Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139362e302f32332d3233203d3e20323632383238.roa
File:                     3137372e3135352e3139362e302f32332d3233203d3e20323632383238.roa (raw, json)
Hash identifier:          NCK9GjDH4TfBXEWatB/DW00EdWRJNNwQoLKCI3zNh1k=
Subject key identifier:   6C:87:F6:29:65:D8:3A:84:54:C8:99:4B:EF:7D:98:61:89:E9:A5:EE
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       0349D8DAA8737C78001021164959AF29314F7A78
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139362e302f32332d3233203d3e20323632383238.roa
Signing time:             Tue 11 Mar 2025 17:58:39 +0000
ROA not before:           Tue 11 Mar 2025 17:53:39 +0000
ROA not after:            Tue 10 Mar 2026 17:58:39 +0000
asID:                     262828
IP address blocks:        177.155.196.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:49:d8:da:a8:73:7c:78:00:10:21:16:49:59:af:29:31:4f:7a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Mar 11 17:53:39 2025 GMT
            Not After : Mar 10 17:58:39 2026 GMT
        Subject: CN=6C87F62965D83A8454C8994BEF7D986189E9A5EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:19:c1:7b:73:1d:a0:f3:ad:b2:84:50:da:
                    77:aa:f1:c3:75:65:16:41:1c:66:45:09:2c:3a:51:
                    42:f5:0b:7f:63:53:87:9a:40:80:af:86:4c:f1:ee:
                    35:ea:ed:b3:16:96:f4:92:d2:b0:fb:e9:ff:e1:c2:
                    e3:84:29:99:87:12:90:f5:76:11:2c:61:6f:dc:cc:
                    e3:52:f0:10:9b:f1:f0:5a:9b:96:31:bd:9c:4b:d5:
                    95:6a:73:9e:cd:5e:50:9a:89:18:26:84:1a:05:b5:
                    d2:af:29:c8:9a:b3:b8:e0:b1:9b:83:64:d1:f5:d6:
                    63:b2:24:1e:a8:59:d9:47:53:53:a3:9e:77:29:76:
                    8b:b2:2b:a0:18:23:6e:7f:66:06:43:a9:de:bb:18:
                    bb:39:5c:12:b3:e0:d4:b5:8b:9c:58:20:07:74:37:
                    87:6b:ba:b1:c0:d3:63:ff:64:3f:c4:31:13:26:37:
                    30:fb:f1:03:30:c9:97:21:31:ad:e5:79:17:69:41:
                    24:e9:05:03:a1:39:86:78:ea:dd:2e:b3:02:18:ec:
                    f7:a8:e6:61:b0:60:d6:af:ab:21:ba:c6:bd:ba:e6:
                    b1:a0:9a:51:34:05:f9:00:5c:f9:24:16:e2:72:d7:
                    72:51:af:5b:24:68:ff:5c:bb:32:81:09:2d:db:99:
                    38:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:87:F6:29:65:D8:3A:84:54:C8:99:4B:EF:7D:98:61:89:E9:A5:EE
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139362e302f32332d3233203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:5a:ec:5b:98:25:12:79:a8:9a:8c:f6:cf:c7:2b:4f:c0:c3:
         04:d8:a6:6e:52:96:da:18:a1:1d:27:42:47:c2:ca:fc:ff:6a:
         89:70:d3:97:9d:b0:17:be:68:53:b2:70:ea:59:09:46:44:e4:
         e8:0d:17:c8:da:4d:71:31:80:06:df:f2:09:2f:af:e5:67:7f:
         04:f9:09:a3:01:6d:d5:6b:61:d5:55:21:1f:9b:96:bf:65:eb:
         a1:c6:26:70:42:98:1e:95:16:a4:ee:33:f5:60:46:7c:3b:fc:
         50:5c:1a:68:b8:64:62:08:ef:00:9d:aa:c4:c3:31:f2:31:17:
         3b:fd:66:7c:11:e9:39:ba:2d:e7:e0:4a:06:42:cb:4e:c4:95:
         ae:89:fa:20:b6:3c:86:01:15:a6:9e:b8:16:e0:07:99:6a:3f:
         32:5d:d2:42:95:93:2f:6a:63:e2:fd:ad:fd:85:fb:dc:ad:91:
         32:da:c6:96:19:ae:05:99:9a:fc:ca:2b:02:a0:47:8d:f3:e9:
         db:dd:c6:34:b8:15:5d:12:ce:54:99:a4:e0:82:b7:87:94:fa:
         12:3b:51:c5:af:12:7f:f4:ae:f1:40:e5:68:1d:ba:c0:85:76:
         f9:2f:e1:b9:b6:31:ce:08:f2:ea:63:33:00:64:7f:1b:0e:68:
         15:d3:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:23 2025 by rpki-client