Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37332e302f32342d3234203d3e20323634343936.roa
File:                     3137372e35352e37332e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier:          t2OEuU8DzqdsK1jwZnOA9WFJXYZTlJOSMJ6BLz/v+Ro=
Subject key identifier:   98:6C:3D:BF:09:A0:81:D8:E5:E2:2E:6A:20:FE:A8:EB:4F:B2:30:8F
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       32A4AEC95B1311CD01AC7823646BE68AA1886A5E
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37332e302f32342d3234203d3e20323634343936.roa
Signing time:             Wed 26 Feb 2025 16:41:09 +0000
ROA not before:           Wed 26 Feb 2025 16:36:09 +0000
ROA not after:            Wed 25 Feb 2026 16:41:09 +0000
asID:                     264496
IP address blocks:        177.55.73.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a4:ae:c9:5b:13:11:cd:01:ac:78:23:64:6b:e6:8a:a1:88:6a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Feb 26 16:36:09 2025 GMT
            Not After : Feb 25 16:41:09 2026 GMT
        Subject: CN=986C3DBF09A081D8E5E22E6A20FEA8EB4FB2308F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c0:c7:ad:9e:91:b5:17:86:c4:02:1c:97:81:
                    c6:d2:2f:43:8e:85:53:54:32:9d:2f:8c:f3:80:bb:
                    68:cb:a2:a3:12:27:e9:59:cd:11:d1:3f:1f:33:b4:
                    d4:e8:87:83:d1:93:f6:48:e6:bf:af:7c:7a:6b:3d:
                    34:3f:67:91:e9:c3:87:55:3b:fc:df:a9:26:e3:fa:
                    c0:7c:db:71:e3:8f:1f:13:79:e6:a9:3c:30:50:a9:
                    64:ae:4b:c6:83:61:f4:ad:be:2b:bc:f3:81:68:2a:
                    27:f6:ac:41:26:82:70:a6:47:bb:45:b3:43:23:da:
                    a9:80:6c:06:63:43:63:0b:4c:df:2d:a7:6c:bf:57:
                    a2:1b:88:ce:c6:f7:cd:64:9b:08:0c:2c:88:8f:55:
                    85:1f:80:cd:e5:79:e9:cf:3f:18:ec:61:42:8a:be:
                    ca:e8:e5:f2:ef:57:14:7c:c3:a3:e5:7a:e7:f5:86:
                    34:9d:2f:8b:f0:5a:d7:a9:8c:0e:ae:64:bb:7f:27:
                    80:5c:44:c6:65:9b:a0:63:06:2a:f8:0a:76:57:19:
                    6c:99:a8:08:10:46:3e:63:cc:2e:89:88:1b:d1:50:
                    3d:bb:ed:fc:2b:75:37:71:83:7c:c9:b4:9f:1f:f0:
                    43:f2:d7:5b:3b:d8:be:50:80:f9:20:65:41:e3:5e:
                    bc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6C:3D:BF:09:A0:81:D8:E5:E2:2E:6A:20:FE:A8:EB:4F:B2:30:8F
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37332e302f32342d3234203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:99:92:f0:27:64:7c:d0:29:5d:06:13:cc:c0:53:71:5c:27:
         41:fe:84:54:19:1b:de:93:43:e9:76:21:04:54:bb:3f:10:68:
         fb:55:4e:0a:d8:03:08:69:96:bf:1f:2f:63:8f:d4:a3:86:d7:
         fe:bf:bb:49:e8:d9:06:c8:d0:83:a9:7d:59:59:41:a7:fa:b7:
         aa:5f:4e:83:79:66:2a:3e:9b:a0:46:32:cd:60:4e:c5:96:39:
         b5:27:fa:a3:e1:0c:98:85:50:43:3c:e6:78:4b:da:0f:cd:75:
         26:4d:33:fd:e2:40:5c:b8:da:f0:04:cf:5c:47:eb:18:b9:64:
         4a:f3:cd:b7:5f:2d:5d:8f:01:c5:d7:5d:72:5d:16:9c:fa:5c:
         e6:f4:91:27:8c:76:75:62:93:90:68:69:07:9a:f6:26:d5:54:
         38:78:1a:e3:c5:29:0e:41:1b:d1:59:be:74:11:f7:cd:89:5e:
         62:b9:8b:f6:a1:94:62:5f:ce:26:18:bd:b1:4b:d7:06:e9:1d:
         3b:7f:bc:4e:5e:62:66:45:2f:70:bb:64:12:d8:08:aa:34:ea:
         fa:56:d4:47:ee:78:1b:0e:1d:56:5e:8b:78:d4:25:7f:f0:44:
         81:36:3c:9b:a1:0b:0e:5e:40:48:62:af:71:82:c2:50:be:ca:
         5f:32:15:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:51:47 2025 by rpki-client