Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134342e302f32322d3232203d3e20323632343031.roa
File:                     3137372e33362e3134342e302f32322d3232203d3e20323632343031.roa (raw, json)
Hash identifier:          VMTRDPa5gLwKpG5R+jB8mfvVoQ1T7dmn8hgXasWh4jo=
Subject key identifier:   9B:5D:11:A0:30:86:45:13:F9:00:FF:7E:41:81:47:BA:CA:B7:96:2D
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       62248959926914649B993E651DE51ADF3D6C5A20
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134342e302f32322d3232203d3e20323632343031.roa
Signing time:             Thu 06 Mar 2025 11:29:51 +0000
ROA not before:           Thu 06 Mar 2025 11:24:51 +0000
ROA not after:            Thu 05 Mar 2026 11:29:51 +0000
asID:                     262401
IP address blocks:        177.36.144.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:24:89:59:92:69:14:64:9b:99:3e:65:1d:e5:1a:df:3d:6c:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Mar  6 11:24:51 2025 GMT
            Not After : Mar  5 11:29:51 2026 GMT
        Subject: CN=9B5D11A030864513F900FF7E418147BACAB7962D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:35:d5:39:6f:b1:9f:1d:d9:ae:da:e2:46:07:
                    ab:dc:5a:cc:d2:32:2a:f1:d8:72:2c:4c:66:ad:0e:
                    d9:68:4f:f4:21:5d:bf:6b:e9:95:ea:f1:0d:15:fc:
                    a5:bb:4b:0c:8a:ea:48:e7:b1:47:9c:b7:fa:52:41:
                    d1:fc:17:8a:2c:8c:ca:9c:bb:c7:b0:0f:f4:45:85:
                    81:6a:de:28:de:64:a7:a4:94:e4:2e:c2:37:e5:e0:
                    00:9f:66:a5:3c:ff:ec:3b:60:0d:21:64:bb:51:dd:
                    1f:05:2c:d8:35:f3:a6:b4:a6:1c:f1:df:f8:8a:a7:
                    fd:14:84:54:87:b8:e9:d4:35:2e:46:3a:b8:82:33:
                    19:50:7d:e8:93:69:2c:5a:9c:34:d7:48:02:f1:0c:
                    e3:c2:80:4b:a6:b3:57:8b:2a:4f:cb:1a:7b:99:38:
                    cc:5e:ad:bd:c9:31:6e:09:16:6f:a0:4d:44:93:31:
                    fc:c9:e1:9a:c6:8d:1e:2f:71:f0:49:08:9f:53:20:
                    40:ff:e9:a0:6d:04:82:45:71:82:df:e3:48:98:76:
                    11:fa:a3:6d:0d:01:fa:93:39:24:2c:91:04:e2:f8:
                    d2:24:c5:d4:e7:69:f9:02:dc:61:94:3d:0a:c8:8e:
                    a8:8d:cd:d8:f1:69:c2:66:b6:29:19:b6:ee:4c:31:
                    11:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5D:11:A0:30:86:45:13:F9:00:FF:7E:41:81:47:BA:CA:B7:96:2D
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134342e302f32322d3232203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:5d:ca:9b:ef:76:e8:3c:3a:50:a8:2f:a6:f1:10:e0:0d:86:
         bc:25:a8:4d:d4:31:2e:f0:e5:d9:2b:0d:a0:a3:30:bd:0f:96:
         91:0c:93:de:62:70:fa:62:80:1d:10:05:a6:91:d9:a6:a4:f1:
         c8:b9:d1:0b:b8:f8:17:7d:3b:51:b7:16:85:97:b7:a4:35:61:
         e2:97:d6:3d:96:cd:9f:a2:af:c1:d3:b5:f1:ad:a0:6d:2b:aa:
         47:01:b3:51:26:20:a1:7e:06:45:e7:1e:3b:eb:ce:0b:50:fc:
         d0:fd:55:23:e8:5b:50:98:aa:d4:24:24:1a:0c:a8:3f:18:16:
         a5:b7:7c:d0:78:20:57:07:0b:61:9a:bf:3d:d3:c2:66:37:1f:
         f5:fa:cb:88:7f:04:c6:57:bf:07:a8:d2:b0:6e:40:fa:76:e3:
         81:30:51:7a:84:8d:09:bf:57:a5:02:c4:75:d7:4d:38:01:9c:
         c9:e6:45:29:ba:40:c6:a6:fc:34:e0:1d:e8:1a:35:25:e1:f9:
         f9:fb:23:3b:3a:45:e8:7d:20:7a:7f:75:10:16:83:34:b7:3e:
         e6:59:7f:18:84:42:f3:f2:ed:e6:65:58:a5:cf:90:94:d9:be:
         54:47:16:1d:2d:99:d0:a5:f4:77:53:92:4b:72:74:df:7b:23:
         f0:e3:9a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:30:45 2025 by rpki-client