Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/3137372e31302e32382e302f32322d3234203d3e20323632383431.roa
File:                     3137372e31302e32382e302f32322d3234203d3e20323632383431.roa (raw, json)
Hash identifier:          psmOj8EmDDzyd0bmAsj109hherhULfNzcjmq4S7y+B4=
Subject key identifier:   56:89:98:5E:55:2C:DB:14:45:A8:AA:5E:1D:02:0B:F1:08:52:D1:02
Certificate issuer:       /CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F
Certificate serial:       793D4910B09B2F3A7576F42F4C3E1850FE043B15
Authority key identifier: 9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/3137372e31302e32382e302f32322d3234203d3e20323632383431.roa
Signing time:             Thu 06 Mar 2025 15:31:19 +0000
ROA not before:           Thu 06 Mar 2025 15:26:19 +0000
ROA not after:            Thu 05 Mar 2026 15:31:19 +0000
asID:                     262841
IP address blocks:        177.10.28.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3d:49:10:b0:9b:2f:3a:75:76:f4:2f:4c:3e:18:50:fe:04:3b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F
        Validity
            Not Before: Mar  6 15:26:19 2025 GMT
            Not After : Mar  5 15:31:19 2026 GMT
        Subject: CN=5689985E552CDB1445A8AA5E1D020BF10852D102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d3:c7:ee:af:29:3a:8b:f2:11:46:01:af:be:
                    40:75:3e:40:a0:dc:4a:ac:d5:27:91:a9:3a:20:8e:
                    a8:62:75:22:79:2f:5a:56:78:b3:c2:04:b8:bc:3d:
                    9b:8a:27:7a:c7:10:0d:4f:53:83:5f:b0:0c:83:37:
                    38:f3:4c:3b:d3:35:6e:83:02:40:b6:9d:6e:ae:1b:
                    42:3c:66:69:3c:0a:02:f3:bf:ec:5a:17:c3:1d:55:
                    f2:b6:fe:2d:03:dc:a2:2e:d4:5b:00:89:72:e3:c0:
                    c0:0b:e3:3a:e2:67:3c:08:eb:ec:a0:bb:03:b6:b3:
                    83:66:27:e3:fa:da:03:7b:0f:fd:8c:31:24:19:a9:
                    71:88:82:9f:a9:5f:cd:b7:72:21:5f:c1:b7:f2:1e:
                    37:27:29:12:10:94:7a:38:7b:73:f1:9a:d4:6e:1d:
                    fa:3f:3a:09:15:73:fc:77:a5:5a:7c:8b:bb:67:c9:
                    e0:ea:5c:82:a7:90:c1:66:e6:be:1c:dc:6c:74:dd:
                    78:d9:58:8f:35:12:d4:81:c2:76:27:3b:fb:8b:dc:
                    68:06:a6:96:7c:30:89:a2:be:32:b1:5f:35:60:23:
                    3b:20:d9:d2:53:87:25:f4:5a:df:f2:17:ec:d6:3d:
                    7d:76:ad:9f:ea:d3:f5:13:f7:f5:84:7c:3e:de:4c:
                    c2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:89:98:5E:55:2C:DB:14:45:A8:AA:5E:1D:02:0B:F1:08:52:D1:02
            X509v3 Authority Key Identifier:
                keyid:9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/3137372e31302e32382e302f32322d3234203d3e20323632383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:9e:a7:7d:d4:7f:c6:83:d1:ba:a0:b1:4c:62:e2:9f:51:fb:
         76:6c:00:f7:c5:94:5b:a8:2e:3f:d5:77:e5:e9:51:e4:de:bc:
         4b:00:9d:60:b7:a0:47:3e:de:4b:2b:86:e5:fc:a9:40:30:57:
         b3:9a:42:04:10:6f:3f:72:f2:b6:11:78:25:c3:83:e6:e7:a1:
         b7:b4:4e:ca:70:b5:4c:eb:14:29:28:da:42:8b:29:15:f8:6f:
         cd:a6:3b:7c:87:70:47:de:bb:be:ce:63:61:34:89:63:fc:b0:
         f7:2c:71:23:2d:d5:0d:5e:63:e6:9c:d1:80:35:e5:25:4b:a5:
         6e:bf:60:d3:65:e7:6e:00:8d:0b:05:cc:b5:70:3c:72:56:51:
         d4:b8:83:73:43:9a:42:09:f0:d8:57:30:13:e3:2d:31:be:75:
         09:d6:6e:3f:ef:6a:0e:b0:d5:3e:77:d3:e3:3e:62:00:c6:fb:
         77:f9:03:1d:d2:8f:6a:b1:08:c8:01:20:17:11:51:3c:1d:9b:
         d3:b5:d9:b2:22:23:4e:01:21:a0:fc:46:0c:cc:05:02:ff:18:
         a4:a9:2c:d2:3b:4e:47:0c:24:98:6a:90:41:e8:7b:a8:b6:38:
         8a:b3:26:d7:22:44:8c:8e:6b:f0:79:6c:14:e7:ff:b3:74:dc:
         74:9b:ec:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:03:20 2025 by rpki-client