Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32342e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          Oa0bZ7TuDQBeUl5b4TXuTXq/ayOJw9LAuDCBSN0nxd4=
Subject key identifier:   90:04:75:54:B5:5E:B4:C2:64:21:0A:C4:DB:C9:72:9E:AC:3E:05:FA
Certificate issuer:       /CN=4FDBAE28D54DD4272386040789F376018C19FE37
Certificate serial:       778DBC6E64661DDD226D7E395656BC0B08EEE709
Authority key identifier: 4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32342d3234203d3e203532363331.roa
Signing time:             Mon 10 Feb 2025 12:56:34 +0000
ROA not before:           Mon 10 Feb 2025 12:51:34 +0000
ROA not after:            Mon 09 Feb 2026 12:56:34 +0000
asID:                     52631
IP address blocks:        177.128.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8d:bc:6e:64:66:1d:dd:22:6d:7e:39:56:56:bc:0b:08:ee:e7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDBAE28D54DD4272386040789F376018C19FE37
        Validity
            Not Before: Feb 10 12:51:34 2025 GMT
            Not After : Feb  9 12:56:34 2026 GMT
        Subject: CN=90047554B55EB4C264210AC4DBC9729EAC3E05FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:fe:5b:5c:72:40:01:aa:7e:76:93:1d:b2:
                    83:c1:2c:e5:ab:d8:91:30:c3:78:50:ea:7e:86:3a:
                    f5:11:25:7d:11:99:9a:ba:c7:f1:52:0c:dc:23:9f:
                    0f:f6:ba:1a:c7:a2:4c:ec:ac:cb:32:4d:0a:fa:9f:
                    dd:74:31:d9:b9:a7:d9:dc:8d:ce:1f:44:40:6b:1c:
                    e4:c3:a1:df:37:66:91:cc:bf:4f:9d:6f:28:89:b7:
                    d8:40:79:48:e3:a1:58:b5:d4:c4:4c:94:43:80:53:
                    dd:4d:93:85:df:71:6d:da:83:b9:f4:76:66:85:20:
                    55:27:f9:dd:d3:4d:0e:84:7d:9a:cd:bf:1b:5d:e8:
                    34:31:57:55:7a:06:fb:9e:96:42:58:23:62:ae:86:
                    87:72:fc:aa:65:d6:b3:58:db:f4:80:c4:7c:84:a1:
                    38:d4:09:02:71:9a:65:86:25:89:29:38:2d:7f:99:
                    6d:c4:81:d3:e5:f0:1a:48:91:48:76:79:0a:1c:a9:
                    54:4e:6c:3b:90:58:cb:71:6d:05:9b:76:e3:9d:18:
                    7a:33:cc:4f:0b:fc:b2:23:a6:36:0b:ab:bc:cf:ea:
                    c2:36:11:28:3b:02:86:ca:02:27:43:af:dd:8e:25:
                    80:cd:82:b2:68:5d:59:00:64:1a:79:40:da:11:66:
                    94:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:04:75:54:B5:5E:B4:C2:64:21:0A:C4:DB:C9:72:9E:AC:3E:05:FA
            X509v3 Authority Key Identifier:
                keyid:4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:61:4b:ab:ed:6e:4e:1c:da:ea:37:11:1d:3f:2f:57:55:18:
         ef:a1:ed:6a:91:c8:f1:9c:a5:bd:90:4a:92:4a:5b:43:4e:b8:
         01:d5:10:c1:ea:17:80:7b:a1:85:0c:42:71:64:6e:34:77:e1:
         81:ae:ae:e5:c0:07:4e:49:da:a6:db:2b:d2:2e:bf:11:dc:a6:
         ed:43:ef:8c:85:9a:10:eb:5c:9f:67:11:4f:f6:16:75:8c:24:
         f4:ed:58:cd:c3:6d:c5:c8:51:be:32:ef:72:cf:99:6a:81:18:
         91:b2:e0:24:c9:15:9a:0b:09:16:82:ec:2f:dc:ca:40:fd:d4:
         7a:35:f7:8d:11:d1:17:d0:de:e9:99:5d:37:f4:f4:6d:c3:0f:
         30:33:6f:1c:36:64:22:70:6c:30:b5:15:b3:e6:dd:20:9c:23:
         73:f8:2b:e0:36:16:8b:bf:b9:f1:4b:58:eb:89:70:df:02:ae:
         c0:d3:bc:0b:9b:5b:af:d9:e9:92:58:88:ca:2f:23:b6:02:42:
         98:49:7b:77:c7:09:7c:bf:13:d5:b4:10:62:88:f7:d0:04:2b:
         df:69:d1:7c:c2:2a:92:2d:d6:c9:27:d7:41:ef:35:34:80:d9:
         e5:d6:39:7c:3d:95:3b:ea:85:a0:2e:e9:ae:3a:ea:ca:56:60:
         5f:52:a7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:46:09 2025 by rpki-client