Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131322e302f32312d3234203d3e20323632353639.roa
File:                     3137372e37332e3131322e302f32312d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          pKGUAErQy7LBPKrnc3VI97TS1aDCk6tzUW3o2tdSjYg=
Subject key identifier:   5B:CC:22:94:A0:FB:87:E7:4F:65:F0:B1:2A:BF:63:8F:1E:3C:73:D1
Certificate issuer:       /CN=659C0711C58D82CB928680EC1097A12AE8F8C66F
Certificate serial:       7EF20F63F29586519D2A00E04E8D20E62712F392
Authority key identifier: 65:9C:07:11:C5:8D:82:CB:92:86:80:EC:10:97:A1:2A:E8:F8:C6:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659C0711C58D82CB928680EC1097A12AE8F8C66F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131322e302f32312d3234203d3e20323632353639.roa
Signing time:             Tue 29 Oct 2024 19:46:51 +0000
ROA not before:           Tue 29 Oct 2024 19:41:51 +0000
ROA not after:            Tue 28 Oct 2025 19:46:51 +0000
asID:                     262569
IP address blocks:        177.73.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f2:0f:63:f2:95:86:51:9d:2a:00:e0:4e:8d:20:e6:27:12:f3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659C0711C58D82CB928680EC1097A12AE8F8C66F
        Validity
            Not Before: Oct 29 19:41:51 2024 GMT
            Not After : Oct 28 19:46:51 2025 GMT
        Subject: CN=5BCC2294A0FB87E74F65F0B12ABF638F1E3C73D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:77:8c:45:76:2e:f3:1d:dc:b8:05:4c:a6:
                    48:5e:2b:45:cd:d2:56:7f:ff:5f:6d:60:8d:87:ba:
                    19:0f:2d:59:28:31:cf:17:54:bd:d4:3f:6c:ae:b4:
                    aa:c7:11:35:f3:f1:22:65:3c:58:83:b6:8f:45:3a:
                    d6:47:fa:dd:60:97:47:1b:d9:b6:47:a2:7a:67:92:
                    64:d7:78:80:10:31:ae:9f:5c:4b:9f:af:3c:2c:e3:
                    2d:1f:9e:a5:76:ef:30:3d:c1:e7:eb:db:fc:91:0d:
                    d5:0a:18:f5:84:a1:6d:fd:c0:4d:72:ba:94:da:bb:
                    89:97:8d:81:c3:66:e8:82:e7:f8:ba:0e:ad:42:c8:
                    fa:f2:17:14:06:d9:83:46:82:b9:73:f1:18:f8:dc:
                    b8:e2:6d:ba:ce:53:c0:6e:ef:25:a2:f2:7b:05:14:
                    68:23:6e:3f:f4:3f:89:aa:a9:36:f4:eb:18:47:bc:
                    f8:03:e6:02:dd:5c:14:fa:43:5a:78:00:ce:5c:2b:
                    7f:00:67:1d:32:5d:c0:44:c2:58:49:32:b6:3c:06:
                    d7:3b:9c:b6:ab:7d:c0:b6:b0:af:e9:93:9e:e0:24:
                    5c:2f:70:e9:dc:de:1b:0c:35:39:7f:0f:dc:0d:2c:
                    10:b2:12:1c:66:2a:24:08:8d:df:f0:8d:49:85:a0:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CC:22:94:A0:FB:87:E7:4F:65:F0:B1:2A:BF:63:8F:1E:3C:73:D1
            X509v3 Authority Key Identifier:
                keyid:65:9C:07:11:C5:8D:82:CB:92:86:80:EC:10:97:A1:2A:E8:F8:C6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/659C0711C58D82CB928680EC1097A12AE8F8C66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659C0711C58D82CB928680EC1097A12AE8F8C66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131322e302f32312d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ba:12:23:5c:e7:19:e6:cb:f6:16:ed:ed:5d:cf:da:b0:21:83:
         4e:e1:ef:fe:1c:55:fd:12:d3:32:3b:55:43:c8:58:38:0c:5a:
         6d:0b:18:11:b6:a9:3e:d7:a4:1c:28:b2:7e:a6:d4:84:4b:b4:
         48:48:e2:2e:d5:87:31:06:b5:e5:9f:92:37:b9:f3:72:80:db:
         43:84:aa:18:37:ca:aa:28:05:db:56:bd:da:77:d1:2d:8e:ea:
         e8:79:0d:cb:97:33:22:a5:ad:a1:d1:a3:34:3d:b8:76:65:c6:
         e7:05:9b:67:72:4b:3e:8d:1c:22:e5:0c:e8:a5:fc:8f:57:1a:
         dc:a3:3a:1b:8b:bf:32:64:f5:cb:e3:01:4b:23:9e:58:d6:14:
         a4:9b:ea:62:a5:ad:32:ad:a3:13:2f:36:1d:66:0a:bf:26:5a:
         fe:27:5d:49:10:ce:18:51:9a:7e:29:cb:9e:39:a1:91:69:2c:
         c6:6c:7c:94:d3:4c:27:97:3c:44:4b:8c:e8:ec:cb:5f:c1:49:
         6c:37:be:b5:fd:f1:78:bd:59:8b:f7:47:a5:43:c2:ea:2c:16:
         8b:27:05:7e:6f:d9:90:9b:db:5f:8b:98:0e:c9:a3:86:3e:2c:
         ab:25:af:8c:4d:2f:9e:a8:e1:cc:dc:ef:84:1e:61:58:ba:38:
         1f:7e:53:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:14 2025 by rpki-client