Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3137372e35352e3232342e302f32302d3233203d3e203238363536.roa
File:                     3137372e35352e3232342e302f32302d3233203d3e203238363536.roa (raw, json)
Hash identifier:          8leGcaoLrNh6GzgATfGC+kgXt/JSY2eFgaIf5ut6crU=
Subject key identifier:   25:91:D1:06:8C:68:87:4D:89:62:DF:1B:65:CD:F5:E3:62:FB:FF:94
Certificate issuer:       /CN=4504054E9F641914E3EF0F436CCB1E127C868221
Certificate serial:       2C48C6C72BC1BADE8883885995EEEF026CF04D1A
Authority key identifier: 45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3137372e35352e3232342e302f32302d3233203d3e203238363536.roa
Signing time:             Mon 17 Oct 2022 23:15:49 +0000
ROA not before:           Mon 17 Oct 2022 23:10:49 +0000
ROA not after:            Mon 16 Oct 2023 23:15:49 +0000
asID:                     28656
IP address blocks:        177.55.224.0/20 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:48:c6:c7:2b:c1:ba:de:88:83:88:59:95:ee:ef:02:6c:f0:4d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4504054E9F641914E3EF0F436CCB1E127C868221
        Validity
            Not Before: Oct 17 23:10:49 2022 GMT
            Not After : Oct 16 23:15:49 2023 GMT
        Subject: CN=2591D1068C68874D8962DF1B65CDF5E362FBFF94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:09:6c:17:74:18:02:43:e6:9a:64:68:07:41:
                    f7:43:ae:1e:aa:82:fa:15:18:88:4c:73:0b:45:9e:
                    9e:be:98:62:1f:9e:69:e2:7c:46:19:d5:50:2a:2a:
                    76:97:4e:de:93:e2:54:f2:3f:ef:04:2e:26:4a:02:
                    1e:b1:dd:5a:af:b7:0d:b0:34:7e:e9:15:09:35:22:
                    b3:83:f5:5f:a7:0a:5f:b0:1a:63:d9:ad:e5:4f:54:
                    1c:b8:10:4d:55:14:1a:4a:ee:07:77:bc:7d:fb:cc:
                    b2:1a:62:27:e2:2c:6f:fc:59:79:d8:99:fb:4f:09:
                    57:45:d3:17:32:09:f4:30:01:34:cc:f3:b1:2e:d4:
                    74:c6:81:c6:9f:6f:44:cb:0c:8a:17:a1:e8:9d:65:
                    89:1c:85:8f:53:c5:1a:09:8a:b6:ff:29:68:11:60:
                    43:57:7a:67:01:bf:88:a7:43:0e:ac:57:8b:8d:0b:
                    61:07:f5:59:ec:39:e1:78:e1:19:61:fd:5c:03:b9:
                    24:2c:20:a4:41:bf:f9:01:38:5b:21:47:96:01:aa:
                    00:75:39:2d:35:e7:d9:a6:94:b9:9a:82:ab:c2:00:
                    e6:64:54:68:46:e6:04:49:f6:8c:4f:c4:c0:31:5a:
                    83:bf:81:fa:ec:0c:0d:da:1c:a6:2d:0b:25:5e:0b:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:91:D1:06:8C:68:87:4D:89:62:DF:1B:65:CD:F5:E3:62:FB:FF:94
            X509v3 Authority Key Identifier:
                keyid:45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/4504054E9F641914E3EF0F436CCB1E127C868221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3137372e35352e3232342e302f32302d3233203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:60:fa:e3:15:2a:2c:16:32:08:cc:e6:be:c9:a7:af:3b:1f:
         e3:ee:27:0d:99:95:38:20:32:6d:2e:da:9a:9d:1e:0d:98:06:
         64:26:79:50:af:71:97:40:ae:8c:b5:c7:9a:3b:1b:ef:57:d4:
         a5:d3:76:19:f6:b3:f1:63:f5:68:9a:37:7f:4c:cf:0a:aa:e8:
         fb:9b:4d:ff:db:27:c1:db:e5:c9:6e:5d:01:64:23:2a:72:38:
         13:e7:c9:ee:d5:8e:24:74:e4:52:9b:4b:66:a3:ac:b8:27:c2:
         8b:ec:3e:9b:46:25:ac:04:0f:de:cc:97:30:78:91:3e:36:af:
         ff:cf:a4:1c:af:8d:de:c2:dd:ea:a7:b2:f0:bf:ef:02:4c:0d:
         12:af:b8:e0:bb:91:26:57:a2:0a:17:45:36:00:64:62:85:e1:
         3b:1a:0a:74:49:05:6c:9d:a4:fe:67:59:c9:22:f6:31:80:45:
         5f:a9:74:a3:5e:78:15:3b:51:62:73:39:ed:4f:40:b1:5f:05:
         fd:0f:ae:cd:5e:32:c1:83:cb:c3:e4:30:f0:b5:de:60:f7:21:
         b1:fa:03:43:1c:2c:48:ac:4d:95:72:10:1d:4d:ba:53:6c:c1:
         a7:8b:e7:9f:49:1c:a3:66:60:ed:e1:03:09:69:4a:a9:ec:f7:
         47:9b:8f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:28 2025 by rpki-client