Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/3137372e37302e33322e302f31392d3139203d3e20323632353333.roa
File:                     3137372e37302e33322e302f31392d3139203d3e20323632353333.roa (raw, json)
Hash identifier:          0R2L6bZA9sckJFvCapBQB53FNGO62G9ledOVjaLi5lM=
Subject key identifier:   01:19:C6:10:95:93:98:BB:95:45:7D:F7:04:9A:9F:24:E1:34:CB:68
Certificate issuer:       /CN=B699D2222141281AA203C880816F9433C6F87835
Certificate serial:       15A95BEEB2CB59511A1BB742821841F7EED5C457
Authority key identifier: B6:99:D2:22:21:41:28:1A:A2:03:C8:80:81:6F:94:33:C6:F8:78:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B699D2222141281AA203C880816F9433C6F87835.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/3137372e37302e33322e302f31392d3139203d3e20323632353333.roa
Signing time:             Sat 15 Mar 2025 03:05:43 +0000
ROA not before:           Sat 15 Mar 2025 03:00:43 +0000
ROA not after:            Sat 14 Mar 2026 03:05:43 +0000
asID:                     262533
IP address blocks:        177.70.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a9:5b:ee:b2:cb:59:51:1a:1b:b7:42:82:18:41:f7:ee:d5:c4:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B699D2222141281AA203C880816F9433C6F87835
        Validity
            Not Before: Mar 15 03:00:43 2025 GMT
            Not After : Mar 14 03:05:43 2026 GMT
        Subject: CN=0119C610959398BB95457DF7049A9F24E134CB68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:34:71:89:a7:d1:93:79:3d:fc:50:5e:2d:
                    a1:f8:c2:79:98:4f:16:8d:95:c4:22:31:b8:2e:1c:
                    7c:8f:39:ec:a8:b1:98:fd:3a:7a:7a:59:0f:2d:43:
                    de:c6:06:3d:c6:b2:35:b7:43:9e:12:32:b0:1b:6a:
                    b7:a9:ce:c8:92:09:a0:cc:23:f0:0d:0e:3d:cd:35:
                    a5:03:d4:3a:fc:3b:2b:79:ce:51:fb:d8:c2:0d:1e:
                    0c:2c:ee:9c:a8:f7:5b:97:10:e2:90:27:42:ba:db:
                    b9:68:fc:5d:38:77:3b:32:10:33:38:5b:ad:e4:c2:
                    8b:e0:0f:e7:e9:6c:18:d6:6a:dc:20:68:a6:ad:74:
                    f4:22:5f:88:af:f4:3a:39:53:45:47:f5:6d:f9:38:
                    ba:2e:dd:d5:fa:ff:b8:95:b6:14:22:74:9f:2a:6d:
                    ec:01:51:4e:09:35:04:91:57:e1:a9:47:55:e4:37:
                    5f:35:75:f7:d1:6b:1e:42:0e:33:d6:b7:c1:07:0c:
                    da:13:9e:46:49:27:97:9b:37:1a:1a:71:13:c9:3a:
                    6b:10:b6:b1:45:55:2e:91:b6:fa:32:4b:51:08:30:
                    0a:90:16:31:1d:92:6b:16:9d:0b:53:c7:6a:d5:df:
                    d5:5c:8a:61:1f:3f:71:ce:4f:22:83:67:f8:94:92:
                    3e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:19:C6:10:95:93:98:BB:95:45:7D:F7:04:9A:9F:24:E1:34:CB:68
            X509v3 Authority Key Identifier:
                keyid:B6:99:D2:22:21:41:28:1A:A2:03:C8:80:81:6F:94:33:C6:F8:78:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/B699D2222141281AA203C880816F9433C6F87835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B699D2222141281AA203C880816F9433C6F87835.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/3137372e37302e33322e302f31392d3139203d3e20323632353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a2:a0:eb:83:ca:bc:67:33:3f:25:64:62:de:d5:ee:0d:46:af:
         b1:52:de:e7:67:dc:e5:e7:04:47:58:a1:bb:a4:4c:d1:8a:91:
         64:0c:92:52:f6:37:6d:27:53:0a:f6:cc:80:ca:3c:18:a8:c3:
         3f:75:80:7b:f9:8b:f0:86:4e:ec:f6:f1:7b:2d:84:4c:2d:54:
         47:5b:99:af:7a:e3:92:5e:07:3c:22:9d:30:be:20:ac:51:d7:
         10:47:66:af:ef:71:70:1d:12:c2:e4:f0:fa:83:4c:a4:dc:be:
         cb:f5:19:25:b7:c4:59:01:ff:e0:ea:3f:b7:57:89:1a:f2:e7:
         9f:74:19:e3:9b:0c:91:3d:41:e4:29:f4:98:00:50:5b:7e:92:
         0b:7d:27:f1:05:a5:75:3e:14:d1:5b:9f:43:6d:6d:cb:a3:ed:
         60:31:77:6e:19:55:2d:22:a0:02:a7:d0:ff:93:be:88:f3:0d:
         5b:7e:f3:14:4b:4c:63:62:d1:9c:82:4f:ef:4f:9f:6c:8c:28:
         d0:73:77:82:b1:a6:a4:2b:22:67:9a:f9:c5:7c:99:da:f6:f4:
         d8:20:78:4c:66:b2:70:ff:5b:f1:1b:89:57:a6:6a:66:c0:b6:
         57:92:33:b5:91:50:bc:eb:d1:c9:06:b3:72:fe:25:5f:f5:7b:
         e0:9e:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:53:38 2025 by rpki-client