Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3137372e35352e3233312e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3233312e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          QPVfPVRkZIa17eMUq+Omd0CeBNl0CyAS2s5qtCrxwg8=
Subject key identifier:   0D:8F:7E:2E:8C:B4:3C:8B:C7:13:47:F0:A2:82:85:09:DA:53:23:AD
Certificate issuer:       /CN=4504054E9F641914E3EF0F436CCB1E127C868221
Certificate serial:       46B28738FF14D4371877AB436A87909EA1C2BB6D
Authority key identifier: 45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3137372e35352e3233312e302f32342d3234203d3e203238363536.roa
Signing time:             Wed 19 Oct 2022 10:34:25 +0000
ROA not before:           Wed 19 Oct 2022 10:29:25 +0000
ROA not after:            Wed 18 Oct 2023 10:34:25 +0000
asID:                     28656
IP address blocks:        177.55.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b2:87:38:ff:14:d4:37:18:77:ab:43:6a:87:90:9e:a1:c2:bb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4504054E9F641914E3EF0F436CCB1E127C868221
        Validity
            Not Before: Oct 19 10:29:25 2022 GMT
            Not After : Oct 18 10:34:25 2023 GMT
        Subject: CN=0D8F7E2E8CB43C8BC71347F0A2828509DA5323AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a8:34:3c:86:6b:6c:60:17:47:01:8e:14:27:
                    8f:83:3e:b5:f0:63:99:e8:67:ac:8f:dd:ee:e4:e4:
                    f2:ee:a2:79:b7:c2:06:2a:b7:32:73:57:04:af:fa:
                    0c:7c:ed:a6:8d:b1:4c:fd:cb:59:47:ee:f0:1f:27:
                    2e:af:c3:39:19:fa:28:1f:ec:52:db:01:97:c0:d3:
                    75:cb:a7:ad:d0:eb:20:6e:ad:d6:6e:65:8f:d1:36:
                    c6:8f:02:e7:44:3f:5a:44:ca:fb:c2:46:92:67:58:
                    d9:62:96:d1:99:bd:8f:0d:82:fb:b5:df:a4:07:0f:
                    70:d0:fe:35:02:7d:60:aa:96:16:47:4f:9c:c1:78:
                    61:79:a7:81:9c:2c:2e:d7:e0:04:f4:b6:06:40:3d:
                    27:e9:3b:ae:ec:a9:08:dd:b9:0c:2d:34:67:69:c7:
                    77:a9:bc:15:53:b4:39:f6:11:16:84:a0:25:69:71:
                    eb:f2:5b:be:18:9e:23:1d:1b:6d:db:80:22:d1:34:
                    eb:d0:d3:72:db:c9:88:74:59:0a:45:86:b9:c5:dc:
                    d1:87:b4:8d:c2:5c:1d:9d:84:68:9d:9f:a4:dc:a9:
                    53:1a:8a:85:4a:f5:89:8b:f8:6a:8e:70:7c:f1:f9:
                    0f:cb:8d:d9:76:e2:19:e2:cd:b9:08:ac:c0:06:96:
                    5f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8F:7E:2E:8C:B4:3C:8B:C7:13:47:F0:A2:82:85:09:DA:53:23:AD
            X509v3 Authority Key Identifier:
                keyid:45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/4504054E9F641914E3EF0F436CCB1E127C868221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3137372e35352e3233312e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:2a:0b:f1:ff:d6:9d:51:d6:70:12:83:09:c8:f9:52:41:1b:
         af:7b:ef:1b:80:ac:ca:17:df:fd:d7:ce:fe:21:29:a2:69:37:
         0f:66:ab:bb:07:ad:38:8d:40:ed:23:02:55:f7:5f:89:fb:5e:
         a8:c8:7f:1b:b8:77:2a:e0:db:e2:c5:26:81:0e:24:a9:8a:f5:
         a1:88:3b:62:01:a9:35:42:d8:25:8f:e7:e2:e6:a8:3a:1d:03:
         83:7f:fc:ea:30:97:c3:35:26:d7:4d:17:1f:1e:2b:80:13:b3:
         99:67:c9:09:f4:41:26:07:37:f3:f0:e6:7a:06:c7:2a:61:ac:
         29:ac:2c:5d:d6:89:73:c7:94:18:ec:2c:a8:29:12:65:22:d1:
         c3:e0:4d:5f:7b:fb:30:8d:72:06:45:15:1f:23:9b:01:7b:1c:
         b5:07:81:aa:aa:3c:43:81:47:37:29:d9:86:12:62:dd:a4:90:
         88:3a:be:99:ce:d3:66:3d:46:31:0f:27:3f:34:6c:de:52:5a:
         40:01:53:5f:18:b8:f4:6a:a4:19:10:5b:ff:2b:0c:f1:b7:2e:
         1f:8d:6d:4c:cc:b3:a4:fa:0f:8c:53:8e:01:68:31:f5:9a:41:
         7b:d6:31:37:95:e5:49:d9:18:ee:70:8b:6a:fc:04:a5:04:c3:
         d5:0f:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:46 2025 by rpki-client