Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35322e302f32322d3232203d3e20323632353033.roa
File:                     3137372e39312e35322e302f32322d3232203d3e20323632353033.roa (raw, json)
Hash identifier:          xZt6cyKjDlAqxfGFhK9AjoxIS3Lg5Q2fxW3EiP2jvnU=
Subject key identifier:   70:A5:98:35:03:A3:8C:39:04:D1:91:6B:D1:4B:02:B5:51:AC:43:35
Certificate issuer:       /CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
Certificate serial:       5E3405140E8A3795C2C3A7C03BAEC3419CC10717
Authority key identifier: 91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35322e302f32322d3232203d3e20323632353033.roa
Signing time:             Tue 01 Apr 2025 15:16:00 +0000
ROA not before:           Tue 01 Apr 2025 15:11:00 +0000
ROA not after:            Tue 31 Mar 2026 15:16:00 +0000
asID:                     262503
IP address blocks:        177.91.52.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:34:05:14:0e:8a:37:95:c2:c3:a7:c0:3b:ae:c3:41:9c:c1:07:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
        Validity
            Not Before: Apr  1 15:11:00 2025 GMT
            Not After : Mar 31 15:16:00 2026 GMT
        Subject: CN=70A5983503A38C3904D1916BD14B02B551AC4335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2e:5b:96:f4:90:3b:ae:30:3f:9e:3e:d3:25:
                    e6:42:11:5c:44:d6:e2:8a:ec:42:92:1e:a4:5f:11:
                    4f:4e:f5:53:d7:e1:07:12:e5:80:7f:1a:ab:cf:bc:
                    27:8e:37:e4:c2:f1:71:a4:b2:87:44:6d:78:4b:b9:
                    c6:4e:ce:93:65:79:6c:01:91:3b:85:c1:b7:2c:e2:
                    58:f9:97:3d:9b:b2:40:61:df:c0:d0:46:a3:92:5a:
                    9a:dd:31:56:e5:87:07:63:be:7d:7e:9e:f4:72:f4:
                    4c:85:f8:8c:0e:7c:1d:f3:e2:69:b4:22:3b:70:00:
                    d6:5a:60:88:74:64:56:17:7b:f1:60:7b:2f:6c:e3:
                    da:df:92:b9:21:eb:dd:3e:27:cd:86:39:f1:05:32:
                    ac:a1:18:fc:5e:6c:10:38:7d:ff:a5:8a:93:3a:ca:
                    d0:af:2e:1c:01:31:83:4d:6c:29:66:76:a8:90:88:
                    4d:a3:e8:fa:3d:84:72:4e:c7:21:f1:8a:38:9c:ab:
                    4b:dd:09:d0:ac:3f:ad:40:65:d5:4d:ae:ec:b6:d5:
                    17:4c:13:90:e2:e1:5b:3f:e7:74:49:76:94:24:49:
                    ad:45:17:b1:56:1b:72:21:d7:74:d0:b0:da:08:9d:
                    32:36:12:4e:a7:d9:d7:bc:7f:9a:88:a6:68:6e:87:
                    51:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A5:98:35:03:A3:8C:39:04:D1:91:6B:D1:4B:02:B5:51:AC:43:35
            X509v3 Authority Key Identifier:
                keyid:91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35322e302f32322d3232203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:82:fc:95:2e:85:22:9b:7e:9f:46:62:3a:9b:30:f1:5b:65:
         2e:81:d4:d3:e3:07:33:db:ee:54:74:09:9c:a7:c1:f3:d4:5b:
         99:e1:93:1b:ce:34:57:f6:00:da:d8:49:d0:d8:19:5a:d2:64:
         7d:51:d4:63:91:9c:db:b8:be:92:00:de:6f:ab:f2:33:b5:eb:
         40:0e:19:7f:3f:57:b8:a5:0f:85:09:32:b0:5b:a9:e3:5e:40:
         2e:72:87:e3:59:41:08:e2:5b:24:92:fd:24:9d:1e:54:ff:1f:
         45:a7:d9:e5:9f:ca:fa:91:af:0a:d7:ff:71:f0:88:e0:72:91:
         14:11:29:82:2b:a3:2a:65:3a:d5:4a:22:5b:2b:d4:d8:80:17:
         d7:15:94:2d:72:7d:ba:9d:9f:39:ad:32:c6:77:1a:bd:a3:e4:
         75:35:de:c7:c7:0a:04:f2:44:66:00:e7:95:f1:57:4c:ce:19:
         7d:16:a2:a8:92:f6:a0:2b:34:77:76:20:61:c4:60:b2:00:cc:
         29:40:da:b4:f4:cb:4d:f4:bf:7d:f4:ea:6f:87:41:40:ae:bb:
         38:fe:12:52:c3:27:bd:b1:e0:25:cf:96:7c:85:d3:02:11:45:
         9e:e3:47:f4:87:b3:9c:36:68:53:09:b1:e4:19:7e:b5:2b:15:
         00:bb:ed:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:38:07 2025 by rpki-client