Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3137372e36372e37322e302f32322d3234203d3e20323632353330.roa
File:                     3137372e36372e37322e302f32322d3234203d3e20323632353330.roa (raw, json)
Hash identifier:          Z7ynmyqFbfhJN+cwJ6dTA7t3rm/iuNpFL+M0dPaCOBI=
Subject key identifier:   2F:FB:20:6D:B2:22:CE:03:1B:A8:53:25:DA:EA:16:76:B7:92:AA:73
Certificate issuer:       /CN=B410AE9221B712152EE021F11F6C4A32F7D29278
Certificate serial:       5BC680E09D78C7500A1B098F78A5CE47F5346772
Authority key identifier: B4:10:AE:92:21:B7:12:15:2E:E0:21:F1:1F:6C:4A:32:F7:D2:92:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3137372e36372e37322e302f32322d3234203d3e20323632353330.roa
Signing time:             Thu 19 Dec 2024 18:18:09 +0000
ROA not before:           Thu 19 Dec 2024 18:13:09 +0000
ROA not after:            Thu 18 Dec 2025 18:18:09 +0000
asID:                     262530
IP address blocks:        177.67.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c6:80:e0:9d:78:c7:50:0a:1b:09:8f:78:a5:ce:47:f5:34:67:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B410AE9221B712152EE021F11F6C4A32F7D29278
        Validity
            Not Before: Dec 19 18:13:09 2024 GMT
            Not After : Dec 18 18:18:09 2025 GMT
        Subject: CN=2FFB206DB222CE031BA85325DAEA1676B792AA73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1a:27:04:ca:a0:e5:fa:a5:c1:82:e0:3f:21:
                    88:42:46:e8:c3:ca:07:2c:68:f4:69:fb:13:72:2b:
                    fa:b5:28:90:b7:45:7b:e7:c5:d8:a4:9f:1b:a0:b3:
                    1e:64:15:19:c8:2d:8d:a5:80:2b:84:3a:0c:17:7e:
                    84:2b:a7:fd:09:2a:a2:8e:96:42:bd:d0:e1:aa:26:
                    e2:1a:02:6c:05:be:f2:f2:6a:1d:06:e5:2f:a7:22:
                    3d:15:55:1d:00:e6:75:8e:cc:4b:35:de:d9:f6:7f:
                    3d:e6:50:d6:71:a9:17:df:e2:2e:a7:ec:02:53:ca:
                    8f:38:ab:a1:0b:2c:7d:8d:3b:e3:7e:a6:15:26:22:
                    94:d2:f7:f9:3a:fd:4c:3b:9a:ba:b0:9f:17:1b:a8:
                    3f:e6:4f:3b:df:93:26:8a:6b:d2:a6:fc:1e:7b:31:
                    c5:e2:59:f7:de:57:f7:42:cd:ae:d1:f6:8a:ca:2b:
                    87:73:cb:8e:97:ac:3c:ab:81:03:4e:ef:4f:9a:e3:
                    52:90:62:80:90:51:46:50:d7:74:96:36:e9:56:82:
                    69:90:72:81:af:1e:c2:18:c3:4c:3d:da:3b:23:6c:
                    ab:91:27:16:9f:ba:5c:b5:48:e3:44:45:9c:70:4f:
                    9f:2a:0c:de:c4:84:18:ba:da:7c:22:1d:20:55:6b:
                    3e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FB:20:6D:B2:22:CE:03:1B:A8:53:25:DA:EA:16:76:B7:92:AA:73
            X509v3 Authority Key Identifier:
                keyid:B4:10:AE:92:21:B7:12:15:2E:E0:21:F1:1F:6C:4A:32:F7:D2:92:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3137372e36372e37322e302f32322d3234203d3e20323632353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:0b:9d:39:c5:c3:07:84:64:72:ff:90:7e:a2:90:33:b5:88:
         27:da:f8:90:4e:c4:a2:c5:a4:ee:74:f4:8b:08:c9:97:61:6c:
         8e:db:32:a3:25:96:89:01:11:17:9e:df:31:ab:e2:46:99:01:
         ab:4c:ed:3a:d7:0c:c9:55:dc:52:a2:b2:23:fa:f5:9c:c4:a3:
         a8:68:e7:ab:cd:ff:17:c2:12:b8:c4:5b:96:58:3c:48:13:d4:
         12:b1:ec:4e:09:ae:e6:e7:2f:9b:d5:36:89:42:e1:ff:91:9c:
         08:94:49:fe:57:d4:20:6f:10:aa:85:91:b8:1f:a2:e6:32:ef:
         a5:21:3c:4f:17:b1:42:16:5b:5f:e9:9e:11:3a:87:86:17:32:
         54:a7:57:7a:39:8e:14:02:32:71:e5:26:ed:cf:0c:72:b7:9d:
         2a:a0:d0:79:66:5e:0c:f1:29:36:d6:23:a2:12:8b:43:f0:f7:
         a9:53:09:92:f3:db:8d:c9:0f:b5:fb:78:03:9c:4f:97:ac:85:
         8d:f4:46:b5:a2:b5:ce:09:26:84:39:fe:13:81:12:3d:53:e3:
         6b:31:05:11:ab:c4:0e:a0:49:4b:8f:06:47:d1:4c:b4:85:62:
         fd:c7:45:e5:9a:36:1f:7b:2b:b1:f4:e4:f2:7e:1a:ed:bd:13:
         92:53:00:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:50:59 2025 by rpki-client