Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39362e302f32332d3233203d3e20323632383735.roa
File:                     3137372e31312e39362e302f32332d3233203d3e20323632383735.roa (raw, json)
Hash identifier:          TyVY7fThqDsey3AVWJhUirJjoHLpnvNP7chCXTmkBOE=
Subject key identifier:   F3:C0:3A:D2:66:9B:DA:02:30:16:05:46:6E:14:57:90:FE:C7:23:19
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       75C29344A807617AE07FB13ACAB82578B450AE0E
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39362e302f32332d3233203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 12:54:12 +0000
ROA not before:           Thu 02 Jan 2025 12:49:12 +0000
ROA not after:            Thu 01 Jan 2026 12:54:12 +0000
asID:                     262875
IP address blocks:        177.11.96.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c2:93:44:a8:07:61:7a:e0:7f:b1:3a:ca:b8:25:78:b4:50:ae:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 12:49:12 2025 GMT
            Not After : Jan  1 12:54:12 2026 GMT
        Subject: CN=F3C03AD2669BDA02301605466E145790FEC72319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:7c:5e:dc:eb:97:76:86:a6:ea:49:9d:1f:
                    dc:4e:a1:38:b2:a3:f8:be:81:55:df:75:8f:60:97:
                    fe:8b:33:c1:9f:b5:84:87:ff:d8:13:2f:7f:69:08:
                    05:86:ed:44:07:8c:91:5c:21:3b:c6:9f:1e:14:da:
                    17:ab:fb:79:19:67:9d:d5:80:77:78:62:4f:b2:1f:
                    47:3b:20:d6:90:1a:fb:43:72:d0:2f:42:4a:da:b4:
                    53:3e:17:d8:0f:83:9e:06:72:a7:63:63:b3:24:59:
                    01:fd:45:7d:73:3c:f6:06:35:b9:7b:b9:6b:bb:c8:
                    a5:20:e4:3d:9b:37:46:3d:80:c0:a1:45:fa:3c:3d:
                    41:0f:a8:6c:94:a3:86:22:8a:58:93:88:9a:64:36:
                    22:80:3d:1d:4c:2b:6c:44:ab:6a:fb:95:66:fb:f1:
                    f8:7f:43:ec:cf:f1:68:d9:36:0f:b7:da:59:ba:98:
                    5a:3c:53:a6:e1:d7:10:20:08:d6:13:0c:c1:5f:4c:
                    5a:6f:0c:77:94:56:43:77:9f:fa:32:4a:6f:97:1c:
                    89:40:1c:0d:de:ad:31:78:50:5e:7b:18:28:93:26:
                    d3:cf:d2:c8:6e:59:13:54:70:41:91:3e:66:26:48:
                    cc:3c:5a:02:0e:12:aa:8b:5c:9c:d9:19:9b:8d:e4:
                    f2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C0:3A:D2:66:9B:DA:02:30:16:05:46:6E:14:57:90:FE:C7:23:19
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39362e302f32332d3233203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:7d:e8:fc:42:52:73:c2:68:0a:ec:bc:35:43:32:95:d5:81:
         99:4d:cf:35:35:65:ab:ca:21:96:28:86:fd:1c:dd:37:be:12:
         19:80:70:6b:7e:a8:8e:3f:2d:b2:ea:90:37:52:99:ad:93:a9:
         a3:04:db:73:c6:9a:16:e8:f3:25:53:bc:98:39:05:cb:06:05:
         b6:26:8e:1c:12:1e:0d:d6:66:4a:40:6e:f8:04:03:cb:d4:f7:
         cf:8c:93:2e:e5:19:46:47:37:13:1f:b3:42:7a:8f:ee:86:71:
         8a:65:61:de:89:1b:0f:21:07:d2:df:14:93:37:3b:1e:4b:c0:
         66:27:05:b3:b8:2f:af:05:76:50:1d:5b:56:03:d9:3e:f8:4d:
         39:41:e1:ca:a9:bf:ae:82:70:e3:c2:f0:7d:94:e8:94:74:05:
         13:e8:75:fa:99:4c:66:73:f7:a9:88:5e:e7:22:b7:bd:0a:a9:
         80:c2:5e:8f:bd:3b:19:23:30:e4:99:10:fe:cf:7d:d1:17:22:
         69:4c:b1:e0:74:15:95:f1:7a:5d:ab:86:1a:0d:ee:85:2e:69:
         ea:f8:c4:9e:6b:fa:db:35:68:5e:4c:d0:a8:56:ff:92:f1:f0:
         56:9d:08:e8:9c:a7:3a:9d:c6:61:09:62:b4:fb:d4:78:f5:da:
         72:82:fc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:45:29 2025 by rpki-client