Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e352e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e352e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          6Z2jtjTWB+AZgoPVAhH/o4UnHF+X/kP2zgJhtaTkRAI=
Subject key identifier:   84:F5:74:A8:1D:1B:20:6A:B2:37:5F:AB:75:D7:18:BA:5D:B0:A0:E6
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       148FDEF26CF7F0FC7DC5F4AC2CC19DB6BC4AEC26
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e352e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 14 Oct 2024 01:49:49 +0000
ROA not before:           Mon 14 Oct 2024 01:44:49 +0000
ROA not after:            Mon 13 Oct 2025 01:49:49 +0000
asID:                     262509
IP address blocks:        177.67.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8f:de:f2:6c:f7:f0:fc:7d:c5:f4:ac:2c:c1:9d:b6:bc:4a:ec:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:49 2024 GMT
            Not After : Oct 13 01:49:49 2025 GMT
        Subject: CN=84F574A81D1B206AB2375FAB75D718BA5DB0A0E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:a8:24:47:0a:0d:4e:dc:c7:4a:0b:dd:41:
                    81:68:d3:29:78:cc:59:00:91:5c:52:7c:a1:b1:1e:
                    ef:29:d5:22:76:fe:03:e1:2b:0c:7c:69:54:2f:2e:
                    ac:e5:54:e5:00:bb:56:59:8e:48:55:9b:82:b0:b8:
                    e7:f5:22:0d:17:34:96:9f:88:0f:ea:78:e5:ac:0f:
                    af:21:cc:24:b1:02:a0:e9:f9:f8:e2:44:89:86:e4:
                    1e:d8:e8:85:be:56:64:fe:f3:d5:b3:36:82:0f:2a:
                    36:c6:9c:79:e7:34:b5:0b:b5:f8:f0:6e:2a:f1:5d:
                    f2:8c:12:21:77:a6:90:c3:12:eb:d6:da:7b:59:1a:
                    3b:cb:fe:30:68:bc:c1:71:14:48:8c:44:63:94:4c:
                    2e:88:f7:36:99:ca:b9:7d:06:da:96:69:d8:83:83:
                    90:95:b4:bf:df:e6:f0:cf:90:57:e4:df:7a:01:b6:
                    21:5c:d9:eb:b0:34:ca:21:ab:ba:ed:e4:52:13:59:
                    6e:60:a9:81:61:3d:7d:29:d7:1c:03:02:3f:05:1a:
                    7b:dd:39:16:8b:b7:fd:2f:3f:c5:eb:e0:ca:1e:80:
                    e2:f3:f7:e0:f4:24:6f:d7:76:d0:98:1f:27:c3:d5:
                    4f:3c:cd:45:ef:2e:fd:75:7e:7a:fc:d3:8b:bd:86:
                    12:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F5:74:A8:1D:1B:20:6A:B2:37:5F:AB:75:D7:18:BA:5D:B0:A0:E6
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e352e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:fc:e4:59:b6:16:60:0c:94:31:02:35:8d:0e:43:17:d0:9b:
         13:34:da:54:c6:9f:44:6e:42:ec:9f:63:10:c9:a1:45:ac:1c:
         bf:10:aa:21:72:2a:10:e2:14:51:e8:96:4a:aa:cc:a8:cf:4f:
         a7:5a:7e:91:2f:29:43:27:b3:32:63:12:2e:c1:39:ab:bc:f5:
         7f:35:ef:cf:7c:55:fb:da:23:53:93:97:a6:96:aa:a9:43:2a:
         94:03:7e:9f:e4:9d:dd:e7:9c:27:ef:0e:5c:10:60:69:05:ea:
         31:11:51:58:59:20:04:44:3a:32:77:f0:71:21:0c:85:bf:b9:
         2d:b2:b4:c8:71:da:11:b5:61:39:cf:25:65:9b:c9:7b:17:c6:
         b4:1c:8f:d0:51:65:96:e3:d0:9b:f0:82:6a:37:31:ff:b1:fe:
         c8:30:ef:56:5e:5a:33:45:8d:3b:be:d6:08:ac:d1:ca:fb:2a:
         68:38:f7:ca:b2:ef:c4:bf:cf:2d:e3:fd:0b:18:bf:bd:65:89:
         99:55:5a:4c:b5:a3:f5:8d:e1:b5:ff:b5:93:bb:23:ca:6f:fb:
         3b:a3:4e:29:76:a2:db:92:d0:0b:b2:3a:16:f4:47:73:27:64:
         5c:2a:cd:2d:1e:5d:40:38:ac:5a:9f:c0:2c:a9:35:ec:8f:eb:
         d0:17:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:22:56 2025 by rpki-client