Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39362e302f32342d3234203d3e20323632383735.roa
File:                     3137372e31312e39362e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          kUUbHJ5nb7aW5ZBvUNTnr0OTQaFV59xyC0FFFZK+vM8=
Subject key identifier:   33:8E:CC:7E:7C:40:42:1F:9C:04:D4:78:5A:31:BF:8D:1E:B5:36:79
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       604A77D3A6044974B11A0355ED510525D2AEDC6A
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39362e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 12:54:48 +0000
ROA not before:           Thu 02 Jan 2025 12:49:48 +0000
ROA not after:            Thu 01 Jan 2026 12:54:48 +0000
asID:                     262875
IP address blocks:        177.11.96.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4a:77:d3:a6:04:49:74:b1:1a:03:55:ed:51:05:25:d2:ae:dc:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 12:49:48 2025 GMT
            Not After : Jan  1 12:54:48 2026 GMT
        Subject: CN=338ECC7E7C40421F9C04D4785A31BF8D1EB53679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:eb:00:e4:fc:2a:8d:61:4a:06:e1:44:30:0f:
                    f8:7c:02:88:75:05:de:05:51:92:69:56:ff:86:af:
                    70:82:59:bb:5d:08:e5:21:ce:ef:a1:a9:62:49:d4:
                    c3:5f:22:85:37:09:82:59:a3:e0:3c:dd:1e:73:8f:
                    d9:50:51:b5:1d:df:1f:a0:18:9c:76:b5:57:0d:ac:
                    e1:bc:8b:33:26:6b:39:3e:3d:45:cc:79:c4:2c:95:
                    4b:82:82:db:bc:1f:25:d4:79:44:8c:60:75:01:c4:
                    32:6c:a1:c9:df:9f:8b:df:cc:77:d3:3d:71:47:cc:
                    da:16:69:1f:f8:ed:61:ee:2e:1e:22:b1:19:fb:65:
                    b1:29:d2:31:f6:0c:41:92:5a:9b:f1:b2:bf:e1:42:
                    f7:a9:ad:b3:f5:31:63:e5:b3:c1:58:2c:43:5e:91:
                    80:e3:92:18:53:ab:45:ea:2e:3a:5d:fd:e6:ef:d5:
                    01:1c:e0:89:b5:40:09:74:c0:77:4c:a8:bc:02:a1:
                    7c:18:c4:5f:b3:2a:12:71:e3:1d:0c:b1:b6:a3:c1:
                    c6:bf:07:ef:c4:a3:89:76:d2:a6:11:b5:fb:e5:86:
                    c7:c3:07:cb:8e:bf:98:1e:37:2a:39:11:a0:24:94:
                    5d:80:4b:4b:45:f5:c7:27:fa:7b:a9:33:41:de:70:
                    fd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8E:CC:7E:7C:40:42:1F:9C:04:D4:78:5A:31:BF:8D:1E:B5:36:79
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39362e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:b6:22:e6:49:24:fc:40:ba:5b:b2:c1:49:0e:39:44:54:af:
         b0:4b:f8:8d:08:85:6b:a1:c3:2c:7a:9b:bf:07:60:eb:20:21:
         f7:7e:c4:76:9c:64:1f:e8:9f:3b:30:6f:55:3a:89:c8:ac:5c:
         65:2c:94:b7:87:3f:35:fe:94:5f:7f:60:c4:b4:12:96:5d:a7:
         5d:a4:6e:38:9b:53:a9:79:90:e0:de:ce:2b:b5:dc:89:60:71:
         78:4e:1e:6e:89:cf:d2:ee:f8:13:a9:87:3e:92:90:99:d7:d4:
         0f:42:e1:85:ec:1e:6b:9c:e0:a2:33:ed:e2:e2:3f:8a:9e:56:
         a0:61:80:2e:90:b2:6d:bc:a2:cb:56:d8:51:fb:2d:23:57:fd:
         4c:cf:f1:19:10:16:10:c0:82:a5:12:ba:41:37:a1:3b:42:9c:
         b0:b1:2d:18:2a:3b:17:c3:99:84:21:44:2a:08:e5:e0:dc:e4:
         3a:0d:51:f9:a6:66:cd:6c:6c:81:43:db:4e:2d:e8:ee:48:c0:
         f0:27:cf:3a:08:2d:28:55:55:99:37:d2:e1:4e:2d:c1:38:a4:
         85:80:82:ad:2b:3b:64:b9:d9:10:6a:35:00:98:e8:6a:48:8e:
         37:e2:f6:5d:84:68:75:83:a5:1b:e9:10:44:5a:87:9e:ae:36:
         ae:fb:da:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:48:07 2025 by rpki-client