Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/3137372e3139302e3134342e302f32342d3234203d3e20323633343536.roa
File:                     3137372e3139302e3134342e302f32342d3234203d3e20323633343536.roa (raw, json)
Hash identifier:          XLup/xN1eBDt6vYsj/NkJ3pG0Tg/5uY4ellaThZlcHg=
Subject key identifier:   B4:C5:4F:2B:F5:4B:98:9C:DD:4E:5F:1F:C0:AE:E1:77:C7:85:45:A6
Certificate issuer:       /CN=01D49D08A0B6576FA14AD618E6273454526E7BC9
Certificate serial:       295A8287DBAA150C08697165D6945DCED20A27A5
Authority key identifier: 01:D4:9D:08:A0:B6:57:6F:A1:4A:D6:18:E6:27:34:54:52:6E:7B:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D49D08A0B6576FA14AD618E6273454526E7BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/3137372e3139302e3134342e302f32342d3234203d3e20323633343536.roa
Signing time:             Tue 28 May 2024 12:18:14 +0000
ROA not before:           Tue 28 May 2024 12:13:14 +0000
ROA not after:            Tue 27 May 2025 12:18:14 +0000
asID:                     263456
IP address blocks:        177.190.144.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5a:82:87:db:aa:15:0c:08:69:71:65:d6:94:5d:ce:d2:0a:27:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01D49D08A0B6576FA14AD618E6273454526E7BC9
        Validity
            Not Before: May 28 12:13:14 2024 GMT
            Not After : May 27 12:18:14 2025 GMT
        Subject: CN=B4C54F2BF54B989CDD4E5F1FC0AEE177C78545A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:f5:2e:7d:f4:83:fe:f2:4c:9e:73:ad:18:
                    0e:b4:24:d5:32:8c:f2:87:05:9f:87:6a:4f:fc:bb:
                    b7:ee:09:d8:c1:0c:8f:62:fb:ca:e1:c7:d2:48:b7:
                    40:32:d8:5c:fb:fb:c1:c9:bc:c1:89:96:09:46:3e:
                    86:d2:a8:3b:cd:30:d2:89:64:a1:31:b0:14:4d:90:
                    25:93:2a:16:d4:26:b9:7f:df:59:61:94:d9:fe:74:
                    ac:ea:04:e6:52:0c:a1:c1:65:aa:f0:7c:55:6a:2f:
                    53:62:4c:1b:84:f8:d1:9c:09:80:0c:80:64:e0:e4:
                    32:3d:05:c4:32:19:95:d8:66:88:d0:cf:9c:7c:3a:
                    5f:5c:f2:79:46:40:a5:e1:75:80:ca:3e:5a:c3:49:
                    90:d7:64:76:4e:9e:9f:43:01:34:85:a3:11:08:8e:
                    57:dd:a5:e1:03:77:71:43:6a:26:4f:cc:18:ee:9a:
                    63:46:20:25:61:31:b2:93:3b:ae:de:68:62:4f:e8:
                    b0:6b:dd:9e:22:60:2f:6a:3a:b0:b7:e2:a8:d5:6d:
                    17:5c:59:ee:f0:3e:ee:1d:fd:f4:ca:d4:ed:6b:92:
                    9c:9d:c2:fc:35:af:5e:26:63:4c:8d:5d:e8:1a:73:
                    45:d5:06:32:24:50:76:86:63:ba:37:3a:65:a1:b6:
                    93:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C5:4F:2B:F5:4B:98:9C:DD:4E:5F:1F:C0:AE:E1:77:C7:85:45:A6
            X509v3 Authority Key Identifier:
                keyid:01:D4:9D:08:A0:B6:57:6F:A1:4A:D6:18:E6:27:34:54:52:6E:7B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/01D49D08A0B6576FA14AD618E6273454526E7BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D49D08A0B6576FA14AD618E6273454526E7BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/3137372e3139302e3134342e302f32342d3234203d3e20323633343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:c7:eb:09:3d:a9:60:1a:7b:cc:5b:9d:b4:46:b9:0d:53:f1:
         c6:17:f6:d5:bc:e3:19:e1:ab:ea:77:b6:66:bd:2b:4e:84:14:
         0a:87:d7:77:98:c6:7a:d5:2f:21:e3:29:f3:82:2c:6a:68:ae:
         75:c1:42:60:5b:a5:e2:e3:84:8f:fb:29:df:4b:a2:9d:c7:3c:
         2a:1c:f2:54:e9:11:cd:5c:4e:26:49:84:d2:99:fe:6e:74:8e:
         b1:dd:1f:27:bd:0b:2f:55:72:e3:41:23:6a:57:99:5a:57:4c:
         5e:f5:bd:a8:37:a6:59:39:a1:c8:fe:51:ca:7e:ee:fe:8d:ae:
         7b:a3:e8:7c:7c:d5:e3:2d:57:50:14:52:91:bf:95:84:29:ab:
         a8:62:0c:67:35:4c:3a:36:ca:87:d3:ec:92:0a:7d:fd:87:63:
         29:09:d5:f5:08:a3:1b:a4:82:99:66:96:6a:9e:38:f4:db:a0:
         dd:be:ee:47:16:88:2f:83:03:78:e3:84:8d:eb:bc:ca:d3:9f:
         b6:d3:38:92:ce:5c:89:20:96:9d:c0:a8:6f:10:20:49:eb:23:
         78:5a:53:09:33:04:4f:05:f3:6d:4e:3e:c2:76:b6:52:9a:b4:
         f9:e5:20:32:37:5a:e4:6c:bb:e1:07:b9:ef:0a:ff:75:3f:23:
         bc:44:81:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:28 2025 by rpki-client