Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133302e302f32332d3233203d3e20323731363234.roa
File:                     3137372e37332e3133302e302f32332d3233203d3e20323731363234.roa (raw, json)
Hash identifier:          YhNWRM1Fte0kaZsggJDGsE7czZs7ttkHgxJyyqzkzps=
Subject key identifier:   0A:29:E6:20:B4:0F:59:94:03:48:21:53:03:EB:FE:AE:F1:D6:25:8F
Certificate issuer:       /CN=6BD10BD7311C36E4427262C587B0519198C93849
Certificate serial:       292AE79E35846D26A354F0C8851A5438407D65EE
Authority key identifier: 6B:D1:0B:D7:31:1C:36:E4:42:72:62:C5:87:B0:51:91:98:C9:38:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD10BD7311C36E4427262C587B0519198C93849.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133302e302f32332d3233203d3e20323731363234.roa
Signing time:             Tue 11 Feb 2025 17:58:16 +0000
ROA not before:           Tue 11 Feb 2025 17:53:16 +0000
ROA not after:            Tue 10 Feb 2026 17:58:16 +0000
asID:                     271624
IP address blocks:        177.73.130.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2a:e7:9e:35:84:6d:26:a3:54:f0:c8:85:1a:54:38:40:7d:65:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD10BD7311C36E4427262C587B0519198C93849
        Validity
            Not Before: Feb 11 17:53:16 2025 GMT
            Not After : Feb 10 17:58:16 2026 GMT
        Subject: CN=0A29E620B40F59940348215303EBFEAEF1D6258F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:1b:51:e3:c6:4e:fe:87:6d:48:17:4a:0b:
                    04:b3:76:e2:b7:e9:ef:e5:a9:2b:c9:25:db:0e:a5:
                    a8:34:47:3e:d8:cc:4b:aa:78:ed:05:8c:f5:58:9f:
                    f4:48:dd:a0:51:b0:4f:a5:cb:b7:2c:25:cc:bc:74:
                    0a:cd:d2:36:49:83:b1:30:db:ab:75:02:3d:56:f8:
                    3f:d4:40:7d:4e:46:15:43:58:69:2f:c8:34:38:df:
                    02:13:39:3b:b2:a1:81:24:28:e9:d8:4c:0f:61:da:
                    4f:ad:42:59:9f:bb:e1:8e:bb:2c:35:d2:02:36:06:
                    8f:58:eb:bc:9f:22:a6:fa:bd:20:a7:62:5e:8f:96:
                    5a:43:f3:da:7b:0e:0f:3c:13:26:a5:8f:e9:31:34:
                    17:6d:f2:f7:6c:2d:a7:71:e5:7c:09:52:11:05:4f:
                    0e:81:a1:6d:95:a4:48:14:25:fb:25:af:ca:1d:a3:
                    27:74:22:21:57:87:2d:d3:09:f3:fa:4b:c0:0b:f0:
                    4b:c1:54:03:5e:e7:74:08:db:20:14:ab:c3:8d:d3:
                    e1:6c:a4:22:3f:f1:fd:63:69:e3:71:1d:54:4d:81:
                    96:1c:41:57:db:60:a7:ba:ad:ff:6e:fa:eb:06:34:
                    d7:9a:e1:cf:90:b7:af:95:32:a7:cb:54:11:d2:86:
                    e6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:29:E6:20:B4:0F:59:94:03:48:21:53:03:EB:FE:AE:F1:D6:25:8F
            X509v3 Authority Key Identifier:
                keyid:6B:D1:0B:D7:31:1C:36:E4:42:72:62:C5:87:B0:51:91:98:C9:38:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/6BD10BD7311C36E4427262C587B0519198C93849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD10BD7311C36E4427262C587B0519198C93849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133302e302f32332d3233203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:ed:34:f2:f5:75:67:02:70:9f:8c:0c:bb:ad:72:30:a0:ec:
         56:98:9a:27:1a:2a:04:27:97:ff:64:4a:d2:b1:29:fb:16:12:
         d4:6d:10:b2:18:a4:21:d3:ab:4b:18:4a:57:1e:33:ce:19:ac:
         c8:17:99:95:4a:aa:26:d0:e7:b0:a1:94:26:e9:dc:11:38:59:
         f9:04:87:ba:a6:36:79:db:20:01:ed:ae:4b:ef:88:78:bc:54:
         99:b4:53:79:da:6c:5c:e6:dd:3a:60:fa:d3:3b:07:b2:11:fb:
         4e:4f:77:cc:8c:18:52:bd:9e:b9:f6:1d:97:bd:36:2b:72:8f:
         99:db:79:eb:58:ae:3f:26:df:8f:6f:4f:eb:f1:b9:e7:ec:57:
         40:2e:f6:53:5c:20:25:a4:43:9c:c4:26:02:4e:bb:d0:66:13:
         79:c8:ca:4a:b1:b7:af:33:0e:e3:da:2e:e8:24:39:62:7f:b7:
         aa:6f:32:d3:3d:8e:06:b3:54:1b:61:11:6e:29:ab:d5:d8:0b:
         51:a7:d0:a8:0b:bd:a2:0f:b0:85:a0:65:b7:d9:15:70:d8:21:
         d3:ee:1b:ba:44:39:cc:da:eb:ec:1c:b4:2e:cb:ba:11:1f:36:
         bd:d6:86:e4:49:0c:8a:54:18:f1:e8:83:89:ef:57:c2:8f:b0:
         8a:f6:32:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:58:50 2025 by rpki-client