Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3136302e302f32342d3234203d3e203238363536.roa
File:                     3230312e37372e3136302e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          HW0Q392Ijsoqr2mFU5vkANVWbQB6XVuKBKGacCBOq8A=
Subject key identifier:   41:11:21:BD:C9:FA:90:13:FE:97:66:C7:F4:D6:28:9E:D4:F8:AF:5E
Certificate issuer:       /CN=4504054E9F641914E3EF0F436CCB1E127C868221
Certificate serial:       1115FDBB2ADB5436E7FDC88404116F7EC24C1781
Authority key identifier: 45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3136302e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 23 Oct 2022 13:24:41 +0000
ROA not before:           Sun 23 Oct 2022 13:19:41 +0000
ROA not after:            Sun 22 Oct 2023 13:24:41 +0000
asID:                     28656
IP address blocks:        201.77.160.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:15:fd:bb:2a:db:54:36:e7:fd:c8:84:04:11:6f:7e:c2:4c:17:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4504054E9F641914E3EF0F436CCB1E127C868221
        Validity
            Not Before: Oct 23 13:19:41 2022 GMT
            Not After : Oct 22 13:24:41 2023 GMT
        Subject: CN=411121BDC9FA9013FE9766C7F4D6289ED4F8AF5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c4:88:5d:8a:2b:18:1f:16:ee:19:78:87:6f:
                    33:c9:45:71:b7:4a:52:18:05:54:f8:34:f9:d0:39:
                    3c:8b:8b:56:30:5c:d8:ae:c5:8b:f5:33:97:9b:6c:
                    75:57:af:46:db:f5:22:15:de:2b:d2:23:a5:89:41:
                    fc:42:ea:01:8a:b7:56:3c:dc:24:7e:40:b4:49:90:
                    cf:5a:7e:65:98:04:34:0d:24:cb:35:de:c3:08:9b:
                    ca:83:63:1c:d0:09:1b:44:10:bc:5e:1d:78:b5:b8:
                    f9:3d:83:6f:9c:84:82:8a:bd:9c:49:a4:42:49:0f:
                    7b:c7:e5:17:e3:80:0f:79:1a:c1:20:8c:f0:e6:2d:
                    4a:11:8d:24:87:b5:03:65:e9:74:f7:af:2f:b9:27:
                    ab:b1:b7:2b:c7:75:17:5d:f8:64:e5:86:ff:0b:84:
                    df:3b:ee:6e:db:c0:6c:47:80:8f:b1:16:7e:14:2a:
                    bc:02:94:e5:44:70:95:93:7c:5b:80:5b:74:1a:42:
                    18:4b:08:22:15:f8:fa:d7:90:94:92:a3:72:e8:72:
                    30:94:c1:08:e1:c5:de:e6:41:73:b6:a1:0b:82:53:
                    5a:55:5e:56:66:60:f1:1c:dc:0e:b5:a9:4b:bf:16:
                    26:25:e0:3c:c5:4f:3d:94:25:dd:fb:e4:39:16:09:
                    8f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:11:21:BD:C9:FA:90:13:FE:97:66:C7:F4:D6:28:9E:D4:F8:AF:5E
            X509v3 Authority Key Identifier:
                keyid:45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/4504054E9F641914E3EF0F436CCB1E127C868221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3136302e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:6e:37:a7:4d:c0:ea:88:c9:56:29:a4:9f:7f:b8:0e:fc:d7:
         b2:a0:39:c0:ec:b9:79:70:38:1f:7d:15:7d:d5:ef:51:07:b9:
         f6:a5:18:cd:16:04:91:76:97:ef:bb:a5:b2:5c:00:7f:23:72:
         fa:a2:b6:6e:7e:fe:0a:15:5f:c7:38:5d:de:77:66:ce:16:94:
         89:9d:6c:7a:ea:44:a8:f6:2d:f9:73:1d:ba:d1:e8:30:66:d0:
         a1:b6:00:0c:27:88:bc:55:94:ba:94:9e:d2:51:33:c6:a6:77:
         66:a5:9a:8f:90:38:26:18:4e:e5:46:1f:98:a3:14:1d:bf:a2:
         6e:86:4f:10:5b:68:0e:2b:5f:ff:ad:ac:ac:50:9c:16:14:e2:
         49:10:bd:86:7c:17:88:38:48:60:cf:2e:c4:21:73:c2:2e:76:
         b0:6c:99:da:c4:b1:c8:88:80:4d:19:0d:d0:b8:64:93:b9:6d:
         fb:65:3b:69:f1:1b:b5:09:f6:3d:24:c7:4f:e6:f5:b0:73:0c:
         a2:f4:a8:90:ca:07:13:02:0e:8e:03:bd:f6:06:db:d6:53:de:
         7e:3f:4d:7b:a8:bd:d3:c3:79:98:d8:58:4d:1f:6f:bb:83:96:
         64:c0:93:7a:9f:e5:e2:e6:a9:ee:ac:08:9c:c9:ec:9c:8b:e9:
         ac:49:57:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:18:32 2025 by rpki-client