Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135352e302f32342d3234203d3e20323633343537.roa
File:                     3137372e3139302e3135352e302f32342d3234203d3e20323633343537.roa (raw, json)
Hash identifier:          sNwvlT1pf+WnSo9qH3vJ2nVs33d6hdlNy+XmjpiGVOs=
Subject key identifier:   57:4A:C6:7E:CF:C3:4F:2C:D6:04:1F:D8:3D:B9:2A:42:F4:A5:22:D1
Certificate issuer:       /CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
Certificate serial:       07C03B1643F5FE2D9F10A0BB18A8D73F0130B3FC
Authority key identifier: D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135352e302f32342d3234203d3e20323633343537.roa
Signing time:             Thu 06 Mar 2025 08:46:48 +0000
ROA not before:           Thu 06 Mar 2025 08:41:48 +0000
ROA not after:            Thu 05 Mar 2026 08:46:48 +0000
asID:                     263457
IP address blocks:        177.190.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c0:3b:16:43:f5:fe:2d:9f:10:a0:bb:18:a8:d7:3f:01:30:b3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
        Validity
            Not Before: Mar  6 08:41:48 2025 GMT
            Not After : Mar  5 08:46:48 2026 GMT
        Subject: CN=574AC67ECFC34F2CD6041FD83DB92A42F4A522D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:a1:ef:47:a4:40:00:f5:c0:30:ac:da:fb:
                    4a:33:95:40:8e:a9:b2:b1:9c:c4:df:0d:39:c3:a8:
                    ba:b7:f0:69:6a:04:37:6b:96:bf:3a:ad:65:c1:61:
                    bb:1c:1b:5f:af:15:62:73:a0:f8:1c:e4:8b:bb:00:
                    0e:68:69:b4:cb:35:93:49:22:a9:1c:17:7b:cf:b4:
                    79:00:7c:de:8c:63:cf:58:4d:42:88:69:3b:55:dd:
                    dc:b9:67:17:18:7f:73:70:1d:ed:6c:1e:ec:db:ef:
                    90:48:ae:9f:0d:06:2b:c7:a8:91:d9:13:14:dd:ae:
                    1d:69:c9:a4:a0:73:91:d6:04:26:4c:f6:65:4f:3a:
                    4d:57:e8:b7:86:07:f6:dd:ab:99:3a:22:03:c8:89:
                    4f:90:7c:a1:01:1e:c1:f2:1f:09:ee:2d:3d:27:4c:
                    13:ca:c9:f3:c1:0f:c9:f5:c8:1c:c4:33:ea:90:c5:
                    89:44:12:92:2d:38:db:c0:8e:bb:87:a6:06:80:f8:
                    7d:c0:fb:c0:88:c3:68:ad:29:b8:af:f1:85:1c:7a:
                    d6:2f:37:a7:55:f5:8a:65:d0:5f:0f:df:10:5d:4d:
                    54:45:1c:9f:56:09:3d:b8:81:32:51:8c:28:98:91:
                    56:66:93:10:26:9a:d8:61:5c:52:cb:73:c6:f3:d5:
                    3e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4A:C6:7E:CF:C3:4F:2C:D6:04:1F:D8:3D:B9:2A:42:F4:A5:22:D1
            X509v3 Authority Key Identifier:
                keyid:D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135352e302f32342d3234203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:1c:95:f1:5c:97:d4:88:57:38:92:fb:2f:94:0e:16:74:b4:
         5f:8b:cb:9e:ed:e1:a2:8b:2e:03:fc:04:a3:f4:33:1d:71:c9:
         a4:92:09:a3:11:e5:81:cf:96:77:59:53:33:cf:06:44:3d:55:
         c7:97:9b:15:ee:8a:bd:14:7f:92:1b:31:ea:0c:8e:2f:9b:ea:
         ed:80:7f:db:36:32:dd:70:00:0e:d3:38:47:32:bb:11:d8:a9:
         b3:e9:ac:39:f5:d6:9e:eb:cd:0b:d5:65:a2:bf:8c:d6:e2:bc:
         70:eb:f2:83:b3:25:75:08:5b:4f:d0:f1:d4:24:3f:99:33:b9:
         2c:27:0f:99:95:c1:a9:c2:d8:1b:33:4b:0f:19:a3:d5:0e:40:
         83:a8:e3:c3:22:dd:63:d9:7d:3c:8e:c5:bd:d4:25:f9:ca:fe:
         10:3a:c7:33:be:41:32:39:3e:16:9e:f1:d5:f0:c6:cc:c6:f3:
         33:14:de:15:fa:29:55:86:7d:64:31:b0:e9:37:40:89:12:21:
         c4:00:eb:94:f3:45:3a:1d:d4:3b:ad:d1:54:45:59:b1:2b:f4:
         16:1e:76:3e:a7:4e:7b:63:09:4e:7e:5f:9d:c6:bf:f4:e8:54:
         c8:61:72:2d:f2:ca:6a:02:4a:f8:4f:2a:20:9b:71:2a:dd:c4:
         f0:9d:07:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:28:21 2025 by rpki-client