Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa
File:                     3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          E6wtUKvisY5xG8RpDElF/QrG8GDed0u8g9MSwLq7liQ=
Subject key identifier:   B0:38:D9:1E:65:55:80:07:0B:96:80:1D:00:6D:45:30:43:36:A5:62
Certificate issuer:       /CN=FD7279E1669A4C13E1BF1D2511A91E03406FA0E2
Certificate serial:       27161A7F85A1C197C984A859406B9AD08C7C83FD
Authority key identifier: FD:72:79:E1:66:9A:4C:13:E1:BF:1D:25:11:A9:1E:03:40:6F:A0:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa
Signing time:             Mon 10 Feb 2025 19:17:46 +0000
ROA not before:           Mon 10 Feb 2025 19:12:46 +0000
ROA not after:            Mon 09 Feb 2026 19:17:46 +0000
asID:                     262391
IP address blocks:        177.131.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:16:1a:7f:85:a1:c1:97:c9:84:a8:59:40:6b:9a:d0:8c:7c:83:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD7279E1669A4C13E1BF1D2511A91E03406FA0E2
        Validity
            Not Before: Feb 10 19:12:46 2025 GMT
            Not After : Feb  9 19:17:46 2026 GMT
        Subject: CN=B038D91E655580070B96801D006D45304336A562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2e:b5:27:b0:c5:d9:45:be:b2:8f:b6:6e:0a:
                    60:e1:94:84:f0:d4:3b:a0:85:61:46:ba:50:79:ef:
                    26:0c:fd:be:6b:5f:be:c8:00:11:7c:63:85:c3:99:
                    b3:d4:4d:e0:80:ca:fa:f6:ad:90:02:57:19:f5:f7:
                    4e:d8:26:2d:df:2b:d5:22:c5:3d:51:03:cd:eb:07:
                    86:30:e6:1a:51:a8:f5:e1:12:d9:d6:ca:c2:a0:70:
                    7e:31:87:71:fa:54:86:d2:92:01:f9:b9:ea:8d:5a:
                    97:3d:51:78:60:c0:c1:4e:8c:05:25:88:f0:1c:69:
                    f5:f7:db:05:ec:e9:f3:a0:b3:19:03:e1:70:66:d2:
                    83:97:e4:03:8f:76:4a:6b:46:90:8d:9f:0f:b0:49:
                    15:e2:62:ee:34:56:15:ec:9f:dc:7e:f1:c5:c6:22:
                    2c:a3:ea:0d:eb:b1:be:f6:0c:e9:30:52:50:b5:fe:
                    9b:f2:5c:3b:d9:c6:d2:21:ca:be:9c:2c:6f:e9:95:
                    f6:8c:32:f6:2d:51:21:c9:fb:e4:44:b0:ce:b1:9a:
                    0f:6c:d0:d0:e2:8e:2b:8b:80:0e:5d:ed:57:95:08:
                    68:3f:ea:a6:eb:74:31:a3:2c:b2:6c:26:ef:92:17:
                    cc:65:a3:71:94:8a:e0:9f:46:66:50:0a:20:17:f5:
                    06:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:38:D9:1E:65:55:80:07:0B:96:80:1D:00:6D:45:30:43:36:A5:62
            X509v3 Authority Key Identifier:
                keyid:FD:72:79:E1:66:9A:4C:13:E1:BF:1D:25:11:A9:1E:03:40:6F:A0:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:34:b9:03:d7:f0:62:f0:30:1a:20:8c:6f:25:51:39:f7:20:
         7c:a8:3e:31:e2:6f:55:04:ac:d4:cc:76:e2:b4:7a:5d:bb:f3:
         a3:dc:85:13:b8:04:02:c7:01:b4:bd:4b:08:e6:08:ad:37:18:
         c6:91:b6:c2:08:b2:75:4d:06:05:62:c4:e3:a9:58:e0:56:7e:
         55:f1:8e:95:e6:94:01:86:3e:50:eb:67:b7:30:68:5e:75:29:
         7a:d6:bd:77:77:44:23:24:f0:01:bf:47:fb:96:c3:f7:08:b3:
         ac:b4:4b:40:44:81:db:7a:f7:13:5f:98:1c:50:ff:f8:98:8f:
         43:b7:9a:0a:ac:76:83:53:05:f1:c8:5a:dd:2f:f4:05:59:ed:
         91:a3:42:3b:a2:6f:e9:66:36:7a:f9:35:eb:3d:9b:34:88:4a:
         e5:f8:ac:19:34:2b:ba:64:64:cc:60:1e:de:19:c7:dd:81:35:
         74:3c:35:62:b9:c3:47:a4:9a:61:6e:d0:87:71:78:ef:0e:3d:
         ff:cc:4a:c2:26:38:29:30:ea:b9:50:82:99:c2:83:71:0f:76:
         ea:f1:c6:ee:40:fe:a4:67:69:62:45:72:56:93:49:bb:2e:11:
         4d:fa:cd:d3:cd:34:29:f4:66:2f:b8:ca:b8:1a:be:24:27:b0:
         6b:24:67:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:18:02 2025 by rpki-client