Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137372e36362e3234302e302f32312d3234203d3e203533303035.roa
File:                     3137372e36362e3234302e302f32312d3234203d3e203533303035.roa (raw, json)
Hash identifier:          05Wca5GHYaqmX1mcI5FnkqRWBABJJYM1NWxQrE72xps=
Subject key identifier:   E3:5A:98:CE:41:B8:83:5B:A4:23:48:45:69:29:92:7B:B5:B0:5C:0D
Certificate issuer:       /CN=7EB806F082666E29BA49287EB0A2DD4E03FCB7F5
Certificate serial:       70BEBF3B5234595E47CD1BE6653BD9D84AE07722
Authority key identifier: 7E:B8:06:F0:82:66:6E:29:BA:49:28:7E:B0:A2:DD:4E:03:FC:B7:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EB806F082666E29BA49287EB0A2DD4E03FCB7F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137372e36362e3234302e302f32312d3234203d3e203533303035.roa
Signing time:             Sat 10 Feb 2024 12:58:22 +0000
ROA not before:           Sat 10 Feb 2024 12:53:22 +0000
ROA not after:            Sat 08 Feb 2025 12:58:22 +0000
asID:                     53005
IP address blocks:        177.66.240.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:be:bf:3b:52:34:59:5e:47:cd:1b:e6:65:3b:d9:d8:4a:e0:77:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB806F082666E29BA49287EB0A2DD4E03FCB7F5
        Validity
            Not Before: Feb 10 12:53:22 2024 GMT
            Not After : Feb  8 12:58:22 2025 GMT
        Subject: CN=E35A98CE41B8835BA42348456929927BB5B05C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:34:5a:5c:b3:c2:25:49:36:4e:cc:fe:f8:b6:
                    ce:7f:90:ab:47:e7:a5:68:89:2b:2f:93:27:75:54:
                    f9:72:5c:6d:a4:24:7f:d3:d8:1b:da:ff:06:9e:6b:
                    85:52:0e:d2:9a:c7:b1:5f:3a:be:e9:d2:4f:0d:f8:
                    17:62:1a:6e:3a:c3:77:5f:56:4d:31:26:b3:20:26:
                    90:98:0a:ae:b9:35:87:10:a5:96:2d:e7:e7:bb:c2:
                    48:1f:4c:5b:b3:04:51:10:03:d9:ee:9f:51:d9:32:
                    0c:50:54:b2:56:b6:46:87:97:62:d1:44:b1:7a:78:
                    4a:4a:f7:95:ea:9e:52:99:ed:e5:0b:19:6d:72:62:
                    86:90:bf:fd:12:d0:be:93:b9:f4:04:b0:89:4a:2d:
                    93:c0:c3:13:63:83:b3:12:ab:9e:72:96:db:19:cb:
                    c3:f9:bd:04:7a:cb:64:58:00:25:94:f5:66:6e:cd:
                    94:ff:51:fb:e4:8f:ad:65:29:85:70:51:fa:a2:54:
                    49:20:35:0b:5f:98:41:5b:57:f0:bb:6a:4c:66:9f:
                    3c:8a:75:d4:9c:ff:a1:c9:32:54:df:63:4e:7d:73:
                    24:6e:f1:15:bb:2a:9c:a4:38:e4:3a:60:1b:94:20:
                    b3:42:16:61:50:31:99:ee:0b:4b:e9:46:a8:b9:56:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5A:98:CE:41:B8:83:5B:A4:23:48:45:69:29:92:7B:B5:B0:5C:0D
            X509v3 Authority Key Identifier:
                keyid:7E:B8:06:F0:82:66:6E:29:BA:49:28:7E:B0:A2:DD:4E:03:FC:B7:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/7EB806F082666E29BA49287EB0A2DD4E03FCB7F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EB806F082666E29BA49287EB0A2DD4E03FCB7F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/3137372e36362e3234302e302f32312d3234203d3e203533303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:5b:61:c5:e9:ce:77:7f:94:b5:94:59:e2:72:09:81:5c:82:
         ac:eb:0c:e9:fd:ce:7d:f8:f0:3a:22:3b:9b:c9:77:94:73:82:
         a5:6f:e9:c7:c6:8d:2a:a8:44:0f:2c:85:8d:a6:71:64:08:26:
         af:97:fb:60:84:fa:48:42:6b:21:d8:c0:ff:87:65:88:c0:ed:
         8b:a2:16:7b:6a:36:4d:57:d2:c8:01:fb:71:9a:11:c9:bc:01:
         77:31:b9:31:16:a4:66:cd:16:d3:6d:91:50:6e:e5:f2:68:bd:
         e6:26:06:df:bc:63:05:9d:60:c0:18:c5:87:2b:2a:a3:53:ac:
         29:2d:d0:e3:a9:6c:80:23:93:8c:5b:cb:ec:9e:29:cb:4e:56:
         5b:d1:94:e8:86:51:65:0e:d6:22:83:6f:38:c7:70:85:8f:41:
         6d:5b:76:0c:f2:7a:0c:a2:b2:e0:e4:b7:9f:f0:61:e2:bc:30:
         74:76:b6:6e:e3:55:87:91:2e:ca:ca:ed:66:2e:19:ed:4b:24:
         04:14:17:44:e0:80:24:1f:0b:27:91:6a:78:b5:ff:28:cb:9b:
         fc:11:8a:66:fa:d0:fa:32:40:0a:0d:4b:00:e0:ec:15:d0:cb:
         d4:48:b9:11:e5:0a:29:d8:01:eb:04:cf:52:c9:03:53:e8:f7:
         d6:4c:08:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:04 2025 by rpki-client