Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32362e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          dxr7SN6h8FYICVYlNvotfTJRTmoKsH3BYpZDPHSpOok=
Subject key identifier:   20:66:CD:E7:B2:A9:8F:3A:7D:2B:0B:CE:B6:4E:F2:93:A6:A0:2C:10
Certificate issuer:       /CN=7BB66415D711DB401704B5A5A315C202CB8AF863
Certificate serial:       654E957FE848E07797D17B37B0336200CC6BA054
Authority key identifier: 7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32342d3234203d3e203532363331.roa
Signing time:             Tue 14 Jan 2025 13:26:17 +0000
ROA not before:           Tue 14 Jan 2025 13:21:17 +0000
ROA not after:            Tue 13 Jan 2026 13:26:17 +0000
asID:                     52631
IP address blocks:        177.128.26.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4e:95:7f:e8:48:e0:77:97:d1:7b:37:b0:33:62:00:cc:6b:a0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB66415D711DB401704B5A5A315C202CB8AF863
        Validity
            Not Before: Jan 14 13:21:17 2025 GMT
            Not After : Jan 13 13:26:17 2026 GMT
        Subject: CN=2066CDE7B2A98F3A7D2B0BCEB64EF293A6A02C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:64:6e:f0:e3:8b:f1:ce:ca:56:85:66:79:66:
                    b1:03:d5:e4:92:fa:9a:90:71:e3:52:7f:a8:4f:97:
                    cc:fd:ac:65:d4:ed:84:8b:ff:b6:ae:7a:bd:1a:73:
                    ae:2a:de:33:33:0e:d5:f7:f0:50:91:78:fa:61:2a:
                    ee:6b:d8:0c:e3:86:09:9e:e2:09:58:95:ec:c4:a1:
                    7f:14:55:84:d0:49:ed:06:f0:33:59:19:4e:e6:67:
                    e3:1a:99:ee:60:1c:6d:a3:86:17:a2:76:ad:5f:e8:
                    95:84:ae:a3:fd:12:b5:40:20:70:c3:16:c2:60:99:
                    3d:78:c2:14:32:14:d8:d7:ac:5c:24:8d:77:e3:e6:
                    26:3a:5b:db:8e:19:6a:24:0f:9f:ae:3a:63:8b:7d:
                    1a:e3:bd:d4:2e:a7:f6:3c:b7:c4:d0:93:e7:65:91:
                    84:a8:cd:68:8a:fb:5c:8c:6b:b2:a1:eb:30:a4:81:
                    73:86:f5:7b:e3:06:e7:7b:2d:14:e0:4e:d3:b8:30:
                    0a:91:64:a7:ab:cf:8b:10:fb:5e:13:c1:bb:c2:a3:
                    92:2f:c3:24:ac:37:7a:5b:a0:80:b9:58:c5:87:c4:
                    11:68:c9:de:32:93:b9:1a:0f:a8:08:f7:7e:e9:3d:
                    7d:a1:27:e3:07:24:5b:c4:4b:e3:23:d2:68:31:35:
                    a2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:66:CD:E7:B2:A9:8F:3A:7D:2B:0B:CE:B6:4E:F2:93:A6:A0:2C:10
            X509v3 Authority Key Identifier:
                keyid:7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/7BB66415D711DB401704B5A5A315C202CB8AF863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32362e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:44:1e:40:da:cb:dd:13:7e:f6:b5:01:00:74:e8:30:9c:9f:
         8d:1e:d4:b2:f4:48:15:b6:64:f4:f4:e0:fd:72:02:e2:52:1d:
         c7:81:3a:b0:b2:91:46:74:56:f4:89:10:f1:eb:3c:13:fe:9e:
         8f:af:0a:21:24:cc:58:74:8f:ee:cf:8c:3f:98:75:36:37:f7:
         95:f6:46:76:f6:c1:ca:90:b0:fe:80:ba:63:c0:b1:36:ab:71:
         7e:79:94:8c:ef:a3:70:28:69:3a:80:91:be:14:22:39:82:a0:
         cb:61:30:75:7b:6a:be:b6:0c:05:2d:e0:5d:f8:b5:22:f8:4d:
         15:fe:d4:47:01:62:43:38:4a:03:3d:a2:ee:af:2b:4c:57:41:
         a1:0a:10:47:40:c1:b0:fc:20:f8:fb:a1:07:19:9c:14:80:a4:
         f8:7e:6d:f0:ee:b2:01:24:54:f7:a9:a1:ae:43:ec:94:e1:96:
         06:a8:af:19:8f:68:3a:ad:2f:1b:67:ac:4b:7a:87:74:00:e1:
         ed:42:fe:86:87:43:e6:9a:e1:55:32:a3:ac:64:7f:1a:3a:e5:
         fa:ec:64:92:b8:01:d1:a4:d6:b3:ef:be:0c:e0:57:84:f3:ad:
         8e:06:35:ac:02:8a:23:06:f7:fe:0d:b9:35:91:d0:9e:66:38:
         1a:d3:c8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:36:56 2025 by rpki-client