Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132382e302f32342d3234203d3e20323731363234.roa
File:                     3137372e37332e3132382e302f32342d3234203d3e20323731363234.roa (raw, json)
Hash identifier:          bIrPPRX1D+xX9J089GACDuAhW3Yt6MaZd21jzxUrkdc=
Subject key identifier:   82:E2:45:A8:F3:8C:E7:CC:F0:CD:DB:84:46:93:94:92:0B:FD:19:58
Certificate issuer:       /CN=6BD10BD7311C36E4427262C587B0519198C93849
Certificate serial:       5832C15D162AA4839AAC2553C67CE19F30068388
Authority key identifier: 6B:D1:0B:D7:31:1C:36:E4:42:72:62:C5:87:B0:51:91:98:C9:38:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD10BD7311C36E4427262C587B0519198C93849.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132382e302f32342d3234203d3e20323731363234.roa
Signing time:             Tue 11 Feb 2025 17:58:16 +0000
ROA not before:           Tue 11 Feb 2025 17:53:16 +0000
ROA not after:            Tue 10 Feb 2026 17:58:16 +0000
asID:                     271624
IP address blocks:        177.73.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:32:c1:5d:16:2a:a4:83:9a:ac:25:53:c6:7c:e1:9f:30:06:83:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD10BD7311C36E4427262C587B0519198C93849
        Validity
            Not Before: Feb 11 17:53:16 2025 GMT
            Not After : Feb 10 17:58:16 2026 GMT
        Subject: CN=82E245A8F38CE7CCF0CDDB84469394920BFD1958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:11:d8:1c:43:fa:70:33:c0:c7:44:d1:74:
                    5b:4d:99:8f:12:bf:15:bb:b8:2a:9a:51:08:02:c1:
                    8e:09:ac:9b:f2:18:40:43:7a:04:f4:38:ad:af:b6:
                    77:d9:09:93:71:3d:2c:f0:1c:95:01:2e:ad:10:6a:
                    1f:be:b6:b0:e3:b9:ae:3c:31:a2:91:7b:ce:94:a6:
                    ab:06:16:25:40:4e:82:7f:43:f8:84:c1:2b:50:1d:
                    b0:d0:cf:61:55:95:43:46:b3:7b:ae:af:37:2f:ce:
                    1a:73:06:8f:c1:6e:bc:ff:96:9b:5e:0e:db:82:35:
                    aa:7a:d4:53:6e:13:b1:a5:3e:6c:bc:4f:dd:05:41:
                    7e:22:d9:e6:1d:05:79:98:a5:5c:50:1d:02:98:be:
                    8f:0c:1e:3e:f6:ba:a9:9d:76:af:57:25:7d:32:83:
                    1c:b2:75:82:5f:8c:78:76:ee:65:26:69:36:f3:13:
                    0c:a1:bc:16:b2:a7:f7:7b:86:1b:d3:76:9f:ed:5b:
                    f8:18:cb:05:4a:32:f5:9b:d9:95:38:4a:d9:a2:6d:
                    9f:16:d0:62:bb:91:ea:6e:e3:af:89:58:85:3f:44:
                    9c:cd:c9:46:10:4d:4f:02:ba:43:0b:a7:3b:7d:b0:
                    0a:c2:59:66:75:94:cd:ce:07:dc:13:37:10:5d:a8:
                    be:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E2:45:A8:F3:8C:E7:CC:F0:CD:DB:84:46:93:94:92:0B:FD:19:58
            X509v3 Authority Key Identifier:
                keyid:6B:D1:0B:D7:31:1C:36:E4:42:72:62:C5:87:B0:51:91:98:C9:38:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/6BD10BD7311C36E4427262C587B0519198C93849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD10BD7311C36E4427262C587B0519198C93849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132382e302f32342d3234203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:a8:03:43:2f:93:86:a7:80:6e:f5:fa:49:56:37:25:ce:37:
         43:fa:70:f2:d1:4c:e9:a2:c1:af:ec:41:e9:1c:b7:56:27:a6:
         35:1e:3c:ce:3b:08:ca:1c:6b:76:38:22:7b:32:1e:9f:0d:10:
         d4:98:5b:88:d9:23:ea:93:43:9a:58:2e:2f:00:1f:2d:ef:08:
         9d:06:4b:61:5a:aa:38:04:df:fb:f4:69:2d:bc:32:38:78:7a:
         ab:b7:c5:e0:2b:f5:7e:37:96:f4:0b:5e:f8:65:d4:63:e6:d4:
         b2:96:44:a0:ac:ac:da:49:59:7f:20:cb:92:db:a3:86:79:10:
         e0:4e:3b:55:31:10:6c:51:1d:cd:a2:50:12:3c:d6:b8:f3:b4:
         22:a1:48:ef:c2:54:85:cb:0e:4d:24:22:2d:1a:a9:43:6b:2c:
         5a:bc:f7:32:8d:94:cb:84:3b:3d:2f:92:b5:f5:f1:df:c8:e0:
         d2:ee:2b:a5:f6:d0:f0:0f:41:82:6f:44:45:f1:1f:fd:33:8a:
         1b:64:3e:c5:6c:fe:42:8a:75:69:fa:97:c7:04:84:1b:e6:cb:
         97:7c:21:a3:a0:4f:fe:25:4c:55:ac:51:c3:ba:bc:30:1e:e0:
         ed:69:63:51:97:92:91:af:5b:fc:22:e4:61:b2:da:f3:66:47:
         bc:4f:e4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:47:45 2025 by rpki-client