Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3137372e3132382e39322e302f32322d3234203d3e20323632383035.roa
File:                     3137372e3132382e39322e302f32322d3234203d3e20323632383035.roa (raw, json)
Hash identifier:          gJFI3Ht86c5sOYU8VqbBkKgx4q7ImoeS+UpYl6kKAXI=
Subject key identifier:   2D:B6:A6:C3:16:1A:43:0B:A3:51:D5:A1:69:99:5B:22:90:61:EB:DA
Certificate issuer:       /CN=0300C80E32BC11BAD2DEC8ACD83432D5488A2234
Certificate serial:       1F5B0E2DF4F2B1E8DC5A0CEB12C1D51588C967E8
Authority key identifier: 03:00:C8:0E:32:BC:11:BA:D2:DE:C8:AC:D8:34:32:D5:48:8A:22:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3137372e3132382e39322e302f32322d3234203d3e20323632383035.roa
Signing time:             Tue 11 Feb 2025 11:16:49 +0000
ROA not before:           Tue 11 Feb 2025 11:11:49 +0000
ROA not after:            Tue 10 Feb 2026 11:16:49 +0000
asID:                     262805
IP address blocks:        177.128.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5b:0e:2d:f4:f2:b1:e8:dc:5a:0c:eb:12:c1:d5:15:88:c9:67:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0300C80E32BC11BAD2DEC8ACD83432D5488A2234
        Validity
            Not Before: Feb 11 11:11:49 2025 GMT
            Not After : Feb 10 11:16:49 2026 GMT
        Subject: CN=2DB6A6C3161A430BA351D5A169995B229061EBDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:9f:d6:ca:ab:99:3c:c5:8f:cf:05:a3:d2:
                    40:28:a3:4f:a1:0e:1a:3b:30:07:16:c8:8b:42:df:
                    0f:08:f3:fc:a3:49:ff:4d:50:00:b4:21:e4:c3:d7:
                    d2:a9:9b:56:de:4b:7f:e0:68:71:f5:6a:9e:1d:70:
                    f2:04:da:ec:af:ef:54:2d:c0:c4:2c:e2:82:a6:2f:
                    03:ac:e6:69:3e:e7:b5:5c:1e:49:de:75:44:a0:1c:
                    56:94:a8:d9:01:d1:b4:e1:ae:25:d8:55:3e:da:e2:
                    e9:2d:e7:47:0e:a7:d4:50:0d:c9:2f:1d:56:83:dc:
                    02:3d:a1:af:7e:f8:d8:01:c0:69:c7:50:26:45:b3:
                    04:45:3e:fe:3c:cf:5d:36:aa:a9:0f:1f:bc:ce:b5:
                    8c:31:b7:f5:85:81:fa:ba:c5:1a:9a:c1:be:7f:25:
                    8c:cf:f7:f3:3b:01:fb:e7:8b:67:3a:d2:3c:29:76:
                    5f:4e:4a:45:19:8d:69:88:44:a8:1d:2c:a6:f0:e6:
                    fa:fa:79:ec:ac:aa:66:cd:81:e4:03:29:ed:f1:c8:
                    56:97:34:0e:3d:8e:2e:32:c4:c8:2d:be:74:4f:b1:
                    bb:af:f9:db:47:7d:13:e5:37:34:db:ce:1a:6e:6a:
                    1d:be:96:82:04:fc:8a:f6:b9:a8:6a:9a:94:63:f3:
                    0a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B6:A6:C3:16:1A:43:0B:A3:51:D5:A1:69:99:5B:22:90:61:EB:DA
            X509v3 Authority Key Identifier:
                keyid:03:00:C8:0E:32:BC:11:BA:D2:DE:C8:AC:D8:34:32:D5:48:8A:22:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3137372e3132382e39322e302f32322d3234203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:a3:4c:bc:ee:8f:bd:ee:57:2f:19:6d:8d:38:e3:4b:6d:5a:
         dd:bd:76:10:c1:a1:3a:76:e2:ad:95:ea:17:b3:c8:e9:97:5a:
         19:6e:cd:44:82:a1:ad:5a:c3:31:dd:42:98:ad:9f:fb:d7:bd:
         f1:c5:af:cc:b3:85:93:8f:25:2a:c1:3a:d3:a0:99:54:a5:e4:
         b3:52:87:0d:8d:5f:48:3d:c6:91:2b:8d:16:f6:bc:a8:41:0c:
         3f:34:48:37:ca:26:0a:a1:08:08:11:59:65:de:db:41:3c:f4:
         10:06:64:41:f2:0f:f8:cd:f8:b0:5d:e0:85:4b:81:95:cf:ec:
         e5:b1:f1:d3:a7:61:f5:33:44:3a:3c:13:86:3a:7d:65:3f:11:
         b4:67:e6:43:91:0f:a6:28:35:9a:d7:c6:81:0e:06:c8:cd:af:
         d2:34:11:9f:d8:75:55:6f:0a:c2:ac:87:36:99:91:44:28:86:
         ca:2a:fc:92:16:7c:7a:02:24:e9:4b:e5:08:35:89:84:97:f0:
         1c:e4:ab:d7:df:be:b9:72:46:25:19:ed:ef:9f:15:81:82:78:
         8b:ef:a1:ac:33:d2:62:d4:ca:d6:0d:4d:d8:d3:a1:17:ed:a9:
         02:04:65:18:8a:50:90:56:3b:39:46:70:2a:14:c5:d9:0c:9a:
         71:7f:7c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:48:23 2025 by rpki-client