Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/3137372e37332e3231362e302f32322d3332203d3e20323731363634.roa
File:                     3137372e37332e3231362e302f32322d3332203d3e20323731363634.roa (raw, json)
Hash identifier:          b7RKys/d2WhUNZBW22QQZIXUlymwoXgRaB1G20+Mroo=
Subject key identifier:   5C:5A:8A:A9:7B:B5:8C:5D:9E:0E:61:72:A2:7B:48:31:34:52:08:9D
Certificate issuer:       /CN=E25A82376A73E59B60104D90BCE9E4246EC8B146
Certificate serial:       04FA0C191126F14BEFFB494FBF5E81345CBD642C
Authority key identifier: E2:5A:82:37:6A:73:E5:9B:60:10:4D:90:BC:E9:E4:24:6E:C8:B1:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25A82376A73E59B60104D90BCE9E4246EC8B146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/3137372e37332e3231362e302f32322d3332203d3e20323731363634.roa
Signing time:             Fri 07 Feb 2025 19:26:06 +0000
ROA not before:           Fri 07 Feb 2025 19:21:06 +0000
ROA not after:            Fri 06 Feb 2026 19:26:06 +0000
asID:                     271664
IP address blocks:        177.73.216.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fa:0c:19:11:26:f1:4b:ef:fb:49:4f:bf:5e:81:34:5c:bd:64:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E25A82376A73E59B60104D90BCE9E4246EC8B146
        Validity
            Not Before: Feb  7 19:21:06 2025 GMT
            Not After : Feb  6 19:26:06 2026 GMT
        Subject: CN=5C5A8AA97BB58C5D9E0E6172A27B48313452089D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:ca:b1:39:fc:01:65:95:e8:62:40:90:a4:
                    8a:74:66:e6:9b:6b:de:07:52:0e:ae:66:ad:20:97:
                    c4:35:06:bc:f8:74:c7:cd:c3:cd:2c:92:d6:95:61:
                    8d:e4:4c:8c:9b:48:39:c1:d5:ba:e0:52:09:96:1c:
                    bd:14:0b:43:32:0c:1c:75:6a:6e:84:97:f2:23:49:
                    be:26:6d:b8:a7:9d:d2:41:c4:75:31:13:af:b0:f9:
                    21:a8:ee:e6:27:38:e2:76:f4:af:97:f5:a2:8c:32:
                    6c:b3:25:f3:3e:88:d8:ef:e6:ac:01:83:b8:f1:4f:
                    27:13:3a:0e:eb:61:8a:14:d7:19:e1:93:65:2a:cf:
                    3f:e5:2e:ed:b3:3a:12:ac:46:dd:91:68:d6:0b:ac:
                    ec:1c:f1:48:c9:03:dd:7e:21:80:3d:01:1a:c3:9e:
                    30:5e:35:77:49:ba:44:90:33:e1:9d:98:ec:92:3f:
                    8c:57:e7:c5:40:e8:88:11:8e:ac:fe:13:5b:dd:58:
                    23:38:74:2f:05:e7:09:35:02:3b:84:6c:d9:58:ec:
                    fe:72:6c:6d:56:c3:ca:28:df:e5:27:a7:6c:92:57:
                    7a:e0:20:f3:47:2c:e5:3b:6e:97:02:a8:13:37:5c:
                    a0:1b:09:da:ee:69:b3:a6:33:d0:cb:08:a6:74:85:
                    24:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5A:8A:A9:7B:B5:8C:5D:9E:0E:61:72:A2:7B:48:31:34:52:08:9D
            X509v3 Authority Key Identifier:
                keyid:E2:5A:82:37:6A:73:E5:9B:60:10:4D:90:BC:E9:E4:24:6E:C8:B1:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/E25A82376A73E59B60104D90BCE9E4246EC8B146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25A82376A73E59B60104D90BCE9E4246EC8B146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Neq8rdsF2CAou3hZD6qLzQ3aK4iNfw3sqKkm8F2w4Td/0/3137372e37332e3231362e302f32322d3332203d3e20323731363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:7f:1d:3a:06:1e:53:2c:cf:a5:2a:6d:30:93:49:07:7c:2f:
         3f:e1:c6:41:82:81:92:8d:e2:4b:36:9d:c1:71:c7:50:16:3c:
         d9:14:11:d3:52:ea:a8:40:4f:fc:f2:15:e1:2b:f4:6d:67:4d:
         6e:b1:1e:7f:6e:54:08:1f:30:b5:88:43:06:fd:25:68:6a:2c:
         1e:68:f4:57:fc:3b:6a:64:57:24:b6:9d:4f:02:50:ce:92:d2:
         12:bd:a8:10:22:bc:e9:dc:fd:d3:bd:b5:0d:c0:ca:9a:3f:d5:
         3e:c7:16:42:3d:53:33:1e:5e:e4:5c:f4:19:21:2e:f9:b0:f9:
         00:97:8e:57:1d:d3:92:a2:9e:4a:3e:19:98:59:99:bf:b7:db:
         b7:f4:cd:97:af:69:4c:dd:c8:f0:42:6b:53:89:cf:6f:73:00:
         53:fc:b4:3d:c3:e8:38:0d:5c:a2:ca:52:fb:aa:83:1e:b7:d8:
         d0:00:6d:a1:19:81:49:1b:2d:b6:e0:75:e4:e2:90:e0:da:19:
         e6:4b:59:f1:1d:30:89:38:be:63:c2:b2:e5:27:da:36:42:94:
         0b:db:c9:70:db:93:4b:d4:a6:24:58:87:11:da:be:e7:ac:f3:
         8b:96:b8:08:89:0d:b6:eb:0e:2d:85:42:19:39:49:fe:26:f1:
         bb:81:ea:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:03:18 2025 by rpki-client