Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39382e302f32332d3233203d3e20323632383735.roa
File:                     3137372e31312e39382e302f32332d3233203d3e20323632383735.roa (raw, json)
Hash identifier:          eyUWlL9aSspIDvJRkzOQNHAo0IvyXY5xfjMT5w2IT8c=
Subject key identifier:   B5:61:2B:50:E2:74:8C:10:5C:34:2E:60:99:88:DC:6C:7E:FA:30:B2
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       076230337A5F46DDB0A58C2FDFA4CDE54A5BD743
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39382e302f32332d3233203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 12:54:19 +0000
ROA not before:           Thu 02 Jan 2025 12:49:19 +0000
ROA not after:            Thu 01 Jan 2026 12:54:19 +0000
asID:                     262875
IP address blocks:        177.11.98.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:62:30:33:7a:5f:46:dd:b0:a5:8c:2f:df:a4:cd:e5:4a:5b:d7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 12:49:19 2025 GMT
            Not After : Jan  1 12:54:19 2026 GMT
        Subject: CN=B5612B50E2748C105C342E609988DC6C7EFA30B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:ba:eb:54:24:7c:cd:0b:5f:7d:18:f9:7b:
                    a8:e7:eb:9b:be:ca:ed:58:08:3b:08:02:63:ab:18:
                    eb:64:98:b0:6c:0c:f3:d0:65:97:53:95:ec:7a:7d:
                    19:4a:3d:60:f3:f4:36:50:cb:d2:63:35:52:b5:a4:
                    2f:39:52:98:4b:2d:4f:3a:62:b5:15:7d:56:3f:e9:
                    d0:40:de:46:fa:97:04:8a:80:4d:05:85:96:e8:40:
                    41:c9:5d:5b:58:89:15:8f:bc:16:20:a1:f2:f0:d5:
                    d4:47:71:6d:cb:65:38:00:2e:d8:7f:8e:6b:ae:94:
                    0c:34:3e:af:3d:ac:a0:d9:63:b7:9f:39:db:e2:26:
                    ff:15:69:ce:7e:fa:93:95:0f:2e:6a:f7:5a:08:c1:
                    6a:05:1f:23:13:8e:2a:88:63:d3:e9:42:6e:00:0f:
                    37:f6:20:c2:14:5c:a7:80:5f:47:01:06:ba:fa:82:
                    a1:f9:bf:6d:ab:a4:83:d2:f8:e5:82:9e:c6:4a:96:
                    f8:af:7a:27:bb:56:3d:76:12:46:c2:9f:78:17:08:
                    7f:c4:89:ef:62:a5:b4:37:b7:1e:e1:c9:8a:b1:94:
                    49:cc:9d:b1:e6:26:46:8c:f6:d4:cb:26:8c:ed:31:
                    17:5a:5a:05:57:2c:b4:2c:22:07:dc:cc:25:26:c7:
                    f4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:61:2B:50:E2:74:8C:10:5C:34:2E:60:99:88:DC:6C:7E:FA:30:B2
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39382e302f32332d3233203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:f5:d2:cf:e7:61:d2:40:1d:a6:33:fc:ac:66:ff:e4:bf:9e:
         1c:2c:06:7d:5f:be:0e:36:b0:13:2b:6a:8d:99:52:ea:55:ed:
         69:f4:b9:e0:01:14:59:2c:ae:16:5d:ff:58:74:b1:12:8a:fe:
         c3:bc:dd:6b:7a:e5:ee:82:b3:b8:db:16:d8:42:30:dd:33:bd:
         7c:93:b7:7d:37:19:cd:1f:19:10:c7:7d:73:32:16:82:90:45:
         b0:3f:70:e8:93:2c:eb:5d:da:ce:9a:58:00:f9:16:72:45:6d:
         bb:15:9c:73:1e:43:ce:50:cf:9d:9e:91:bd:3f:b6:68:56:14:
         76:0f:c8:23:de:46:d4:81:50:17:ae:e6:b7:f8:bc:1d:42:01:
         92:67:69:1c:ca:82:67:8a:e3:bd:9b:74:ca:f4:eb:8b:8e:2a:
         e6:86:32:e3:38:73:ce:a4:f3:27:7f:c2:2d:9f:95:0f:0e:20:
         fa:53:13:eb:87:0a:2d:5a:d9:7b:d0:47:6d:de:88:1d:db:b3:
         24:34:32:ed:dd:76:87:c1:ad:d0:95:30:17:50:d8:12:e6:ec:
         8e:f6:fd:56:8b:90:23:2c:89:b4:71:d7:09:d4:5a:8b:a1:e3:
         e3:7c:33:65:b1:b0:03:b6:0d:72:5a:b5:2f:ae:66:03:1f:96:
         6d:18:e5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:45:28 2025 by rpki-client