e20323632353930.roa (raw, json)
Hash identifier:          AWWvifPT+ypsFyT3La0WkReCmSfSbesMKuV/Z7he2RY=
Subject key identifier:   D8:B0:57:30:13:3F:55:84:6E:C7:7D:88:57:2C:08:8D:0F:D3:00:76
Certificate issuer:       /CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
Certificate serial:       7D69988071A9E269CD56FA786687149AB4C3F4DD
Authority key identifier: E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137372e38342e3139322e302f32312d3234203d3e20323632353930.roa
Signing time:             Sat 08 Feb 2025 02:20:28 +0000
ROA not before:           Sat 08 Feb 2025 02:15:28 +0000
ROA not after:            Sat 07 Feb 2026 02:20:28 +0000
asID:                     262590
IP address blocks:        177.84.192.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:69:98:80:71:a9:e2:69:cd:56:fa:78:66:87:14:9a:b4:c3:f4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
        Validity
            Not Before: Feb  8 02:15:28 2025 GMT
            Not After : Feb  7 02:20:28 2026 GMT
        Subject: CN=D8B05730133F55846EC77D88572C088D0FD30076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:f1:eb:ad:e9:a4:87:b7:c7:13:67:2d:26:
                    7b:2c:c2:ad:26:f9:e3:e1:56:7f:fd:72:a5:0b:09:
                    a0:8e:ba:99:a9:b0:98:e4:9d:79:37:25:a7:a5:c4:
                    57:ee:6e:74:9f:0b:59:32:81:8c:3a:c0:ed:05:c5:
                    15:71:f1:33:a2:bb:6e:a9:91:f1:72:c5:20:df:41:
                    d2:00:a9:59:41:1d:0f:63:d0:36:0b:a1:25:55:fe:
                    d9:1f:9e:f7:4b:b7:c3:ca:a0:89:a2:2f:6d:01:82:
                    45:c3:28:63:27:e1:e2:c2:96:15:f4:79:f9:11:87:
                    4b:f9:36:30:0a:78:8f:a3:16:7d:f8:6e:59:ae:42:
                    63:b2:78:cc:55:6a:43:d4:c6:54:69:0e:6e:c4:1c:
                    e4:9a:42:5f:c0:73:df:dd:97:5c:fd:0d:1d:9f:79:
                    c1:81:f1:d7:74:25:3f:f9:b4:35:de:60:7c:2f:b5:
                    22:3a:80:bb:37:6f:3f:2f:fd:e5:b8:74:0b:1b:8f:
                    d9:4d:82:30:0d:b6:c6:18:8b:a4:08:a4:bc:63:cc:
                    c3:19:42:30:0c:db:fc:82:be:c0:53:54:5a:6e:66:
                    d1:0d:8a:e6:e4:d2:51:9e:0a:e2:27:e8:45:47:9c:
                    35:d2:a4:de:48:39:f6:fe:f7:59:e4:5d:ca:09:52:
                    c2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B0:57:30:13:3F:55:84:6E:C7:7D:88:57:2C:08:8D:0F:D3:00:76
            X509v3 Authority Key Identifier:
                keyid:E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137372e38342e3139322e302f32312d3234203d3e20323632353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:c6:a8:9f:61:46:8f:38:28:b5:3a:52:6d:30:60:99:56:3a:
         a3:57:50:2c:64:46:78:6e:de:cd:9c:b8:9d:f1:97:30:7b:2d:
         94:71:db:22:ed:f2:ba:15:56:78:1d:8f:33:ad:56:36:42:fc:
         c2:f1:53:87:00:fa:df:64:fd:e8:2e:df:50:84:a0:91:0a:82:
         e9:13:a5:2c:1a:49:4c:8a:a9:53:3d:6b:49:fa:35:64:68:43:
         80:bb:5b:d6:14:29:87:3e:56:d1:6c:42:cd:f1:93:f9:77:38:
         22:4d:7d:be:c8:f9:1a:fd:f9:4c:48:87:1b:4d:7a:73:7d:9c:
         41:74:49:1e:fa:e7:2d:1b:1a:fb:bf:28:97:43:e9:3b:b6:7f:
         61:41:e2:f8:c1:bc:6b:f3:93:09:51:17:a7:da:59:8f:88:d2:
         03:39:5f:ba:c6:a8:10:64:ef:5c:b3:2a:08:2f:a4:dd:c4:06:
         75:af:c1:b2:b1:6a:67:02:63:b1:a4:bb:fc:8c:59:ed:f9:2f:
         a3:ee:fa:42:51:3c:19:66:7d:31:f8:92:39:ca:9d:a2:4d:e8:
         9f:25:a7:50:19:eb:42:1b:2f:3f:7d:80:7b:53:b7:57:4e:63:
         b7:61:95:eb:42:d5:8e:da:f2:c5:25:8e:09:25:bc:2a:8a:f2:
         a5:c5:b4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:52 2025 by rpki-client