Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/0/3137372e31312e38302e302f32322d3332203d3e203533323434.roa
File:                     3137372e31312e38302e302f32322d3332203d3e203533323434.roa (raw, json)
Hash identifier:          0vbWmyXk8UPtTG8VGFy89iN3oPtBrhGXpyWeeDNltcQ=
Subject key identifier:   1B:04:D4:CB:C7:12:5F:2C:F5:D0:66:CB:EB:C2:3B:8D:D2:CC:74:92
Certificate issuer:       /CN=E18B3E88FEB8431A1C130BD5E2B9012A3C41145E
Certificate serial:       0301F8A252F35AF0A70FCC12965DAA925FAE8C72
Authority key identifier: E1:8B:3E:88:FE:B8:43:1A:1C:13:0B:D5:E2:B9:01:2A:3C:41:14:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E18B3E88FEB8431A1C130BD5E2B9012A3C41145E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/0/3137372e31312e38302e302f32322d3332203d3e203533323434.roa
Signing time:             Fri 01 Mar 2024 19:44:18 +0000
ROA not before:           Fri 01 Mar 2024 19:39:18 +0000
ROA not after:            Fri 28 Feb 2025 19:44:18 +0000
asID:                     53244
IP address blocks:        177.11.80.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:01:f8:a2:52:f3:5a:f0:a7:0f:cc:12:96:5d:aa:92:5f:ae:8c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E18B3E88FEB8431A1C130BD5E2B9012A3C41145E
        Validity
            Not Before: Mar  1 19:39:18 2024 GMT
            Not After : Feb 28 19:44:18 2025 GMT
        Subject: CN=1B04D4CBC7125F2CF5D066CBEBC23B8DD2CC7492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:9c:72:c8:57:40:0b:21:c8:18:56:05:37:
                    f3:7e:18:d8:2d:8f:c4:f8:d0:f2:71:c3:d8:58:2a:
                    5b:56:77:0b:e7:de:86:3e:37:0f:33:52:eb:cb:62:
                    7a:aa:c2:1e:99:39:16:0b:06:e5:b8:7e:65:36:18:
                    93:dc:43:cc:b2:c1:0b:04:67:ba:25:ae:f4:a9:c8:
                    c9:2a:58:af:7e:b1:7d:03:bb:0e:3e:55:c6:5f:c1:
                    59:67:97:b7:89:8d:be:94:b9:29:52:bd:c8:0f:f0:
                    ad:a9:de:8f:ee:84:e0:14:aa:26:1c:fb:75:2a:64:
                    98:a7:8a:93:2e:e9:27:e9:f4:3c:00:4a:99:cf:da:
                    5f:be:99:46:27:0c:25:ef:c1:2e:52:64:2b:f5:4e:
                    a6:01:db:4e:bb:5d:58:69:b8:e3:8d:06:f4:de:b8:
                    f7:16:fa:57:92:30:6f:ce:65:87:3b:c4:6d:7e:a6:
                    61:47:0e:9d:c3:47:db:23:c8:42:12:63:2c:e9:e9:
                    f9:a3:ee:1d:52:74:7e:31:78:ef:de:52:cc:e2:23:
                    07:bc:cc:a5:14:c8:bb:8a:9b:91:d8:5d:1c:c0:fe:
                    50:7c:93:85:39:53:53:93:de:2b:82:92:7a:e3:f9:
                    03:b6:fe:c4:9f:8d:e3:5a:7e:7d:cc:de:97:8c:46:
                    d0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:04:D4:CB:C7:12:5F:2C:F5:D0:66:CB:EB:C2:3B:8D:D2:CC:74:92
            X509v3 Authority Key Identifier:
                keyid:E1:8B:3E:88:FE:B8:43:1A:1C:13:0B:D5:E2:B9:01:2A:3C:41:14:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/0/E18B3E88FEB8431A1C130BD5E2B9012A3C41145E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E18B3E88FEB8431A1C130BD5E2B9012A3C41145E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/0/3137372e31312e38302e302f32322d3332203d3e203533323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:8b:df:cf:95:35:96:a7:5f:52:79:39:4a:10:8f:0d:47:d1:
         3d:f5:58:ad:d2:64:7f:14:d6:28:b7:1a:c5:0a:f3:32:38:b7:
         d8:4e:22:6f:19:eb:ba:97:49:9a:8c:f9:95:fe:41:ff:59:b5:
         f7:7e:d9:2b:ab:b8:17:1a:d5:da:d6:92:ec:64:51:98:02:b8:
         f6:1e:70:f3:40:ed:8b:6b:97:0d:3b:77:ee:02:56:3e:50:42:
         98:95:bc:f0:55:3b:51:f1:83:a9:06:f0:79:1b:07:0b:e9:3e:
         4c:99:c1:52:b8:fe:cf:68:45:39:1b:23:bd:55:40:7d:4f:34:
         a8:40:cd:20:a5:d3:d0:b2:8f:8d:dd:70:1b:40:74:01:f1:6a:
         75:5a:af:b1:70:b1:3d:3a:28:e1:89:fe:9f:85:92:81:83:1b:
         be:9c:07:ea:de:31:f5:7e:c9:c6:4c:20:f7:58:c1:4d:71:b0:
         66:1c:c9:a6:10:df:a0:fc:81:ad:d0:8b:ee:a8:09:67:eb:cf:
         36:1c:20:1f:85:87:d0:51:28:74:98:45:49:dd:42:6b:f5:0f:
         8e:f5:d2:a4:28:ca:68:34:60:8f:d4:60:8e:b8:b1:01:0b:35:
         25:c5:5a:4b:14:5c:40:2a:ad:67:b0:04:ab:e6:5f:76:50:c9:
         b9:79:be:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:23 2025 by rpki-client