Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3137372e3135342e33322e302f32302d3234203d3e20323632323732.roa
File:                     3137372e3135342e33322e302f32302d3234203d3e20323632323732.roa (raw, json)
Hash identifier:          VTpsb5lhbAxvzLj8NGOl/BjdkTByvA1meBgvlPr2TLY=
Subject key identifier:   A6:DE:44:13:4F:5C:72:9F:6B:61:28:F9:1B:1B:08:D1:7A:89:10:03
Certificate issuer:       /CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Certificate serial:       7D23C176F3160F0A71EC478117F9573B253E56A0
Authority key identifier: 8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3137372e3135342e33322e302f32302d3234203d3e20323632323732.roa
Signing time:             Wed 12 Jun 2024 13:14:50 +0000
ROA not before:           Wed 12 Jun 2024 13:09:50 +0000
ROA not after:            Wed 11 Jun 2025 13:14:50 +0000
asID:                     262272
IP address blocks:        177.154.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:23:c1:76:f3:16:0f:0a:71:ec:47:81:17:f9:57:3b:25:3e:56:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
        Validity
            Not Before: Jun 12 13:09:50 2024 GMT
            Not After : Jun 11 13:14:50 2025 GMT
        Subject: CN=A6DE44134F5C729F6B6128F91B1B08D17A891003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:40:c8:50:84:af:ad:6c:c7:36:23:e6:29:
                    eb:f9:5d:e5:6c:4a:cb:44:c1:44:57:61:46:f2:38:
                    1a:ef:46:85:8c:97:9b:e1:36:6e:db:a4:17:e7:a2:
                    75:49:cd:3b:7e:86:6f:90:b8:31:6e:b8:5a:46:f1:
                    68:5c:f5:65:2e:91:c7:0e:67:1e:1b:f9:ac:68:e8:
                    89:71:6d:65:0c:a3:8b:19:71:62:ad:25:8e:90:88:
                    e9:cb:7c:69:92:4e:9a:90:23:82:a3:dd:a9:b6:0d:
                    b4:1f:25:09:c3:84:73:6a:b0:8d:92:b6:96:51:8a:
                    38:13:e2:a7:02:0e:b1:61:4a:a1:fe:24:87:74:93:
                    42:9f:9f:eb:82:09:c7:a5:45:3d:27:07:36:15:c7:
                    a4:a0:bb:ca:de:29:cd:58:08:c9:06:ff:11:79:10:
                    39:32:e8:45:e3:4d:22:c9:b6:9c:d7:41:cc:75:e8:
                    c1:6a:89:e4:2e:9b:d4:0f:2f:14:5f:86:a2:79:6c:
                    cc:9b:88:19:06:5b:fd:0c:32:1e:0d:99:6c:ac:52:
                    08:5a:ca:bb:37:18:01:5b:92:5b:eb:44:af:c9:f8:
                    67:34:15:26:8a:19:94:f9:eb:ee:98:cf:62:83:3d:
                    7d:be:6d:f3:74:01:0f:5f:31:23:bd:1e:05:42:94:
                    2d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DE:44:13:4F:5C:72:9F:6B:61:28:F9:1B:1B:08:D1:7A:89:10:03
            X509v3 Authority Key Identifier:
                keyid:8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3137372e3135342e33322e302f32302d3234203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:6c:c1:a8:50:dd:88:ff:a5:de:00:e7:ab:77:fd:7f:12:d3:
         b6:92:a9:e9:18:e4:e6:05:dc:c1:5a:24:56:19:27:cb:13:0c:
         78:2b:cb:92:82:6b:68:1f:26:f8:98:eb:4d:b7:2d:2a:3a:f6:
         19:3e:3a:34:30:b6:d7:bc:39:a5:83:7b:a0:28:10:34:33:2d:
         fb:f0:2a:7f:00:7d:74:18:81:b2:c2:17:2b:d1:6c:a3:07:91:
         d4:10:2b:e3:c1:40:6e:8c:a9:5d:f4:b1:af:19:1b:5d:17:44:
         2a:e2:a9:68:b8:d9:22:be:75:c4:dc:87:53:52:c6:8b:66:d0:
         b9:21:4e:c1:b4:26:ff:cf:8c:1c:5b:42:e2:0a:c3:ba:77:51:
         6a:52:38:df:49:8d:0f:3e:6f:5d:ea:d2:6e:86:31:20:d5:8e:
         65:9e:4a:d8:e6:73:2a:4c:e3:f0:86:9a:52:6c:a6:d1:27:26:
         81:5c:5e:41:d1:6b:ab:6b:3e:cf:44:10:01:2b:c6:7d:13:6a:
         e0:fc:06:e6:06:dc:9d:05:79:70:b4:3d:6b:bd:f6:43:26:23:
         92:a8:1e:46:a8:0b:f7:75:34:da:a5:dd:eb:77:cb:aa:f1:6d:
         4a:e6:97:3d:80:ec:da:d6:af:8b:18:44:e0:79:d5:e8:d1:01:
         65:cb:61:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:41 2025 by rpki-client