Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32332d3233203d3e203532363331.roa
File:                     3137372e3132382e33302e302f32332d3233203d3e203532363331.roa (raw, json)
Hash identifier:          iEQqvcNFejEIFOHbypNAVTleMuIrsx9tMHpbXnBnYo4=
Subject key identifier:   36:34:AF:17:6E:04:57:80:90:BF:2A:6D:A7:A7:99:4F:C4:12:CA:C3
Certificate issuer:       /CN=7BB66415D711DB401704B5A5A315C202CB8AF863
Certificate serial:       1FB1020D554B794B7B734ACCA0E0DDED58586605
Authority key identifier: 7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32332d3233203d3e203532363331.roa
Signing time:             Tue 14 Jan 2025 13:26:20 +0000
ROA not before:           Tue 14 Jan 2025 13:21:20 +0000
ROA not after:            Tue 13 Jan 2026 13:26:20 +0000
asID:                     52631
IP address blocks:        177.128.30.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b1:02:0d:55:4b:79:4b:7b:73:4a:cc:a0:e0:dd:ed:58:58:66:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB66415D711DB401704B5A5A315C202CB8AF863
        Validity
            Not Before: Jan 14 13:21:20 2025 GMT
            Not After : Jan 13 13:26:20 2026 GMT
        Subject: CN=3634AF176E04578090BF2A6DA7A7994FC412CAC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:f2:da:ff:5a:bd:1f:eb:7f:1e:43:69:b7:
                    23:4c:ce:a2:07:b0:20:36:a8:b8:3a:c1:77:17:4d:
                    b2:92:8a:42:ca:10:93:01:db:5c:bb:78:cf:6a:02:
                    a5:0a:bf:1d:29:38:dc:cf:b0:ca:b1:59:5c:88:4b:
                    66:c0:96:87:40:16:80:1e:5e:4c:bf:a3:6f:96:72:
                    c1:9d:8b:7a:96:43:9a:3e:bb:b6:69:d7:bb:cf:57:
                    dc:ad:fa:95:30:5e:86:07:60:69:06:c2:1a:6f:88:
                    29:c8:68:4b:2f:bd:c6:10:ef:30:a3:a6:1a:03:98:
                    c9:12:a3:37:ec:96:98:a7:7e:e0:1c:4c:1f:e6:c9:
                    07:02:08:0b:7d:d0:ea:fe:34:5b:99:a5:40:17:da:
                    a8:a6:81:05:43:9d:9f:e1:6f:ba:cb:f2:b3:ff:e8:
                    b2:cd:6e:c5:0a:3b:17:23:e8:5d:06:41:a1:45:25:
                    8c:39:2f:88:3a:f9:e7:86:db:c6:b3:9a:63:2d:bd:
                    03:24:5b:54:f0:d7:ca:79:d8:80:db:46:0c:fe:8f:
                    8c:23:45:b0:91:0f:ad:7c:b6:2e:d8:33:c4:23:e2:
                    f6:78:64:c0:1e:d7:4a:a0:67:09:fd:8c:be:5f:9d:
                    e2:bb:0a:ee:92:84:2e:b0:a6:d0:99:f0:46:09:e3:
                    bd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:34:AF:17:6E:04:57:80:90:BF:2A:6D:A7:A7:99:4F:C4:12:CA:C3
            X509v3 Authority Key Identifier:
                keyid:7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/7BB66415D711DB401704B5A5A315C202CB8AF863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33302e302f32332d3233203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:a1:89:ba:6d:88:6b:28:2d:09:84:ea:ea:87:68:2c:3b:9b:
         63:95:62:e3:ae:a3:a3:d2:c3:d0:fb:e9:8c:33:92:d5:6a:a9:
         59:68:97:d1:80:aa:ee:a7:65:26:a7:f1:c4:5a:bb:67:b8:5a:
         19:7f:f6:2f:36:e2:11:52:08:dd:f1:d0:5c:2e:32:c9:99:04:
         dd:1f:e4:65:46:16:da:7d:9d:a0:ec:6c:5b:5e:46:17:c6:a3:
         07:19:e1:dd:5e:cf:7f:f7:7b:ef:75:46:f5:38:ca:38:e7:20:
         51:d6:af:f2:1f:80:88:7f:27:aa:b0:fa:77:d1:9b:06:81:e4:
         e3:fc:af:9a:12:5b:d8:43:b8:28:6c:39:06:10:5d:cf:75:41:
         4b:fa:4e:35:94:4d:f5:8f:4a:2c:a6:d7:7b:5e:73:48:d9:83:
         64:64:2c:89:3f:07:2f:f1:cc:dc:61:48:11:ad:85:13:79:14:
         ca:0c:c1:16:4f:71:e1:e0:fa:bf:2d:20:af:48:97:08:69:10:
         24:e1:e1:63:d8:08:34:35:14:c5:09:f0:37:41:3a:e3:56:db:
         4f:36:79:fe:ce:ae:dc:ea:76:fd:c4:21:d8:52:4a:8d:72:b9:
         fb:39:ed:62:6d:df:ac:ae:c1:7f:80:63:75:5a:e9:12:d9:7b:
         42:60:fd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:22:21 2025 by rpki-client