Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133332e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3133332e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          S5+OPTIl3jimz2rEkLF4u60S2NXRa6ZmY446UhX3mwQ=
Subject key identifier:   C0:DE:86:6B:46:C8:7F:F5:D9:27:CE:0D:C7:06:52:F9:8E:97:BF:FD
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       493BEC2AB720543766287F07663E5E6812E2F72E
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133332e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 06 Mar 2025 11:29:49 +0000
ROA not before:           Thu 06 Mar 2025 11:24:49 +0000
ROA not after:            Thu 05 Mar 2026 11:29:49 +0000
asID:                     262401
IP address blocks:        177.36.133.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3b:ec:2a:b7:20:54:37:66:28:7f:07:66:3e:5e:68:12:e2:f7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Mar  6 11:24:49 2025 GMT
            Not After : Mar  5 11:29:49 2026 GMT
        Subject: CN=C0DE866B46C87FF5D927CE0DC70652F98E97BFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:87:c4:ac:d2:ae:4e:d7:41:53:72:27:8d:2a:
                    f1:60:28:c5:78:28:ad:42:29:65:fc:37:3c:c4:ad:
                    b6:88:96:29:81:f2:ac:77:99:8d:5a:e8:9b:c9:e0:
                    21:c3:9c:61:6d:00:fc:05:a5:20:ee:b5:44:58:7f:
                    9f:aa:86:96:63:95:98:63:e5:9c:65:93:36:28:73:
                    2e:71:9b:7e:b7:92:41:70:21:60:5c:38:7c:25:bb:
                    66:72:a0:f1:4a:5f:7a:56:95:21:62:39:c6:ff:04:
                    a5:05:77:02:8b:ce:c1:f4:fd:91:85:41:5d:7f:03:
                    67:34:b3:3c:c6:f9:5c:51:82:26:88:3f:a3:b4:73:
                    11:22:6d:6b:9e:93:5e:c1:bd:cf:03:9a:16:1c:09:
                    00:6d:2d:b9:1b:13:89:ca:23:fd:8b:ff:d6:e9:c5:
                    23:cd:dd:02:97:61:44:20:b1:8b:e2:20:ba:51:16:
                    a2:ca:ea:dc:6f:88:75:fc:73:12:a8:e6:9b:96:64:
                    5e:d6:6a:cc:2d:d6:77:49:9d:5a:40:fb:0d:80:1a:
                    40:b8:8b:42:c3:0d:6d:ce:c3:9d:40:34:c6:21:ac:
                    b1:a6:dc:eb:8a:6f:68:cd:69:d5:97:a6:64:89:30:
                    c4:46:d7:ba:a7:37:a9:67:6e:3b:25:9d:32:68:19:
                    bc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DE:86:6B:46:C8:7F:F5:D9:27:CE:0D:C7:06:52:F9:8E:97:BF:FD
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133332e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:26:61:c4:b8:ac:fb:87:8f:13:4f:46:96:78:3a:16:4d:d6:
         70:d9:de:67:1d:86:9d:93:9b:41:4f:9a:20:e9:cc:16:6e:49:
         f1:c5:e6:f1:d6:56:2c:c3:dd:f2:94:25:74:9c:d5:12:9e:da:
         c2:1f:2f:f7:e3:c9:0a:a2:31:74:4c:93:21:a5:ce:c6:6f:c1:
         54:ee:a9:1b:37:e1:7f:0e:38:21:22:db:37:b9:5c:bc:06:b6:
         3f:6f:4d:07:ab:9c:98:67:db:39:60:6d:2a:94:93:84:04:db:
         40:aa:f0:36:8e:23:b6:42:ed:92:f0:5a:31:86:ea:07:8a:98:
         01:ef:18:76:19:c0:39:7b:f2:bc:05:e5:68:c7:97:f3:cd:0e:
         c5:f2:6f:57:47:a3:02:74:c4:e8:3a:c3:10:87:7f:df:1c:da:
         08:48:2d:a0:e7:2e:11:6e:56:5b:7b:fe:e2:d8:94:45:62:8c:
         5c:e2:f2:5e:a2:b5:38:a4:4f:88:11:6f:90:c0:aa:25:4e:3b:
         87:43:27:2b:e1:ca:20:06:60:cb:d9:bb:86:f3:da:8e:bb:68:
         d4:1f:85:a6:16:d0:cc:b3:b6:5a:45:c9:94:0f:05:93:67:dd:
         e4:cc:05:be:5d:92:ad:aa:30:93:17:8b:84:af:6a:a2:c7:ac:
         0d:c0:25:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:46:39 2025 by rpki-client