Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32332d3233203d3e20323632383238.roa
File:                     3137372e3135352e3139322e302f32332d3233203d3e20323632383238.roa (raw, json)
Hash identifier:          Sn3pqOek93nSvSilZqA0cKU3HoAIQeX42q871GQiGHo=
Subject key identifier:   28:95:67:19:A0:50:CF:67:7B:14:06:C3:F6:3A:E5:AB:CA:43:29:27
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       07308A489E659C0DCECBD75C21C82C570D816460
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32332d3233203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 17:58:15 +0000
ROA not before:           Tue 11 Mar 2025 17:53:15 +0000
ROA not after:            Tue 10 Mar 2026 17:58:15 +0000
asID:                     262828
IP address blocks:        177.155.192.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:30:8a:48:9e:65:9c:0d:ce:cb:d7:5c:21:c8:2c:57:0d:81:64:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:53:15 2025 GMT
            Not After : Mar 10 17:58:15 2026 GMT
        Subject: CN=28956719A050CF677B1406C3F63AE5ABCA432927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:16:51:70:eb:84:5c:f9:06:f6:a4:9b:1a:
                    ea:b0:e6:d2:e6:6f:f8:e6:52:4f:d6:10:2b:7e:9c:
                    bf:37:5b:f2:0d:ae:ff:e8:0d:68:c5:5a:7b:b2:3d:
                    76:44:63:b0:46:80:f5:bd:19:1c:92:1f:87:18:03:
                    06:3f:f6:c5:b8:0b:a0:c3:1d:b2:2e:92:39:95:df:
                    02:61:34:5c:1d:9f:83:55:bf:9d:0d:88:28:32:7b:
                    98:91:37:64:43:9c:34:bb:67:10:c8:56:2b:b6:bd:
                    64:d3:6f:bf:91:7e:90:ff:de:05:77:f1:1c:42:7d:
                    26:49:65:b5:aa:63:48:6d:78:91:0a:7d:37:f3:66:
                    56:17:d3:2e:00:6a:7d:32:cf:af:30:29:56:43:6f:
                    f0:d5:93:a2:16:5e:5e:7d:0b:aa:60:69:93:9f:ea:
                    05:01:3e:ab:49:88:d4:e0:cd:15:1e:cc:03:08:59:
                    bd:cb:07:e2:78:c3:25:57:9e:a0:26:cf:21:89:58:
                    55:57:3f:9d:b3:a9:54:34:5b:c9:60:8b:47:e1:c0:
                    ff:fd:a3:d8:84:4b:f2:9c:60:10:ee:d7:93:85:47:
                    9d:9c:1b:f6:e8:6d:c0:58:ce:c0:dc:18:ce:58:b5:
                    75:de:d3:b5:8d:c6:db:63:20:f9:8e:40:61:b5:5b:
                    c5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:95:67:19:A0:50:CF:67:7B:14:06:C3:F6:3A:E5:AB:CA:43:29:27
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32332d3233203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:6d:f7:30:df:e5:7b:e3:5b:24:d9:8f:d2:fa:1c:97:54:d4:
         a2:27:fe:80:d2:31:76:81:56:23:c8:af:6e:05:a0:aa:a3:bf:
         7f:56:3d:21:20:ff:ed:06:60:77:3c:37:e2:13:e3:7a:12:20:
         89:10:74:25:0f:ab:68:10:79:9e:31:9e:2c:4b:d5:2d:9f:49:
         0c:fc:76:9b:4e:78:ea:b3:32:53:bb:75:78:f8:b7:f1:21:36:
         a7:27:3f:ca:28:b6:5a:1d:b0:b1:74:05:7f:70:35:85:68:b7:
         60:0e:f2:db:ab:83:9f:8f:56:62:e8:21:f5:6d:4c:a8:1b:bb:
         88:1d:0c:b9:10:6f:c5:a6:02:33:d9:16:5c:85:bb:78:95:1a:
         c2:d7:de:ca:d3:41:51:fe:17:4a:23:7b:13:41:95:90:71:c9:
         89:0b:9d:b1:5e:f3:b4:40:db:a4:24:c4:23:71:1b:38:9e:f2:
         81:15:01:81:67:83:1f:8c:6e:1f:5f:b8:fc:68:55:32:ba:d8:
         45:53:98:35:72:9e:2c:81:af:22:e9:ad:f4:ba:54:05:90:f5:
         49:d8:93:29:49:0e:2d:9b:93:6f:1a:f5:27:91:e2:cd:97:b8:
         a1:d6:e5:e1:a0:42:c9:be:90:f2:a5:e4:ed:77:68:f5:c9:d7:
         9c:a3:e9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:38:39 2025 by rpki-client