Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33312e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e33312e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          /eRVaW2Bi9oMl5HCaS7ZrL2oMBEqbwTDBFUhsFRFyx8=
Subject key identifier:   A8:E9:0B:1D:E0:A5:95:4C:48:FE:27:9B:66:62:2C:E3:9E:98:3C:F3
Certificate issuer:       /CN=7BB66415D711DB401704B5A5A315C202CB8AF863
Certificate serial:       79DF1ACD982D209FCCC7859ED899D21E6C273045
Authority key identifier: 7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33312e302f32342d3234203d3e203532363331.roa
Signing time:             Tue 14 Jan 2025 13:26:15 +0000
ROA not before:           Tue 14 Jan 2025 13:21:15 +0000
ROA not after:            Tue 13 Jan 2026 13:26:15 +0000
asID:                     52631
IP address blocks:        177.128.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:df:1a:cd:98:2d:20:9f:cc:c7:85:9e:d8:99:d2:1e:6c:27:30:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB66415D711DB401704B5A5A315C202CB8AF863
        Validity
            Not Before: Jan 14 13:21:15 2025 GMT
            Not After : Jan 13 13:26:15 2026 GMT
        Subject: CN=A8E90B1DE0A5954C48FE279B66622CE39E983CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:da:19:11:11:f7:a7:02:2d:c9:95:96:04:
                    92:ec:a9:c3:e6:37:63:f7:21:c9:73:15:d0:9d:73:
                    27:d1:9a:d0:38:35:47:63:dd:6a:46:51:dc:72:09:
                    ae:21:79:53:e4:21:b1:9b:d3:10:25:4b:51:e6:c2:
                    fd:a4:20:02:a8:b5:a5:f7:09:50:a0:2f:60:c5:67:
                    0b:12:8c:56:ae:2d:6f:ac:a2:75:2b:13:4c:76:4c:
                    b1:3e:4b:4f:88:79:a3:0d:f1:61:d8:97:d5:77:d6:
                    39:7f:0e:dd:7a:39:24:96:ae:d4:eb:3c:83:bb:b5:
                    f9:a5:88:82:72:fb:e8:2f:51:a0:ea:b4:2f:cd:6f:
                    5d:1d:31:03:97:1f:1d:56:de:0d:1b:47:22:94:63:
                    2c:8a:63:90:c5:f0:e6:dd:14:c0:5f:95:09:60:74:
                    76:b9:87:a2:7d:3a:fa:3b:0a:9c:e2:7f:a2:83:6f:
                    e5:87:5f:45:32:a9:df:12:68:29:f2:41:d4:d2:97:
                    73:b4:22:4f:81:5c:fa:d9:86:7e:43:a8:a9:68:9f:
                    11:08:61:cd:65:70:72:28:6f:d1:63:00:03:02:8c:
                    6f:e5:4b:e4:0a:33:a2:8a:f6:36:95:c8:2b:b5:42:
                    1c:56:30:c2:3a:87:4d:34:d9:db:88:73:de:70:53:
                    78:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E9:0B:1D:E0:A5:95:4C:48:FE:27:9B:66:62:2C:E3:9E:98:3C:F3
            X509v3 Authority Key Identifier:
                keyid:7B:B6:64:15:D7:11:DB:40:17:04:B5:A5:A3:15:C2:02:CB:8A:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/7BB66415D711DB401704B5A5A315C202CB8AF863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BB66415D711DB401704B5A5A315C202CB8AF863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e33312e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:4b:bb:b0:fc:71:dd:e3:f4:36:b9:67:68:fa:89:38:66:ed:
         f1:cb:21:fb:6f:26:bf:51:0a:4c:ad:40:06:5a:f3:30:f6:01:
         c3:c0:32:96:f2:ea:2a:e7:20:04:d2:0e:e2:f1:c0:3a:95:7b:
         fc:e7:6d:65:8b:3a:6a:bb:88:81:5b:8b:7e:53:ba:f1:10:a2:
         e8:96:ca:79:96:eb:29:ad:b0:8e:dd:33:e1:cf:77:68:5f:59:
         a7:d4:68:65:c6:59:88:ba:e6:f8:a7:5c:e4:2a:0c:6e:0a:37:
         fa:a7:ab:e5:9b:65:b5:b3:75:0b:a3:b8:8e:ad:7e:29:e3:e2:
         67:78:b5:51:bd:ca:43:d8:7c:71:68:46:7c:48:41:ec:dc:98:
         13:cc:ec:8c:65:0d:ce:1c:f4:20:e2:3c:90:28:8c:d7:7e:b5:
         d9:32:82:dc:75:e1:ba:f3:af:0a:8e:e0:07:2f:bf:d0:59:9d:
         5d:07:e3:a0:b5:12:c2:b3:8d:5d:38:7f:9a:e7:be:0b:e5:b3:
         5e:54:d8:ba:1b:ed:a8:dc:00:f8:61:c4:55:3e:4c:c0:3e:16:
         1f:bf:e9:5e:86:4d:ae:f2:dc:b2:7e:47:6b:39:00:54:8b:fb:
         2f:2a:ae:0c:83:fe:ce:89:e4:41:c9:03:17:6f:80:85:ec:79:
         ad:f7:4a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:46:33 2025 by rpki-client