Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3137372e35352e3232342e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3232342e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          k4NSbEkY7N6Z4oFzKeQZMNO/VERDEiRX57slzSKKjgw=
Subject key identifier:   D6:38:2B:4D:43:4A:36:90:92:CB:BF:0D:B0:6C:5F:A3:37:3F:53:E1
Certificate issuer:       /CN=4504054E9F641914E3EF0F436CCB1E127C868221
Certificate serial:       2A6A1FD4715582460DCF64C2662190BF6EF53DC9
Authority key identifier: 45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3137372e35352e3232342e302f32342d3234203d3e203238363536.roa
Signing time:             Mon 24 Oct 2022 01:11:38 +0000
ROA not before:           Mon 24 Oct 2022 01:06:38 +0000
ROA not after:            Mon 23 Oct 2023 01:11:38 +0000
asID:                     28656
IP address blocks:        177.55.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6a:1f:d4:71:55:82:46:0d:cf:64:c2:66:21:90:bf:6e:f5:3d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4504054E9F641914E3EF0F436CCB1E127C868221
        Validity
            Not Before: Oct 24 01:06:38 2022 GMT
            Not After : Oct 23 01:11:38 2023 GMT
        Subject: CN=D6382B4D434A369092CBBF0DB06C5FA3373F53E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b5:ef:d3:e5:c9:e5:53:bf:29:e0:33:10:29:
                    73:e1:13:90:68:2c:56:73:88:59:87:64:bb:6e:9a:
                    ae:5d:cd:e1:5b:5c:0f:9f:7a:a8:fc:0e:a9:35:43:
                    87:6c:95:13:3a:85:39:e0:e0:03:c5:57:21:d7:11:
                    3b:d0:96:82:e0:a2:77:a2:99:92:ac:f1:ab:9f:ff:
                    3b:14:e6:88:4c:80:ae:3f:70:2c:7a:00:af:ed:47:
                    a6:a6:15:9d:1b:cf:1d:88:a9:9a:31:cd:c8:1a:40:
                    80:fd:a3:16:bd:df:a0:d0:06:70:6e:66:19:a1:21:
                    16:18:7b:2b:76:20:80:45:05:97:21:84:47:9e:1a:
                    89:5d:8a:ac:54:53:bf:5f:e2:dc:dc:8d:54:2e:6f:
                    28:e3:9e:06:bc:bb:44:f9:0f:d3:22:d3:26:c2:d8:
                    b8:71:99:b8:9a:49:f8:db:8d:22:f0:a5:e2:4a:5a:
                    26:a6:55:a1:3a:2c:54:4f:41:2c:35:0c:7a:e3:c4:
                    fc:95:7e:1d:47:53:4e:aa:5f:94:6f:29:28:8c:56:
                    81:0d:fc:36:dd:11:d2:8b:35:6a:1b:e9:c0:c3:92:
                    9a:93:2b:09:8b:05:e5:6d:c1:6e:a5:ad:ac:15:f5:
                    1a:cf:35:93:2b:1c:86:77:14:41:f0:b5:a5:3e:b7:
                    42:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:38:2B:4D:43:4A:36:90:92:CB:BF:0D:B0:6C:5F:A3:37:3F:53:E1
            X509v3 Authority Key Identifier:
                keyid:45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/4504054E9F641914E3EF0F436CCB1E127C868221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3137372e35352e3232342e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:cc:55:32:95:aa:3c:a7:5c:ec:83:d6:d3:e0:63:98:72:f6:
         20:cc:c3:4e:10:d7:a5:2c:41:e7:04:2d:03:a5:0d:8c:0b:67:
         66:54:f1:98:67:db:59:cb:1d:5e:5b:34:63:61:53:f5:14:38:
         ba:ea:7c:43:df:42:28:73:a4:7d:68:bf:42:36:92:27:0f:c6:
         15:0f:26:2c:c2:e5:d2:64:1f:8e:5f:1b:e2:e1:77:5a:0a:91:
         c9:59:55:d6:ff:d3:fe:f3:5a:04:44:3c:f4:20:83:ff:e3:fa:
         bd:fd:c5:42:65:ab:aa:6b:68:ef:49:a2:74:d0:3d:a9:b8:60:
         36:a6:20:01:64:61:80:05:de:e5:59:98:5f:59:e1:d3:80:c7:
         f8:a1:30:b4:85:07:cf:6e:80:46:67:93:f9:54:07:79:cc:dd:
         a5:7d:c9:02:e5:4c:d3:2f:92:30:3e:98:f5:f2:78:ca:e4:cc:
         10:5d:4b:99:66:64:73:0a:4e:bf:5b:d7:77:6b:da:58:20:b1:
         07:04:5d:6e:53:9b:9f:a7:ac:fc:4d:48:48:f6:77:12:0b:80:
         08:8e:d0:6a:b2:c5:31:bf:07:b8:db:09:5f:9f:e7:08:04:a1:
         8f:b1:92:96:47:bd:3a:5c:c5:cf:51:10:d4:bc:29:20:fe:11:
         a6:d3:09:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:44:21 2025 by rpki-client