Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31372e302f32342d3234203d3e203532393136.roa
File:                     3134332e3235352e31372e302f32342d3234203d3e203532393136.roa (raw, json)
Hash identifier:          rxloswVSw279W53t/iTsxwe+lZcbmclRzEWR0SDGcDA=
Subject key identifier:   23:51:B7:8A:38:88:7B:6E:71:96:B1:24:63:EB:4B:CC:21:A5:A3:6A
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       74BC0CF7DBB4001E7DF909C1E7465B3D12DAD5B6
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31372e302f32342d3234203d3e203532393136.roa
Signing time:             Wed 05 Mar 2025 21:16:10 +0000
ROA not before:           Wed 05 Mar 2025 21:11:10 +0000
ROA not after:            Wed 04 Mar 2026 21:16:10 +0000
asID:                     52916
IP address blocks:        143.255.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bc:0c:f7:db:b4:00:1e:7d:f9:09:c1:e7:46:5b:3d:12:da:d5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Mar  5 21:11:10 2025 GMT
            Not After : Mar  4 21:16:10 2026 GMT
        Subject: CN=2351B78A38887B6E7196B12463EB4BCC21A5A36A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:d4:a7:fe:cd:3f:87:e6:b1:8c:4f:4e:09:
                    ea:36:00:c4:5e:6c:27:b8:86:87:5e:0b:5b:43:d1:
                    28:19:ee:2a:4c:58:72:e6:f8:2f:97:d9:2b:4a:12:
                    10:12:af:5d:7a:91:2a:d6:f4:73:a9:2b:1c:37:24:
                    f8:ab:94:a9:37:66:4d:2c:5d:a1:14:68:00:bd:79:
                    85:1f:47:ac:d6:de:d7:f6:1d:42:cd:df:2f:9a:4f:
                    ce:94:bb:9d:90:b9:58:7c:c1:c1:27:51:f8:f1:3e:
                    cd:9c:5a:63:56:7a:f4:46:71:3b:0f:65:c1:7d:cc:
                    a9:b5:f7:a3:e5:8a:ee:c0:18:d2:ae:2a:29:00:79:
                    a1:21:0a:5c:fc:44:1e:96:31:30:d3:16:61:4f:8b:
                    5f:7e:da:17:f6:08:b6:03:17:57:e8:cc:f9:f3:55:
                    15:4f:85:a3:5c:54:68:12:cd:56:99:62:ad:98:7e:
                    44:a9:fd:6b:5d:f8:b3:f9:7b:4a:83:b7:ad:47:b8:
                    24:2c:97:d8:77:9d:9e:3e:61:c5:02:f6:fd:4d:f2:
                    27:88:53:e0:7e:6a:66:fc:7f:5a:fe:77:56:b9:e7:
                    e2:b7:46:59:cb:f0:a2:9f:e8:67:ea:84:67:44:56:
                    b8:37:f3:2a:67:75:03:7e:e5:b4:b3:54:cc:e6:88:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:51:B7:8A:38:88:7B:6E:71:96:B1:24:63:EB:4B:CC:21:A5:A3:6A
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31372e302f32342d3234203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b3:a3:b9:3a:5a:f4:3b:12:d4:34:fd:3a:30:7f:ec:0f:ea:
         19:78:4b:43:c0:cc:af:c1:50:d0:b1:38:41:2d:88:9c:61:15:
         c1:0b:03:55:4a:81:ee:ca:70:c9:55:b3:7e:bf:f6:7b:35:8a:
         43:39:c9:b3:45:93:71:e8:18:d4:82:33:9c:c3:ad:6f:2d:a1:
         47:8c:50:c9:7f:8d:91:37:47:77:87:a5:95:4e:a1:c8:9a:e5:
         de:db:62:d1:96:f2:75:2d:f7:ec:e8:e9:18:ce:7a:23:f1:b9:
         de:72:87:b5:1e:3e:bc:cc:ce:96:00:20:3d:b9:d8:01:b0:a8:
         a2:b7:d8:ee:49:5c:1f:02:62:87:f5:e2:63:81:d2:16:71:cf:
         5a:57:0f:bb:77:2f:f7:2d:6e:50:25:08:0a:c1:8a:ac:5a:87:
         b4:16:5d:3b:b1:be:74:62:ea:29:9b:92:72:7c:f2:62:79:6b:
         90:d5:e6:24:5d:4e:58:49:91:e7:8a:92:47:20:ca:d8:f1:db:
         82:ec:64:eb:bc:c9:fa:47:78:43:57:1a:a5:68:df:02:e0:71:
         52:e1:7e:79:c1:d2:1b:bf:bf:54:89:d7:e6:11:b0:a1:66:68:
         17:7c:fb:ef:96:5d:1f:5c:fd:0f:33:41:f8:3f:72:fd:51:d6:
         d9:49:64:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:44 2025 by rpki-client