Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3137372e3135352e3132382e302f32302d3234203d3e203533303632.roa
File:                     3137372e3135352e3132382e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          pzHB3fsmZSZqcUb+BDL6MJPATsuPukj7SttLLSalkko=
Subject key identifier:   53:2E:32:CF:A4:2A:A5:9C:6B:C3:65:E6:CC:ED:C9:6F:4D:FE:29:D9
Certificate issuer:       /CN=174E7897062398E9506F0862FA46597DF937825D
Certificate serial:       650065493C64A30C47C2EEB0C81DAAEE2FF1DA33
Authority key identifier: 17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3137372e3135352e3132382e302f32302d3234203d3e203533303632.roa
Signing time:             Mon 10 Feb 2025 19:10:08 +0000
ROA not before:           Mon 10 Feb 2025 19:05:08 +0000
ROA not after:            Mon 09 Feb 2026 19:10:08 +0000
asID:                     53062
IP address blocks:        177.155.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:00:65:49:3c:64:a3:0c:47:c2:ee:b0:c8:1d:aa:ee:2f:f1:da:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174E7897062398E9506F0862FA46597DF937825D
        Validity
            Not Before: Feb 10 19:05:08 2025 GMT
            Not After : Feb  9 19:10:08 2026 GMT
        Subject: CN=532E32CFA42AA59C6BC365E6CCEDC96F4DFE29D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:29:13:34:26:b3:89:d8:90:db:c9:bc:b5:
                    d8:18:3a:f3:14:ae:4b:52:1c:db:91:e7:f5:77:14:
                    5f:a4:66:05:35:55:d5:b1:0e:2d:4b:09:3a:a1:ad:
                    09:dc:8c:26:e9:17:1e:28:d1:d7:0d:3f:b0:1a:61:
                    7c:ab:a3:b4:2c:70:6a:62:80:28:ea:4a:d2:8f:9c:
                    d7:1b:9b:14:f5:f5:5e:58:83:00:6d:78:d6:e5:20:
                    7e:9a:fc:ce:bc:73:50:2c:a5:42:49:96:7d:9c:40:
                    57:b4:b4:dd:bd:b2:8f:10:44:cd:9e:91:1f:6c:38:
                    3a:50:61:5f:7e:bd:d2:2a:c2:d8:5e:c2:30:88:0d:
                    d9:24:0d:a7:53:51:49:34:11:db:51:91:39:95:8f:
                    96:fe:74:d2:ea:cd:37:e8:d3:ca:dd:1b:be:aa:ce:
                    d0:b8:22:d7:1f:80:34:bc:1a:17:49:53:b6:70:28:
                    cc:42:f8:71:6b:58:61:fe:dc:d1:7f:b2:67:28:ab:
                    af:d0:03:1f:c2:08:7e:9c:84:65:c0:fa:4f:71:b1:
                    90:97:bb:12:bc:42:df:a5:c8:87:a5:55:01:fa:e5:
                    60:b1:b0:9c:8d:14:d4:f0:ce:75:ae:3c:2e:26:15:
                    95:d8:9f:f4:17:b9:24:86:34:ee:b6:c0:55:ea:a8:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2E:32:CF:A4:2A:A5:9C:6B:C3:65:E6:CC:ED:C9:6F:4D:FE:29:D9
            X509v3 Authority Key Identifier:
                keyid:17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/174E7897062398E9506F0862FA46597DF937825D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3137372e3135352e3132382e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:8d:4d:08:c6:71:a8:97:a1:cf:41:22:86:97:42:d1:05:78:
         d6:22:99:df:af:5c:7a:ed:26:41:99:4e:6a:7c:e6:52:bc:d0:
         cb:e5:82:0a:13:c4:73:75:8e:db:ad:45:0b:71:0e:63:3c:0f:
         8a:11:c6:91:f0:1d:a8:ab:f6:2f:27:bb:a4:96:3a:0d:be:88:
         e7:11:d2:5f:da:a1:74:1c:c8:0d:3b:ec:dd:fb:aa:91:9e:0b:
         fe:99:83:24:04:7a:3d:19:5e:9e:a0:90:94:4b:d4:76:7f:50:
         b3:a9:59:f6:7e:6d:0f:1e:3c:de:67:23:53:ef:bd:99:ee:3d:
         af:70:54:8f:33:b4:93:19:45:2f:fe:44:7f:e7:92:15:7a:3a:
         8f:d9:92:f5:de:f1:12:d0:8e:27:9c:12:59:82:33:02:d4:0c:
         3f:a0:c4:66:46:2f:18:39:5a:a4:f0:da:43:4b:5a:12:42:5b:
         bc:2b:43:98:39:fc:83:1b:02:88:da:30:40:fa:6e:86:c9:8f:
         f6:64:3d:5e:13:26:56:32:da:6e:22:37:8e:14:d6:99:ea:ef:
         f1:12:fe:27:24:84:9d:c5:ea:2e:da:cd:12:84:5d:81:7b:f2:
         d3:f4:dc:f8:7c:fa:07:cd:14:76:bb:af:62:1b:56:65:36:9c:
         67:60:de:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:17:32 2025 by rpki-client