Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3138372e38352e3134342e302f32302d3234203d3e203533303632.roa
File:                     3138372e38352e3134342e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          qTnuKr7XrfFELUIa42KR0AJC7vSpxymY44eCmC+8JGM=
Subject key identifier:   9A:BA:BD:B2:A8:41:C7:E8:EB:1A:FB:58:24:C1:0B:B4:13:4D:2D:BA
Certificate issuer:       /CN=174E7897062398E9506F0862FA46597DF937825D
Certificate serial:       73C2385EA260AAFA0CA1264841B1D326B3E4D4CB
Authority key identifier: 17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3138372e38352e3134342e302f32302d3234203d3e203533303632.roa
Signing time:             Mon 10 Feb 2025 19:10:09 +0000
ROA not before:           Mon 10 Feb 2025 19:05:09 +0000
ROA not after:            Mon 09 Feb 2026 19:10:09 +0000
asID:                     53062
IP address blocks:        187.85.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c2:38:5e:a2:60:aa:fa:0c:a1:26:48:41:b1:d3:26:b3:e4:d4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174E7897062398E9506F0862FA46597DF937825D
        Validity
            Not Before: Feb 10 19:05:09 2025 GMT
            Not After : Feb  9 19:10:09 2026 GMT
        Subject: CN=9ABABDB2A841C7E8EB1AFB5824C10BB4134D2DBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:ea:35:59:9e:73:7d:6c:0c:26:ab:25:94:
                    b4:fa:e2:6c:d3:d1:29:f5:3e:5a:7a:af:42:d0:00:
                    b0:3b:65:53:6f:ea:17:88:8e:ea:da:ab:e1:fe:f5:
                    aa:85:8b:e1:02:73:98:f5:0f:4c:a1:28:8b:0e:18:
                    c2:82:62:a7:5a:39:45:49:6b:3d:d1:42:b1:04:83:
                    59:73:7d:82:8b:d1:93:b7:58:33:f1:a4:f7:b3:5d:
                    1d:8c:63:51:a3:e8:33:ab:3b:b8:e0:75:bf:3a:d3:
                    95:21:79:b9:15:d1:5a:34:02:86:81:75:aa:1c:da:
                    ca:d7:6f:e5:0d:23:a5:ef:e8:3d:6a:97:bf:33:fe:
                    38:8c:93:7d:87:57:76:96:6d:8c:16:9d:46:8d:54:
                    5d:01:ac:5c:13:dc:e1:d0:92:af:26:1f:3b:a8:b2:
                    1d:87:4f:03:14:89:79:2f:75:d2:36:22:f3:27:d5:
                    0c:a2:09:c4:62:16:a1:9a:d0:77:67:74:99:94:ae:
                    f9:6c:1f:36:9b:e5:45:29:0c:c6:94:89:51:d3:dc:
                    b6:69:1c:dc:5a:80:00:36:99:12:5d:17:07:3e:e9:
                    31:fa:06:73:bf:34:56:19:53:12:b3:55:6e:7e:7d:
                    65:0f:35:80:37:06:50:eb:ce:ca:01:a4:32:28:79:
                    ca:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BA:BD:B2:A8:41:C7:E8:EB:1A:FB:58:24:C1:0B:B4:13:4D:2D:BA
            X509v3 Authority Key Identifier:
                keyid:17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/174E7897062398E9506F0862FA46597DF937825D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/3138372e38352e3134342e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         20:ca:51:4b:93:ad:3f:56:a1:4c:19:8a:12:da:40:0f:ff:17:
         cd:aa:b0:e0:4d:84:6d:bf:98:9f:b5:77:b7:34:06:69:24:56:
         31:ef:13:15:82:8e:d6:05:bc:7d:57:bc:7a:5a:c6:78:13:5c:
         8f:44:8a:a5:fe:25:08:95:bc:34:fb:2d:62:5b:3d:6b:d5:8b:
         4a:9a:e6:ef:19:af:51:8a:ce:c5:f3:5a:05:0b:a9:c9:8b:5d:
         50:9f:4e:f7:b6:87:1b:2c:2a:1c:e3:b0:95:57:a6:e1:c9:86:
         93:fc:c6:15:b9:6e:c8:35:5c:10:3b:af:c5:a8:7b:16:16:90:
         d7:e5:27:0f:46:1d:89:09:6a:19:bd:f7:c2:2c:ee:3b:67:66:
         bf:5f:ed:93:d7:d3:67:d2:23:ad:08:70:0a:64:42:4a:77:f5:
         ee:82:7e:cb:a8:86:2f:87:29:f5:09:a6:99:1d:9e:87:15:4d:
         0f:6d:2d:7e:73:a2:fc:9e:89:38:b8:1b:6f:bc:3b:ef:b2:c3:
         81:0c:c1:1e:4d:a6:48:09:01:01:c3:85:78:4a:63:0b:69:4c:
         ba:dc:94:54:12:43:59:e0:6c:ee:24:75:5a:b4:4d:db:e2:5a:
         f8:3f:7e:3d:64:49:25:f3:59:ce:25:59:c3:bf:cc:c2:cf:61:
         68:5f:14:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:17:37 2025 by rpki-client