Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3137372e33362e3137362e302f32302d3234203d3e203533303632.roa
File:                     3137372e33362e3137362e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          9YREpxrBuA85NVcVfVTBvuKqI/ZgSOrcLq4qanQwmlw=
Subject key identifier:   BB:5C:07:12:F5:D4:03:D6:2B:6D:D3:92:64:73:26:47:BB:17:27:72
Certificate issuer:       /CN=174E7897062398E9506F0862FA46597DF937825D
Certificate serial:       51B5B64E7CED614F8EA326EA3E6BE61C8ADA9AC6
Authority key identifier: 17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3137372e33362e3137362e302f32302d3234203d3e203533303632.roa
Signing time:             Mon 10 Feb 2025 19:10:09 +0000
ROA not before:           Mon 10 Feb 2025 19:05:09 +0000
ROA not after:            Mon 09 Feb 2026 19:10:09 +0000
asID:                     53062
IP address blocks:        177.36.176.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b5:b6:4e:7c:ed:61:4f:8e:a3:26:ea:3e:6b:e6:1c:8a:da:9a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174E7897062398E9506F0862FA46597DF937825D
        Validity
            Not Before: Feb 10 19:05:09 2025 GMT
            Not After : Feb  9 19:10:09 2026 GMT
        Subject: CN=BB5C0712F5D403D62B6DD39264732647BB172772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:f9:6b:ea:e9:ef:73:70:9d:35:99:67:71:
                    9d:3d:5d:ce:5e:cc:f2:73:3b:a9:cd:04:89:b1:b9:
                    5d:6f:7f:e3:08:da:25:22:f6:d1:ea:3c:80:e1:f5:
                    56:22:75:12:66:9b:e2:e4:37:28:e2:87:43:90:0e:
                    a7:be:ca:9c:0f:25:5b:ae:bc:e9:8e:a9:bf:ae:16:
                    74:ae:dc:ea:08:9b:4b:23:12:83:d3:4e:e9:68:f4:
                    23:89:05:33:4e:1f:6d:51:b1:fa:bb:83:9b:a4:7c:
                    44:4f:06:b6:35:40:82:61:6e:0e:ba:53:ad:8c:2d:
                    ef:9a:e2:b6:da:df:f0:94:f3:a6:64:9d:26:9f:fb:
                    af:24:e5:c6:2e:e4:9c:dd:b4:10:0d:27:14:da:b3:
                    63:fb:7f:85:66:e3:26:37:2f:04:4c:6a:ea:cb:95:
                    99:2d:e3:57:bb:d4:73:42:44:f8:f4:d0:7c:4d:3a:
                    a7:73:b0:b1:bd:50:dd:6b:ae:02:43:8d:ba:16:46:
                    05:84:52:31:ac:77:f3:b9:12:ed:de:44:6e:8a:59:
                    06:06:d5:6a:e2:62:e7:d9:83:ff:0a:60:ea:74:be:
                    08:53:18:25:46:7b:db:6c:54:d1:a0:59:50:75:04:
                    f3:12:85:3a:dc:6b:ef:63:21:3a:f2:f9:80:5d:3e:
                    af:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5C:07:12:F5:D4:03:D6:2B:6D:D3:92:64:73:26:47:BB:17:27:72
            X509v3 Authority Key Identifier:
                keyid:17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/174E7897062398E9506F0862FA46597DF937825D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3137372e33362e3137362e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:65:38:0c:53:19:d7:ed:b9:ca:70:f1:0d:7f:bd:4c:f8:0d:
         1f:ed:2d:6e:c4:79:87:82:43:4c:84:76:79:54:d9:32:00:b7:
         77:56:60:04:81:1c:c2:60:5e:17:b4:7a:23:60:f6:36:73:b6:
         53:fc:72:e5:6f:6f:92:fb:c4:31:7f:00:7b:a2:50:e0:80:e9:
         ce:a6:71:64:e1:27:fc:db:c3:c1:db:f6:9a:cb:7c:00:91:c9:
         b7:0f:a6:a8:78:48:a1:3c:39:3f:27:0b:b7:c9:d2:1c:5e:e4:
         c2:a0:f0:4f:35:0f:64:21:a0:6f:41:c1:17:04:a9:e0:f0:45:
         6d:b0:fa:04:59:2c:33:5a:eb:4e:30:2d:fe:1c:cd:63:d7:f2:
         2a:06:69:6b:cc:6a:7c:4f:55:e5:9e:8e:12:cf:47:44:87:40:
         f4:48:a5:a0:d1:44:07:de:7b:6b:03:5f:04:c0:93:bd:4a:20:
         8e:7e:b4:d0:d8:8a:34:03:92:8e:1a:6c:25:dd:54:19:0b:53:
         e6:f4:dd:12:c3:98:d5:ae:d4:d4:7f:6b:e2:76:d1:4d:7f:1d:
         98:c5:d6:f2:7d:1f:92:b1:4f:52:8d:64:b5:64:b7:33:a6:49:
         6a:7e:9c:81:3a:00:65:32:5c:8b:63:ce:f7:b6:19:53:3c:34:
         83:17:5e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:14:56 2025 by rpki-client