Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139342e302f32342d3234203d3e20323632353033.roa
File:                     3137372e36362e3139342e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          Kqk9oEox67UL6rIy212b7IurVHb42gcgkGkF9jPXa+w=
Subject key identifier:   8C:83:36:D5:CC:DC:56:37:FF:08:1E:8F:87:3C:B7:C5:87:2F:EF:42
Certificate issuer:       /CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
Certificate serial:       5E6403B7DA037F43F173F8EF1E7DA074C0ACCA32
Authority key identifier: 91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139342e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 01 Apr 2025 15:16:01 +0000
ROA not before:           Tue 01 Apr 2025 15:11:01 +0000
ROA not after:            Tue 31 Mar 2026 15:16:01 +0000
asID:                     262503
IP address blocks:        177.66.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:64:03:b7:da:03:7f:43:f1:73:f8:ef:1e:7d:a0:74:c0:ac:ca:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
        Validity
            Not Before: Apr  1 15:11:01 2025 GMT
            Not After : Mar 31 15:16:01 2026 GMT
        Subject: CN=8C8336D5CCDC5637FF081E8F873CB7C5872FEF42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:5a:96:ee:4d:61:6c:90:b7:b2:84:e7:03:
                    5e:47:f8:4b:4f:3b:cd:34:39:22:be:05:6c:01:60:
                    53:78:2f:6b:ee:22:51:32:6c:61:c9:9e:ee:46:95:
                    9d:9b:4b:df:e3:65:ef:6c:28:9c:bc:ad:07:8d:8e:
                    89:13:d2:b6:95:8a:09:87:fc:fb:6d:07:da:f3:f1:
                    6b:70:2e:de:b1:d5:3a:89:fe:5b:f0:79:7b:92:e1:
                    16:42:a0:60:34:35:89:35:05:57:ab:86:51:62:8d:
                    7d:7e:ac:61:a4:11:a1:c9:db:37:02:f7:34:57:39:
                    ee:74:bc:74:3c:b4:6c:bb:2c:9a:65:7b:67:5f:f7:
                    98:32:62:90:ae:4a:c7:38:9f:ac:6b:df:0f:b3:f9:
                    9e:b0:77:c1:76:e1:e2:9a:e0:4c:3d:c7:2a:f8:07:
                    72:e8:dc:c0:5a:5a:d2:8f:ee:24:10:84:f3:ed:c1:
                    77:57:e5:71:6d:ce:02:e6:24:32:ee:e7:3a:29:58:
                    c1:25:27:c3:f0:07:66:a7:f7:88:14:82:55:df:f6:
                    d7:ff:12:02:0a:8c:70:bf:e6:71:58:e0:29:1a:b3:
                    1f:7f:1e:0a:55:43:e8:6f:e1:df:f9:e8:6b:cb:4f:
                    4c:a0:ab:5f:be:63:da:24:b2:d9:f0:f8:c1:92:25:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:83:36:D5:CC:DC:56:37:FF:08:1E:8F:87:3C:B7:C5:87:2F:EF:42
            X509v3 Authority Key Identifier:
                keyid:91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139342e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:24:4d:04:f6:ad:b1:56:da:a7:36:7c:cb:53:2a:5b:1d:76:
         e0:2a:13:54:1e:c5:d9:a1:21:66:b3:e4:d8:25:1c:90:2c:ed:
         33:74:e6:17:b4:d5:8d:99:e1:ca:59:87:0e:21:9f:a7:a9:eb:
         98:1c:08:7a:e1:3f:56:f6:0a:77:0e:dd:d6:57:b5:e5:c4:b2:
         35:59:d6:ee:5e:85:f1:81:5f:d3:da:88:3c:85:ac:6f:0c:d9:
         d6:89:26:6f:85:e1:11:e6:9a:61:cc:27:56:f9:f5:e0:61:ba:
         9b:09:3f:5c:f0:3f:cb:8b:0b:4f:9d:93:d1:dd:16:8a:bf:52:
         49:19:f3:8e:75:6f:d3:9f:b2:c5:fe:b5:ff:19:d6:70:2e:27:
         4b:64:20:01:19:bc:a6:d1:3a:ff:82:5c:c6:9b:51:2f:bd:d3:
         f1:a3:3f:4e:c6:cd:e1:7b:b0:af:09:78:5f:1b:43:5d:bc:2c:
         35:cd:a7:fb:3b:d0:e0:10:40:d8:54:66:21:6b:f2:dd:b5:70:
         65:97:5e:8b:8e:db:f9:aa:fe:96:71:3b:f6:f2:2d:00:9c:69:
         be:c3:ed:24:93:0c:a4:76:d1:c2:35:e4:d6:2c:19:2a:29:64:
         71:9f:be:10:00:74:0e:da:99:16:e7:39:ed:3b:82:2c:4b:c8:
         cf:ea:1e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:08:34 2025 by rpki-client