Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f31392d3332203d3e20323632343031.roa
File:                     3137372e33362e3132382e302f31392d3332203d3e20323632343031.roa (raw, json)
Hash identifier:          x78PCiWPmCfmMk/qMnu3okvSRWduCy14YH8kP9QQTM0=
Subject key identifier:   28:9D:F3:A8:F9:96:2A:0C:C5:37:D9:80:33:82:DC:A3:63:28:0C:92
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       7FEA2737D6B2DB258A8EC820C6CCBF8CCBD7B0B3
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f31392d3332203d3e20323632343031.roa
Signing time:             Thu 06 Mar 2025 11:29:44 +0000
ROA not before:           Thu 06 Mar 2025 11:24:44 +0000
ROA not after:            Thu 05 Mar 2026 11:29:44 +0000
asID:                     262401
IP address blocks:        177.36.128.0/19 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ea:27:37:d6:b2:db:25:8a:8e:c8:20:c6:cc:bf:8c:cb:d7:b0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Mar  6 11:24:44 2025 GMT
            Not After : Mar  5 11:29:44 2026 GMT
        Subject: CN=289DF3A8F9962A0CC537D9803382DCA363280C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:46:da:f9:6d:c3:ea:b0:47:b3:f3:69:4d:1e:
                    91:57:11:f9:1d:87:e5:33:51:52:8d:b4:61:f8:50:
                    84:af:2b:00:7d:fc:1f:d9:38:a1:58:1b:a7:2f:91:
                    d8:d9:5c:5b:10:c3:67:a8:57:1e:dd:f8:17:4a:8d:
                    36:4f:ba:55:bd:45:e9:1e:bb:a3:8e:80:5c:2a:bc:
                    4e:54:4a:83:e4:2f:eb:71:c9:35:95:62:f5:82:60:
                    37:b0:a8:ad:68:f8:96:b6:0e:f2:37:33:ed:cc:eb:
                    c8:b1:5c:dc:3b:15:a2:53:47:98:49:8d:c3:26:6a:
                    72:52:12:e5:ff:10:4b:df:09:76:28:74:84:56:88:
                    0a:31:af:93:25:d2:3c:76:ed:61:7f:65:36:73:33:
                    63:e7:19:2f:61:87:48:eb:74:a1:58:4e:b7:65:e2:
                    b6:97:97:49:11:5f:35:e7:52:b8:74:97:f3:87:72:
                    19:57:9a:57:09:84:f6:c2:c1:2d:a9:8e:3c:c4:1e:
                    0d:c2:c4:59:f5:02:b0:f3:85:ba:d6:01:ac:12:21:
                    c8:4e:2e:2d:8c:09:bd:fa:98:97:99:7b:71:ed:0d:
                    71:28:a8:2c:d5:b7:54:2b:3c:a3:d7:ae:26:b0:35:
                    26:3a:f1:1a:8e:ca:df:db:c1:e4:c9:a0:de:f0:ac:
                    0b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9D:F3:A8:F9:96:2A:0C:C5:37:D9:80:33:82:DC:A3:63:28:0C:92
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f31392d3332203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:b7:9f:eb:fd:c8:f8:21:8a:85:18:30:73:1d:c8:dd:5d:f3:
         06:a5:bc:0e:fd:8b:1f:a2:73:b1:ac:04:13:1d:07:79:38:23:
         68:5c:eb:9e:bf:3f:b0:4f:9b:5b:97:ca:0c:2f:7a:89:46:a4:
         26:85:74:fb:c8:e1:06:79:35:84:7f:86:43:0f:94:0d:cd:de:
         1c:8c:36:32:4d:7d:be:05:51:54:cb:4d:3b:f7:97:3f:51:bc:
         20:db:75:fc:0d:ea:f7:57:00:9c:ac:12:35:0f:e6:2e:d9:04:
         16:10:ec:93:dc:24:77:ea:9d:07:78:7f:72:30:ea:2c:d6:99:
         ae:17:53:06:d9:97:c6:1a:40:6c:04:96:35:b3:9c:a2:4a:27:
         3c:54:fb:c3:1b:da:33:62:fa:35:ef:79:bd:e6:ab:b5:37:0c:
         fa:ea:08:ad:89:71:cb:58:6b:cd:ae:96:c9:05:cd:8f:ad:52:
         7b:cc:94:a0:f5:bb:fd:c1:d8:b1:07:81:28:bd:de:16:76:7d:
         cb:c6:44:c9:a2:8e:f3:a6:f1:e3:82:c2:ba:14:79:fa:b4:0a:
         10:5d:bf:7d:9a:17:22:76:d9:37:e3:00:4d:70:b4:93:c0:43:
         c4:e7:17:6c:91:8e:d5:53:65:ce:28:d7:35:16:8a:a8:7e:eb:
         e6:c1:66:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:32:59 2025 by rpki-client