Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3137342e302f32342d3234203d3e203238363536.roa
File:                     3230312e37372e3137342e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          6uth0JmRndIxSHKiq3pFrbcuDpevVJ2i40jnCoOtiVc=
Subject key identifier:   B8:C3:8C:73:F1:CF:29:37:87:2C:17:48:D7:DF:2E:B1:0C:62:AD:0A
Certificate issuer:       /CN=4504054E9F641914E3EF0F436CCB1E127C868221
Certificate serial:       25802E9020C7C7C3A0D36B57983A82CBBB9D1CDF
Authority key identifier: 45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3137342e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 23 Oct 2022 13:22:12 +0000
ROA not before:           Sun 23 Oct 2022 13:17:12 +0000
ROA not after:            Sun 22 Oct 2023 13:22:12 +0000
asID:                     28656
IP address blocks:        201.77.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:80:2e:90:20:c7:c7:c3:a0:d3:6b:57:98:3a:82:cb:bb:9d:1c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4504054E9F641914E3EF0F436CCB1E127C868221
        Validity
            Not Before: Oct 23 13:17:12 2022 GMT
            Not After : Oct 22 13:22:12 2023 GMT
        Subject: CN=B8C38C73F1CF2937872C1748D7DF2EB10C62AD0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:18:8a:e3:c9:cf:36:2e:79:28:ab:4c:9a:ca:
                    d8:2f:ed:c2:9c:90:96:47:4a:55:b1:61:6b:3f:dc:
                    02:96:b5:d9:5b:9b:82:7a:8c:a2:8f:be:e5:e3:aa:
                    09:43:ed:4f:a3:fb:36:c0:9b:8b:4a:3e:94:59:a1:
                    94:68:4d:34:81:10:f5:9d:f9:ba:7e:aa:26:2f:02:
                    a4:22:5b:79:8d:76:9c:68:6a:9f:83:9a:b6:1e:70:
                    37:59:64:b7:b8:a0:65:2a:ba:82:e0:b7:73:b4:e8:
                    22:cb:88:c4:6f:d3:45:40:6f:8b:01:9f:54:38:fd:
                    4a:95:ef:a4:17:c0:55:27:29:7e:02:19:5f:d0:b2:
                    d9:2f:0c:1e:3a:ae:fd:16:2d:b3:16:0e:17:1c:99:
                    ab:a4:c1:b6:f3:10:a7:cd:bc:f5:4d:4d:67:46:e1:
                    84:55:e2:53:6f:1a:16:97:76:6a:a4:8e:3b:df:f8:
                    8f:71:76:d6:da:70:7e:67:6b:46:e8:56:78:33:3d:
                    2d:a1:86:56:82:ab:92:c6:84:f6:5a:54:74:d3:58:
                    78:f6:ab:e9:80:95:6a:15:64:b7:d7:dd:c8:eb:09:
                    97:63:a7:57:c9:d5:cc:a1:d5:fa:56:13:be:0c:a1:
                    84:9a:10:da:fc:63:2c:4c:64:4c:02:14:78:d8:ca:
                    6a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C3:8C:73:F1:CF:29:37:87:2C:17:48:D7:DF:2E:B1:0C:62:AD:0A
            X509v3 Authority Key Identifier:
                keyid:45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/4504054E9F641914E3EF0F436CCB1E127C868221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3137342e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:44:39:f7:56:df:86:26:f8:35:d9:3e:14:19:c3:75:ea:c7:
         59:b7:f6:f9:88:0b:5b:af:d7:f8:63:ed:53:00:9c:33:ab:07:
         e8:f1:0b:99:f1:b0:e0:ff:41:c8:1f:a7:42:02:40:76:4a:78:
         99:90:29:db:ea:5d:a6:55:92:70:e8:02:02:d3:09:3d:5b:31:
         a9:eb:e6:57:b0:49:9b:8e:d1:23:bd:d1:49:e8:4a:18:79:d0:
         a1:3e:2d:e6:39:8d:02:5c:11:25:42:f1:67:11:e6:45:00:b2:
         c1:4b:ad:91:30:16:6d:e8:3e:3e:6b:41:75:e5:9a:19:ce:60:
         16:b7:b0:f9:60:ce:bf:a8:4f:1b:f3:3e:7e:8c:8f:5c:2c:e7:
         0c:aa:28:ce:f7:fd:3d:94:a9:14:20:3c:29:be:b5:27:a2:27:
         8c:b0:09:78:ca:da:41:75:bc:bf:8d:33:a2:be:15:c1:c7:0b:
         2e:45:b5:26:36:57:d1:72:5b:38:f1:3c:3b:ca:db:9e:02:88:
         3d:44:c0:9d:09:28:91:45:66:70:61:cb:f7:41:b8:41:62:7f:
         19:b7:f1:b4:51:85:dd:8c:38:19:55:f9:f5:27:92:80:18:f3:
         bd:68:19:2f:05:95:93:a2:1c:85:a2:5c:eb:8c:49:c9:a3:30:
         f8:c2:66:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:36:15 2025 by rpki-client