Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134302e302f32322d3232203d3e20323632343031.roa
File:                     3137372e33362e3134302e302f32322d3232203d3e20323632343031.roa (raw, json)
Hash identifier:          kBiwZUiVgeWBeZH+R9AjDJHA3ZSGxa005ZbXTq53IUk=
Subject key identifier:   C8:A3:C4:98:B1:F8:E7:67:5F:56:06:0E:91:89:68:96:31:E4:89:08
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       2FA69B64622CEC209CA503C8DA4D0323C3BA9804
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134302e302f32322d3232203d3e20323632343031.roa
Signing time:             Thu 06 Mar 2025 11:29:47 +0000
ROA not before:           Thu 06 Mar 2025 11:24:47 +0000
ROA not after:            Thu 05 Mar 2026 11:29:47 +0000
asID:                     262401
IP address blocks:        177.36.140.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a6:9b:64:62:2c:ec:20:9c:a5:03:c8:da:4d:03:23:c3:ba:98:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Mar  6 11:24:47 2025 GMT
            Not After : Mar  5 11:29:47 2026 GMT
        Subject: CN=C8A3C498B1F8E7675F56060E9189689631E48908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2f:48:0f:44:27:7a:40:72:fe:7e:b3:6b:28:
                    08:f1:4a:e8:2a:3e:b0:0c:09:92:0f:68:30:05:b4:
                    02:e2:97:d4:56:94:fd:b5:6e:47:04:55:ee:58:ca:
                    da:00:ff:03:f2:31:61:f6:ae:33:92:ed:e4:22:3a:
                    09:b0:9f:78:d1:bd:20:3e:bc:be:af:e4:8e:c3:56:
                    55:0f:ad:9b:9c:cc:c1:ac:89:25:70:bc:b1:40:0a:
                    ba:c7:a8:69:c4:0e:36:34:73:8a:30:77:47:17:f3:
                    29:5d:18:23:5c:d0:84:7a:3c:55:ab:e2:1d:0c:38:
                    1b:bb:c0:0a:0e:3d:23:50:06:f1:24:33:2b:05:7d:
                    a7:22:9e:e3:c0:75:aa:cc:10:db:fe:3b:3d:07:32:
                    23:b7:fb:2a:bc:1c:c3:8d:a7:99:a8:62:55:2e:e8:
                    74:00:75:c5:5b:a5:76:a5:1e:de:27:c3:cd:03:07:
                    1e:2e:0c:33:b8:41:ef:2f:c0:1e:94:e4:db:ce:3a:
                    95:f4:27:d1:65:a2:e0:fc:de:9d:71:56:74:bf:35:
                    c1:76:a2:c9:3f:70:2a:56:ab:16:29:cd:b9:ac:01:
                    a7:6a:10:7c:65:24:86:03:fa:26:bc:30:71:8b:3b:
                    b3:44:38:9f:6b:cc:db:aa:e1:dc:8d:4a:e4:06:36:
                    f4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A3:C4:98:B1:F8:E7:67:5F:56:06:0E:91:89:68:96:31:E4:89:08
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134302e302f32322d3232203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:ed:a0:00:36:28:80:09:19:9b:f9:82:91:1c:5e:e8:c2:37:
         32:e0:cd:0c:f3:5f:30:64:d4:a6:b9:ab:54:ec:c4:b5:fb:6e:
         8e:ee:33:34:dc:38:ad:21:c4:b4:d0:5c:92:2c:0e:1f:4c:be:
         f7:e9:81:fb:56:c9:0e:3e:76:eb:fe:44:81:5c:a9:5a:99:8c:
         13:80:1f:e1:6a:0f:be:b2:12:88:43:20:db:33:68:98:a1:5b:
         b0:3c:8c:a7:a9:73:77:21:4c:8b:5d:42:9e:76:e0:9b:2b:ef:
         69:95:4d:97:ba:ca:8b:66:26:49:50:e9:85:73:3e:c2:8e:32:
         48:7d:b8:ea:ca:1b:2a:03:9d:53:6f:39:86:0f:6a:64:fd:3b:
         73:be:82:4c:7a:b5:a9:54:cf:61:d6:ad:d4:5c:25:07:ba:f3:
         a6:c0:3e:24:92:7d:df:cd:5c:26:85:83:04:9e:7a:fa:aa:f5:
         19:8f:14:d4:0f:8b:89:76:10:36:b5:60:f4:1a:da:f7:9e:ee:
         e5:1d:48:ef:3c:12:21:97:c0:c4:60:48:86:30:81:76:fb:46:
         d3:10:ab:9e:db:38:0e:27:6d:05:08:17:32:3f:b5:29:76:5d:
         fd:aa:ff:e3:ab:e0:05:05:36:84:41:3a:27:a9:aa:4c:49:f9:
         f4:42:f7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:47:20 2025 by rpki-client