Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233342e302f32332d3332203d3e20323633343530.roa
File:                     3137372e39312e3233342e302f32332d3332203d3e20323633343530.roa (raw, json)
Hash identifier:          wgul8H0ca/W04VzHWwcdyRr96RljV/LxoBv4aEgEygM=
Subject key identifier:   D5:9F:35:B2:20:70:BF:6F:68:EA:A4:8A:1C:10:CB:6E:A6:47:FD:77
Certificate issuer:       /CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Certificate serial:       69FB1F994A1696F5791024997A983F558EE06E2D
Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233342e302f32332d3332203d3e20323633343530.roa
Signing time:             Wed 05 Feb 2025 13:11:07 +0000
ROA not before:           Wed 05 Feb 2025 13:06:07 +0000
ROA not after:            Wed 04 Feb 2026 13:11:07 +0000
asID:                     263450
IP address blocks:        177.91.234.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fb:1f:99:4a:16:96:f5:79:10:24:99:7a:98:3f:55:8e:e0:6e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71
        Validity
            Not Before: Feb  5 13:06:07 2025 GMT
            Not After : Feb  4 13:11:07 2026 GMT
        Subject: CN=D59F35B22070BF6F68EAA48A1C10CB6EA647FD77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:78:01:b1:9d:cb:40:d1:e3:91:78:dd:48:c0:
                    ed:23:09:c7:02:74:ac:b2:5c:52:23:ad:ad:d6:f7:
                    c5:38:30:dc:24:22:65:0a:01:a8:8b:8a:73:88:3f:
                    68:52:19:f1:2c:26:3c:07:50:83:c6:63:7a:92:12:
                    d1:23:3a:d1:bc:b4:8e:75:6f:6a:44:68:17:f7:4c:
                    3f:79:fb:ee:4c:09:e1:d3:02:10:72:15:e9:b9:b6:
                    d1:5a:4e:bf:1e:79:67:c1:05:61:0f:1f:9c:60:3f:
                    bf:23:c5:3a:31:c8:b3:c6:75:0c:2a:67:30:b0:50:
                    f6:27:23:15:fd:ce:bc:e6:2c:ac:60:2d:e9:22:99:
                    17:8e:f5:9b:24:1e:38:79:69:f6:b8:07:74:8b:8b:
                    49:f1:08:5c:5e:48:81:ce:f7:33:30:f5:c9:50:1b:
                    6a:2f:f3:c0:60:a6:2d:7d:55:bd:07:10:62:f6:50:
                    fc:5a:d1:7e:3b:48:c6:0d:a0:67:1e:bc:0e:db:78:
                    b8:e9:bd:ab:8d:4f:91:bd:a1:32:7f:60:ab:75:0d:
                    bd:05:21:a1:86:0c:83:54:8a:03:29:e7:45:59:6f:
                    14:59:2c:8e:c1:ec:e1:62:ff:c2:91:d8:57:3d:79:
                    e7:e9:c4:d4:77:c1:49:d2:f8:8c:d5:e6:75:7b:f8:
                    04:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9F:35:B2:20:70:BF:6F:68:EA:A4:8A:1C:10:CB:6E:A6:47:FD:77
            X509v3 Authority Key Identifier:
                keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233342e302f32332d3332203d3e20323633343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:1e:f0:a2:a4:94:e3:c0:2a:44:16:a7:b9:a5:a8:36:79:ff:
         13:c7:48:21:b5:b6:e0:3f:e9:27:9a:e1:97:3a:60:d4:52:6d:
         77:cc:50:b2:d6:bf:ce:53:07:3d:d3:08:28:f7:7a:8a:b8:44:
         cb:64:ce:4b:dc:f0:4f:81:9c:d3:92:09:c7:6f:eb:3d:33:33:
         4c:a7:49:c2:3d:bb:2e:12:93:bf:dc:a9:14:63:cd:bd:03:16:
         f3:d2:86:f8:96:98:44:46:ea:e7:56:e6:5a:4a:dd:53:a2:42:
         60:2a:df:3a:9d:a4:00:ee:79:fc:a4:2b:cd:bd:9d:2c:17:7f:
         1f:85:6b:89:de:18:7e:99:fe:94:1e:b2:16:3f:f2:7d:f7:b5:
         4b:b6:30:58:4f:ca:6f:09:64:d7:6e:16:a1:c7:48:d8:af:26:
         cb:15:9b:ae:11:c6:5c:ef:45:fc:a9:9c:8c:9b:ec:48:2a:e0:
         4d:d7:8e:d7:7c:45:0f:c6:a5:73:f2:ae:15:3e:db:84:d1:18:
         55:96:e9:6c:49:ab:b1:3c:33:ab:13:2d:96:71:90:c3:ec:8d:
         8a:de:10:c6:6d:20:fd:dd:29:72:84:e8:9d:1f:36:7d:1f:e8:
         81:50:e2:55:ea:d9:7f:82:10:95:da:36:5d:01:b0:ae:d2:eb:
         ea:0a:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:27:24 2025 by rpki-client