Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3232312e302f32342d3234203d3e20323633353232.roa
File:                     3137372e3132362e3232312e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          3mzXWuoGNro/NEDskjV6egXC0BSICxHNS1+UsGfnls0=
Subject key identifier:   B4:60:A2:78:D0:BE:33:F1:85:7F:CF:22:E3:A1:E7:F1:FD:C6:70:AF
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       53D8DBF174AC6116F9BCC640734D85048FAC00E6
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3232312e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 06 Mar 2025 16:16:35 +0000
ROA not before:           Thu 06 Mar 2025 16:11:35 +0000
ROA not after:            Thu 05 Mar 2026 16:16:35 +0000
asID:                     263522
IP address blocks:        177.126.221.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d8:db:f1:74:ac:61:16:f9:bc:c6:40:73:4d:85:04:8f:ac:00:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Mar  6 16:11:35 2025 GMT
            Not After : Mar  5 16:16:35 2026 GMT
        Subject: CN=B460A278D0BE33F1857FCF22E3A1E7F1FDC670AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:c3:cd:8f:3a:18:7e:17:5c:c6:3e:52:4f:
                    c9:77:29:8f:a7:36:d9:19:b7:c5:06:63:d3:fb:4b:
                    07:20:e3:ae:fe:3b:8b:b7:84:af:95:77:a9:2e:94:
                    c5:e5:82:27:01:a1:52:91:04:f2:8a:0a:3e:47:6b:
                    7e:9b:16:76:4a:fe:54:cb:7d:d1:3b:af:a4:45:41:
                    84:68:b5:dc:1a:51:06:3a:e2:1b:d8:b9:db:e3:7b:
                    b2:d4:af:02:b9:41:bf:48:a3:d8:8c:41:89:e5:8a:
                    f8:86:98:71:19:49:07:58:10:20:7f:a7:3f:33:64:
                    79:00:b6:f6:91:66:b6:7e:d7:ed:27:16:05:c7:28:
                    b2:72:3f:82:9a:9b:ee:64:41:70:bf:b2:27:a7:dc:
                    ee:71:a8:1e:c5:08:5d:aa:01:aa:37:ee:9a:69:07:
                    c7:1f:c7:a0:10:67:75:fe:9b:3c:60:d4:e2:f2:e3:
                    6c:bd:1d:82:e1:27:58:63:b2:74:14:6c:bf:39:72:
                    5e:92:08:72:92:e1:8b:8e:44:20:68:77:55:d4:d1:
                    9c:64:0e:81:61:98:68:9c:58:56:79:04:1b:46:e7:
                    99:f2:88:a6:2e:2c:50:89:7f:d8:86:f7:79:3d:db:
                    cf:ef:30:b8:ac:9a:b7:83:5f:57:32:4f:a7:1a:e4:
                    7d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:60:A2:78:D0:BE:33:F1:85:7F:CF:22:E3:A1:E7:F1:FD:C6:70:AF
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3232312e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:d9:0b:73:9b:62:23:ab:66:89:78:00:6c:d7:44:86:e6:39:
         d3:9a:f8:86:64:27:95:37:da:99:d9:48:c7:79:15:5f:80:0d:
         40:f5:2a:93:de:01:68:c0:c6:d7:85:8a:f9:8d:dc:52:11:b5:
         b5:f9:fd:4f:b4:65:eb:2e:b6:09:07:25:e1:e9:a7:0a:c8:36:
         57:90:7c:b9:ee:e1:0b:b7:48:32:27:e6:2b:de:e8:4a:76:fb:
         3e:68:a3:27:cb:aa:82:1f:b6:53:12:c8:0d:7b:db:6d:e6:59:
         fd:f3:3c:94:60:6e:ca:3d:3c:30:e5:08:0e:b1:db:d0:fc:cf:
         d9:80:a6:61:20:da:6b:46:86:ac:92:0f:3e:64:de:fc:16:85:
         6c:90:ea:ed:ee:ac:d9:6d:35:64:58:23:4c:f2:33:b0:37:7a:
         dd:e2:d3:00:89:b6:cd:05:7e:c7:aa:c6:d9:63:41:a5:ea:74:
         5b:97:c9:2a:2f:a1:2b:9a:f8:2c:1b:d9:37:7f:b5:c6:99:2c:
         56:d5:9f:72:09:1a:0b:53:60:00:fe:cc:76:74:c2:8a:d8:21:
         87:cb:2a:84:97:46:86:6b:57:2e:07:44:11:99:58:db:9c:dd:
         3f:e7:3a:e0:52:88:bb:ed:f1:c6:f0:9b:11:e4:7a:7c:08:d2:
         a6:01:03:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:54:53 2025 by rpki-client