Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3137372e35352e3233382e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3233382e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          7VCaxoLm7en3HjyxTC+XHpLlKtGwrsysjVjxZHjJrqs=
Subject key identifier:   D8:25:DC:FA:C4:1C:E9:EB:BA:78:8A:CD:A1:A5:32:C3:5D:13:49:DD
Certificate issuer:       /CN=4504054E9F641914E3EF0F436CCB1E127C868221
Certificate serial:       6FFC82AD9E06AD6666F4B5CCE2399CA21E3B392B
Authority key identifier: 45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3137372e35352e3233382e302f32342d3234203d3e203238363536.roa
Signing time:             Wed 19 Oct 2022 10:34:26 +0000
ROA not before:           Wed 19 Oct 2022 10:29:26 +0000
ROA not after:            Wed 18 Oct 2023 10:34:26 +0000
asID:                     28656
IP address blocks:        177.55.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fc:82:ad:9e:06:ad:66:66:f4:b5:cc:e2:39:9c:a2:1e:3b:39:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4504054E9F641914E3EF0F436CCB1E127C868221
        Validity
            Not Before: Oct 19 10:29:26 2022 GMT
            Not After : Oct 18 10:34:26 2023 GMT
        Subject: CN=D825DCFAC41CE9EBBA788ACDA1A532C35D1349DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:04:e2:d8:2a:d8:50:5d:fc:cf:2e:0f:26:4a:
                    42:b8:62:5d:56:9c:fe:16:b4:ef:55:95:0f:70:31:
                    a4:4a:a5:5f:3f:23:91:0f:be:d6:2c:7a:90:70:c7:
                    a8:28:b6:0c:fe:ac:6a:03:ec:98:9f:86:62:31:e2:
                    1f:10:39:78:6a:6c:3e:99:e4:f1:53:b5:9c:1a:43:
                    75:64:33:b5:90:16:04:18:8f:98:69:fc:35:ba:6e:
                    8d:c1:bb:58:58:64:d7:c9:2f:f8:16:fe:3f:71:43:
                    3b:f8:78:2f:a3:9d:60:a4:4e:45:25:be:0c:28:94:
                    dd:c6:61:63:56:ec:7d:23:e2:05:cf:b8:a1:86:95:
                    b3:58:7d:a1:98:0d:9f:39:e5:21:b0:f9:3f:7a:58:
                    e3:fc:d7:12:be:1c:2d:5b:3c:ff:69:36:3b:1c:79:
                    7f:8d:37:81:7d:7b:f7:cb:e7:d6:1a:85:c1:c7:0c:
                    df:0a:59:83:a5:cc:45:4c:72:bd:5f:fc:81:8f:5b:
                    df:64:23:2c:ba:35:c5:5a:3f:47:f8:d0:5e:93:e6:
                    75:ac:e2:45:84:9f:6b:40:a7:d8:4c:dc:87:d3:6d:
                    95:f9:ae:98:ed:f4:f1:49:22:12:eb:a9:b5:1e:01:
                    bd:98:d5:a0:11:d0:90:79:b4:61:8a:19:04:51:6a:
                    30:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:25:DC:FA:C4:1C:E9:EB:BA:78:8A:CD:A1:A5:32:C3:5D:13:49:DD
            X509v3 Authority Key Identifier:
                keyid:45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/4504054E9F641914E3EF0F436CCB1E127C868221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3137372e35352e3233382e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:a5:8c:fb:99:de:98:9b:56:98:82:34:8a:56:52:aa:e3:16:
         34:bf:e4:18:f4:c1:a1:e2:8f:aa:81:ff:12:c7:f7:55:a8:09:
         73:81:4a:87:42:76:b6:bc:23:c6:ea:6f:a3:d9:3f:24:9f:a7:
         1a:a3:a1:a5:b6:eb:63:8c:0f:1f:a0:80:d3:c2:6c:bd:d1:57:
         ff:f5:84:33:45:a1:c6:19:2f:51:6d:c1:0f:17:50:3b:06:ca:
         d3:b7:a7:8e:7f:b5:07:8a:64:66:b1:82:0e:b8:88:ce:16:e8:
         db:d2:c4:85:c2:bc:31:c0:90:d8:87:e4:33:8e:9f:7a:01:d5:
         60:52:4f:42:e9:ba:6d:5d:82:3d:b4:02:25:3c:c0:1c:50:de:
         33:8f:34:ec:2c:0d:12:6b:26:26:eb:c9:12:ca:d2:29:df:cc:
         64:70:1b:a2:76:ec:73:f0:a8:56:6b:45:cc:b2:3a:92:f5:3e:
         c5:dd:42:2c:14:a8:ba:1d:a9:ae:78:42:41:fe:9b:87:62:9c:
         81:be:16:08:ba:9e:67:8e:b1:a3:30:fb:5f:ab:99:3a:ee:f6:
         01:c1:c0:d2:26:27:a3:12:30:b6:b4:72:5b:d7:86:de:c1:0a:
         c6:73:de:ea:0e:57:72:50:05:4a:0d:05:59:99:06:a7:94:fd:
         7a:19:97:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:12:51 2025 by rpki-client