Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/3137372e3133362e37332e302f32342d3234203d3e20323633363036.roa
File:                     3137372e3133362e37332e302f32342d3234203d3e20323633363036.roa (raw, json)
Hash identifier:          yWg25YSIGn5ne4PsmFkjzr0N6QT/q6srY2+ahn/2xK0=
Subject key identifier:   07:99:FF:5C:C9:9B:90:06:66:AC:D5:C7:81:1F:58:55:71:00:C5:7C
Certificate issuer:       /CN=561575F60242E48030BC35A771871EB47C6EFF55
Certificate serial:       2CDBB15E5E514EE115D382A88B5D1E11F5BA0653
Authority key identifier: 56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/3137372e3133362e37332e302f32342d3234203d3e20323633363036.roa
Signing time:             Sat 25 Jan 2025 14:21:51 +0000
ROA not before:           Sat 25 Jan 2025 14:16:51 +0000
ROA not after:            Sat 24 Jan 2026 14:21:51 +0000
asID:                     263606
IP address blocks:        177.136.73.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:db:b1:5e:5e:51:4e:e1:15:d3:82:a8:8b:5d:1e:11:f5:ba:06:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561575F60242E48030BC35A771871EB47C6EFF55
        Validity
            Not Before: Jan 25 14:16:51 2025 GMT
            Not After : Jan 24 14:21:51 2026 GMT
        Subject: CN=0799FF5CC99B900666ACD5C7811F58557100C57C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:8e:87:36:2b:6c:dd:83:02:36:cb:fd:3b:
                    b8:c6:f6:f7:65:5e:22:5c:b1:69:26:a0:53:43:d9:
                    ee:2e:6b:c0:e5:64:dc:61:b8:2f:7b:24:76:30:de:
                    33:43:21:49:03:c8:cf:e3:e0:a4:86:a5:62:9a:cb:
                    27:5e:86:48:4d:4f:6b:d5:e1:b7:6b:40:fa:7b:00:
                    34:1e:2a:1f:e6:a6:99:4e:74:cd:24:28:e7:69:8b:
                    14:5c:5d:cd:89:25:59:15:50:12:0e:8a:a6:21:41:
                    f3:80:44:d6:ef:69:30:88:ff:3d:ce:24:fb:d2:25:
                    08:a2:15:f2:17:0a:72:18:6d:37:50:cb:fe:b1:b1:
                    eb:fd:09:ce:09:49:ff:ac:5c:75:2b:9f:ce:25:e7:
                    15:fc:63:2a:da:05:cf:c0:d7:f5:1b:41:dd:39:95:
                    eb:c9:8d:d8:d8:d1:0a:02:5d:2a:03:0f:4b:2b:3d:
                    2d:1a:14:67:d5:fe:09:d6:2b:fe:45:61:ec:be:e7:
                    24:cb:47:fe:f6:e5:b1:63:41:18:bb:46:b0:fb:2e:
                    b4:5f:bc:a8:84:5c:33:24:0d:44:55:eb:57:90:cc:
                    c7:6d:b7:f3:0f:10:b0:c4:55:a8:52:c5:f3:79:a6:
                    4e:bf:b6:b5:03:01:7a:47:0c:2a:1a:00:d2:79:77:
                    de:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:99:FF:5C:C9:9B:90:06:66:AC:D5:C7:81:1F:58:55:71:00:C5:7C
            X509v3 Authority Key Identifier:
                keyid:56:15:75:F6:02:42:E4:80:30:BC:35:A7:71:87:1E:B4:7C:6E:FF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/561575F60242E48030BC35A771871EB47C6EFF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/561575F60242E48030BC35A771871EB47C6EFF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FzrskrAdxxNZxWiRb7BcUZGMneE11Q6PkQJvjNY1fe2/0/3137372e3133362e37332e302f32342d3234203d3e20323633363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:7b:dc:99:4b:d8:4c:07:2c:10:73:fe:dc:66:36:bf:54:15:
         88:4b:a7:95:89:2a:a1:f1:6c:25:40:db:9e:b2:b6:34:0b:6c:
         7d:b3:63:71:a3:4f:2d:62:41:18:07:ff:58:b9:0e:29:44:03:
         f7:ae:8e:46:0f:ec:39:cd:58:d8:fd:58:43:33:30:77:37:08:
         03:a9:8f:39:ed:7e:3f:9f:7c:29:8d:eb:e0:e6:25:26:af:ca:
         75:77:9d:fd:67:73:ad:ae:35:f6:3c:17:c2:77:65:8f:10:87:
         98:e9:e5:68:2b:35:d0:cc:44:e5:5a:7c:eb:f3:95:fd:37:89:
         d8:19:cf:64:a3:8b:29:df:2b:5b:de:7b:a3:88:46:22:c4:37:
         9b:4a:28:cf:a1:d4:3f:7b:0b:8d:f7:15:7c:a3:01:da:9a:b4:
         e4:e2:ee:9b:b6:cd:e0:74:c9:0d:ad:a2:16:d3:9f:cf:da:14:
         61:2d:07:09:12:4d:bc:aa:1d:43:96:8d:f7:95:e0:59:fc:7c:
         0f:46:20:87:c0:a8:ce:65:f2:b7:46:5f:7b:1a:66:85:a1:23:
         67:d0:a7:e4:85:2c:f4:6e:35:74:4f:96:bb:ce:d4:7e:79:55:
         65:65:18:ba:04:ef:ed:bc:5c:6c:03:e5:99:ae:21:d1:56:ca:
         35:db:dd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:49:46 2025 by rpki-client