Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32352e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32352e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          /eh3COJpmtRTTdoSwev3V6eJ1tfPOSM1knYVIKDDoSI=
Subject key identifier:   1A:1B:09:03:37:55:3F:CD:B0:03:FC:6E:37:D4:15:0E:8E:02:73:F6
Certificate issuer:       /CN=7BB66415D711DB401704B5A5A315C202CB8AF863
Certificate serial:       31B220690662DF81A1B33196616124A4E361B442
Authority key identifier: 7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32352e302f32342d3234203d3e203532363331.roa
Signing time:             Tue 14 Jan 2025 13:26:19 +0000
ROA not before:           Tue 14 Jan 2025 13:21:19 +0000
ROA not after:            Tue 13 Jan 2026 13:26:19 +0000
asID:                     52631
IP address blocks:        177.128.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b2:20:69:06:62:df:81:a1:b3:31:96:61:61:24:a4:e3:61:b4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB66415D711DB401704B5A5A315C202CB8AF863
        Validity
            Not Before: Jan 14 13:21:19 2025 GMT
            Not After : Jan 13 13:26:19 2026 GMT
        Subject: CN=1A1B090337553FCDB003FC6E37D4150E8E0273F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0c:89:d1:60:36:94:28:3a:cf:59:38:2e:2f:
                    da:4a:26:a4:c5:52:de:28:c3:e7:d3:f9:d9:9f:ed:
                    5d:0e:9b:84:d1:39:b0:a9:30:1a:d0:a9:02:9f:90:
                    e0:5b:32:64:ef:05:b7:10:95:3e:4a:94:ef:cc:53:
                    b9:ff:e7:da:31:d9:89:8e:a7:57:7e:e2:8f:d2:cb:
                    84:e2:c6:59:03:14:25:3b:ac:9b:8d:cb:d3:05:28:
                    6b:d0:db:40:a1:c2:8d:35:3e:01:7f:70:69:62:b9:
                    e2:b4:4d:98:11:56:05:f5:78:02:ef:0a:da:56:d0:
                    b8:80:1e:f0:3a:b7:bf:5a:d7:41:35:8d:0c:b5:9e:
                    60:2d:a0:d6:7f:22:9d:5e:1f:6b:25:0e:4f:e9:d3:
                    6d:43:78:60:85:0c:86:f3:dd:75:7a:52:fc:57:fa:
                    f4:ea:b5:d3:25:c1:6c:bc:7d:8f:a6:d4:a7:e1:bb:
                    ee:99:07:37:77:f8:d9:70:9d:af:51:97:0d:b4:e5:
                    cc:9f:86:f7:ec:7e:91:91:03:29:17:33:dc:fd:ce:
                    d4:b3:30:54:d3:0d:01:eb:93:ce:95:87:bd:61:37:
                    10:98:6d:05:b4:44:95:9c:23:17:d7:19:84:07:38:
                    d1:44:9e:d3:90:3b:b8:fd:de:a4:bc:97:c1:66:29:
                    15:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1B:09:03:37:55:3F:CD:B0:03:FC:6E:37:D4:15:0E:8E:02:73:F6
            X509v3 Authority Key Identifier:
                keyid:7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/7BB66415D711DB401704B5A5A315C202CB8AF863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32352e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:c8:cd:14:45:06:67:f1:79:44:0d:11:0d:d7:03:a9:37:c1:
         7c:14:0a:0c:d7:c7:67:2e:7a:ad:90:be:11:dc:1e:39:d2:a6:
         16:65:17:e2:ad:09:f1:31:51:51:89:98:88:0b:6e:5e:3d:e1:
         b0:1c:a0:4a:6e:a5:86:2d:ba:05:98:a9:ff:9f:dc:50:55:ce:
         c1:72:60:57:4a:8f:b1:f0:e6:77:47:d0:e1:db:ad:03:19:88:
         b8:6d:73:f8:af:b3:46:db:f2:02:fc:5f:45:9e:ef:82:74:6e:
         49:1e:af:f8:c0:49:6d:49:cc:af:6a:ed:ce:22:e5:a1:01:4c:
         8f:48:cd:22:ec:dc:48:93:f7:f4:88:3e:13:91:f6:01:99:bf:
         0a:80:41:52:bd:fe:50:23:7e:82:86:e9:79:c9:90:67:dc:57:
         8c:a5:93:74:f8:3c:24:a5:43:e4:6f:a3:4e:dc:df:ac:13:9a:
         cf:67:3d:77:8f:9e:10:6c:5a:a5:37:43:74:b4:73:0c:d2:c9:
         e4:47:11:7f:14:60:02:4f:ba:34:7e:48:ba:85:15:0a:9f:33:
         8e:40:ff:1c:f6:e3:28:0a:7e:41:6e:79:80:e7:30:e7:46:bc:
         34:04:00:6d:3e:5d:67:97:61:b8:ed:5b:30:a1:56:b7:9b:36:
         53:e8:3f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:26:37 2025 by rpki-client