Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39382e302f32342d3234203d3e20323632383735.roa
File:                     3137372e31312e39382e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          jVqIYEr6a5gTmsGawWQG88+D+qfiQkEXY7QOSa6uIio=
Subject key identifier:   D5:04:6A:E0:33:BE:35:A4:05:18:F5:4A:A5:13:93:F7:AF:90:4C:7B
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       24AFC77ABF8C6FB10756E427171AA0B76C751EB4
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39382e302f32342d3234203d3e20323632383735.roa
Signing time:             Thu 02 Jan 2025 12:55:27 +0000
ROA not before:           Thu 02 Jan 2025 12:50:27 +0000
ROA not after:            Thu 01 Jan 2026 12:55:27 +0000
asID:                     262875
IP address blocks:        177.11.98.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:af:c7:7a:bf:8c:6f:b1:07:56:e4:27:17:1a:a0:b7:6c:75:1e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Jan  2 12:50:27 2025 GMT
            Not After : Jan  1 12:55:27 2026 GMT
        Subject: CN=D5046AE033BE35A40518F54AA51393F7AF904C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:64:f1:36:53:bf:28:d7:42:ce:2e:e9:bc:
                    a5:21:6e:c3:88:32:ea:3a:72:3f:66:4d:93:35:ef:
                    96:80:8f:03:e1:8a:9f:a7:a7:ed:a5:c1:19:91:66:
                    ca:12:0a:9b:3f:b6:14:7f:64:53:8f:62:03:e7:09:
                    1b:06:46:0a:72:b3:35:af:65:a8:ec:dc:bd:23:09:
                    99:26:d3:de:c3:c7:32:42:e9:36:83:68:64:0b:6d:
                    39:e4:b0:9b:0a:1a:6f:53:42:a7:3f:38:44:f0:c0:
                    83:f8:e0:10:ea:63:67:19:cc:f2:14:27:a6:4f:97:
                    54:3e:7c:37:0a:10:50:38:6a:43:cd:e4:40:d7:e3:
                    b0:e0:24:85:ab:ea:f5:90:4c:50:45:ff:59:7e:47:
                    2e:00:34:fc:18:de:c5:56:7d:2d:73:a3:9f:7e:70:
                    1d:3a:d7:0a:d6:e0:7c:fa:1f:0b:5f:60:ff:8b:6c:
                    a9:bd:84:4e:78:62:c5:a1:b7:a8:b0:7a:19:3d:b1:
                    1f:e9:6d:8a:db:0c:25:84:8b:81:18:a4:30:33:d8:
                    c2:9f:28:8a:b4:21:5b:40:47:60:49:ef:24:3f:47:
                    56:6b:e7:b7:75:1e:f0:4b:f2:49:06:20:51:a9:ce:
                    01:ec:f8:01:2e:9c:20:7d:05:a1:8e:51:0e:44:59:
                    11:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:04:6A:E0:33:BE:35:A4:05:18:F5:4A:A5:13:93:F7:AF:90:4C:7B
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3137372e31312e39382e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:79:ae:48:4e:c2:4f:59:bb:ef:43:a6:01:91:7a:97:bf:c7:
         79:4c:16:ba:77:cf:7a:6a:2d:70:eb:84:3a:6b:aa:3a:e2:94:
         1e:4f:67:5f:06:e8:91:0c:03:7d:4e:3e:1f:5e:8b:fa:08:e3:
         46:31:dd:1c:56:5a:9e:18:7b:37:4d:82:e7:da:a7:56:a6:e2:
         b6:49:53:16:36:a1:f5:42:8f:33:bd:75:12:22:a1:1b:aa:de:
         f1:2b:5b:3f:b6:d1:f7:7e:6a:50:0d:38:80:35:a4:a1:a9:ef:
         7b:f1:aa:5b:a1:45:ee:76:58:6f:04:e4:06:f4:c4:c9:4b:15:
         71:48:57:f5:74:e1:64:93:a9:4c:fb:62:4b:3e:65:dd:64:f7:
         41:87:28:3f:75:18:4d:76:4d:64:0c:3e:76:13:2d:c3:4e:63:
         bc:d9:23:ce:ec:65:37:69:fe:c1:f1:f3:74:50:30:32:64:a8:
         64:58:dc:fe:9d:ee:4a:a8:e4:0b:79:b9:cf:c0:fa:bf:23:b9:
         8a:98:93:cc:0e:29:41:2e:5a:46:5c:fe:e1:e3:53:6b:75:a2:
         44:4e:a9:90:29:11:14:d9:28:3a:ee:09:a4:69:b3:57:07:52:
         34:85:18:70:09:8f:c6:65:00:fb:a4:96:67:9c:ac:b3:8b:20:
         95:c6:8c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:48:06 2025 by rpki-client