Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32382e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          +OpexOLW6unBoo7Q+RnEdJw1TKf8C32QL7a+VXiBU50=
Subject key identifier:   8D:B1:93:A7:84:83:15:13:AD:78:7B:17:6E:5D:BC:E6:E7:9B:F8:E5
Certificate issuer:       /CN=7BB66415D711DB401704B5A5A315C202CB8AF863
Certificate serial:       331B6BF8569A6F48C61F866A9ED10CF4AB840478
Authority key identifier: 7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32342d3234203d3e203532363331.roa
Signing time:             Tue 14 Jan 2025 13:26:11 +0000
ROA not before:           Tue 14 Jan 2025 13:21:11 +0000
ROA not after:            Tue 13 Jan 2026 13:26:11 +0000
asID:                     52631
IP address blocks:        177.128.28.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1b:6b:f8:56:9a:6f:48:c6:1f:86:6a:9e:d1:0c:f4:ab:84:04:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB66415D711DB401704B5A5A315C202CB8AF863
        Validity
            Not Before: Jan 14 13:21:11 2025 GMT
            Not After : Jan 13 13:26:11 2026 GMT
        Subject: CN=8DB193A784831513AD787B176E5DBCE6E79BF8E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:49:7c:6e:25:8d:d8:25:4e:b8:5c:b5:ef:
                    65:4d:28:d3:48:6d:68:2e:eb:8c:37:07:cc:38:8b:
                    8a:f5:f3:25:c3:7b:05:85:29:ea:97:3a:8c:43:20:
                    4d:e3:8e:a2:cb:cb:d6:8e:28:d4:a9:06:07:62:6b:
                    3c:8c:49:b7:f2:ec:35:48:9e:a6:52:2d:6a:24:b7:
                    15:2f:b8:f2:0e:31:8e:bf:60:46:d9:ed:b4:58:a0:
                    d6:ac:8f:5f:db:24:2a:1b:24:a2:6d:dd:5d:45:6d:
                    2e:b4:59:23:50:d7:21:19:0e:17:22:2a:c7:f2:b5:
                    90:99:39:4e:80:a8:ec:ea:9b:16:68:51:49:d3:4f:
                    e7:47:9a:c0:82:98:64:01:b1:f9:8c:b3:ac:3e:8f:
                    df:06:2f:75:35:06:10:0a:10:11:0f:7d:5a:5e:b2:
                    d2:82:fb:e2:0e:9a:c6:fd:e6:4c:13:13:2f:7e:b9:
                    9f:7f:5e:45:46:88:c0:3d:34:32:e3:4b:7b:fb:56:
                    d1:1a:06:c8:d8:4e:21:0f:8d:a2:93:aa:ac:b6:d2:
                    88:16:15:68:53:fa:8c:67:92:e1:45:05:cb:40:af:
                    7c:d5:d9:22:2a:d7:c5:92:cd:05:c5:dc:f6:38:7f:
                    7c:ab:91:62:72:c9:9a:a8:06:c4:1d:34:31:01:69:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B1:93:A7:84:83:15:13:AD:78:7B:17:6E:5D:BC:E6:E7:9B:F8:E5
            X509v3 Authority Key Identifier:
                keyid:7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/7BB66415D711DB401704B5A5A315C202CB8AF863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:e9:4a:1a:6f:7a:93:fd:b3:87:7f:7a:ad:35:c1:fa:b8:60:
         d7:7e:44:b7:21:20:ed:b9:41:7d:82:f3:6e:8a:87:9a:8b:67:
         51:23:04:f6:e0:ca:26:9b:fe:ec:eb:cf:c6:2e:3b:b8:9a:04:
         2c:b6:b3:53:01:85:2b:10:db:28:fc:0d:97:9d:7f:01:20:4e:
         1b:ed:40:18:9e:b1:9a:7b:e8:69:64:31:8d:4b:50:82:f2:61:
         b5:dd:52:c4:cb:8e:3c:69:26:bc:2f:56:57:e3:53:64:96:cc:
         13:65:40:f9:5e:5a:d8:4d:19:06:81:9e:53:03:e5:a4:c4:63:
         ba:90:fc:8d:64:f3:7a:cb:9b:57:33:e6:92:1a:e7:49:74:4a:
         f6:1f:9b:88:ef:3d:93:34:5d:75:49:ca:42:0e:19:73:04:25:
         1c:af:79:bc:25:08:89:d2:bd:7c:7c:00:30:28:18:a1:44:ff:
         d7:c7:c7:13:fe:36:ac:75:2c:b1:80:3d:d4:9f:ca:64:98:ce:
         bb:33:3f:80:74:9a:61:d6:2d:2b:e9:73:86:d3:5b:bb:e0:43:
         6f:21:7e:52:f3:10:ff:4a:a9:38:70:ce:c1:7b:a9:5d:b4:22:
         d1:64:dd:cc:78:6a:8a:73:4e:99:a2:13:a1:62:95:96:c4:ba:
         55:ba:46:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:49 2025 by rpki-client