Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35392e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e35392e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          cJT/sgEXdlDTTtjxxZMPM98VA34ET1T0Bz85SD9VwrY=
Subject key identifier:   C4:62:E2:F2:A5:5C:00:FA:65:52:53:30:51:E9:DC:49:A6:E7:DE:C8
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       475B56FCE9A05EACF24FA39F2384A0F2FF30487D
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35392e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 17 Jan 2025 16:16:56 +0000
ROA not before:           Fri 17 Jan 2025 16:11:56 +0000
ROA not after:            Fri 16 Jan 2026 16:16:56 +0000
asID:                     52930
IP address blocks:        177.185.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5b:56:fc:e9:a0:5e:ac:f2:4f:a3:9f:23:84:a0:f2:ff:30:48:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Jan 17 16:11:56 2025 GMT
            Not After : Jan 16 16:16:56 2026 GMT
        Subject: CN=C462E2F2A55C00FA6552533051E9DC49A6E7DEC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fc:57:92:bf:2d:4e:1b:e5:53:dc:8b:83:84:
                    d0:24:35:0a:a4:f5:3f:03:6b:40:51:4c:78:9d:48:
                    fe:2d:4a:e6:15:4a:5d:ce:b4:a6:c3:c4:8d:e5:74:
                    4b:ac:9c:3e:f6:cc:42:42:fc:70:58:5e:90:cf:3c:
                    ed:d1:49:07:1c:06:b7:a4:a7:55:bc:6d:09:83:6f:
                    5c:eb:7d:82:f5:73:29:7a:fa:02:01:66:2a:77:61:
                    70:4f:89:4c:dd:a2:f8:3c:14:c9:70:67:37:87:71:
                    62:8b:32:1c:f7:c4:1a:58:f6:1d:75:be:3b:fe:63:
                    07:21:79:fa:41:43:5a:e7:ed:28:79:82:80:99:fe:
                    fa:2c:5c:32:7d:ae:27:9d:02:83:8e:18:5f:68:d1:
                    e1:b3:99:f9:9a:6c:fb:b4:67:d8:54:2e:b8:99:0b:
                    fc:d3:87:47:65:77:8c:de:68:40:9d:d5:c0:c7:a3:
                    22:63:e7:0c:05:f0:e0:25:b6:4c:40:39:81:4d:ce:
                    6f:12:c9:eb:05:da:61:61:55:f8:ed:7e:37:b2:52:
                    de:64:fb:b6:3e:ef:5f:99:73:cf:6c:ea:24:4b:60:
                    f1:cd:69:7d:9d:37:cb:ce:63:a9:b9:0d:1a:70:24:
                    e0:4e:a8:11:f6:7e:78:20:05:23:16:9b:01:7c:27:
                    05:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:62:E2:F2:A5:5C:00:FA:65:52:53:30:51:E9:DC:49:A6:E7:DE:C8
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35392e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:76:fa:47:2f:94:fa:42:bb:68:b1:03:4f:af:c9:cb:a4:e1:
         84:13:cb:33:6b:9f:8c:fd:a9:4f:9e:93:24:80:d7:8f:5d:b8:
         c9:dc:61:14:d4:1b:22:04:20:70:ad:c2:15:03:1e:6c:48:c8:
         64:d1:da:88:8a:f6:a8:16:e8:a9:31:a9:dd:3b:71:a4:f3:d1:
         b3:be:5e:c8:3c:04:45:aa:66:5b:e2:0e:65:3e:70:4c:33:d9:
         ba:77:ef:ab:a9:c9:f1:0e:8a:a6:22:22:b9:df:e1:5c:0e:47:
         4f:d6:2e:ab:c8:1e:52:1b:93:d6:81:f6:ed:e7:98:ab:21:09:
         83:a8:6e:30:ab:23:42:57:55:f1:ca:a7:86:47:e0:d1:c7:25:
         9c:9e:f4:ce:d1:7d:80:1e:e6:d5:d1:7c:b9:5c:39:a2:c7:67:
         df:aa:da:f1:05:56:4e:ce:61:5c:40:a9:62:9a:d4:e1:ba:ea:
         cc:83:a4:f3:0b:1b:76:fa:3c:43:d8:b6:8c:c1:62:a1:84:8e:
         fd:d2:33:6f:75:62:3e:5b:38:7f:75:64:ca:62:fd:f4:e5:e7:
         da:0c:6a:9c:8f:7b:88:28:2f:3a:99:bb:fa:de:07:67:f6:4e:
         1b:a4:b5:ab:90:82:9e:2d:69:7a:c5:98:2c:7e:7c:2c:2c:a9:
         9a:b1:09:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:47:25 2025 by rpki-client