Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134362e302f32332d3233203d3e20323632343031.roa
File:                     3137372e33362e3134362e302f32332d3233203d3e20323632343031.roa (raw, json)
Hash identifier:          n4X/HvCcFnb3MVdVWEPSvFjkNMwTdYvcjGVhbVNI2y8=
Subject key identifier:   69:FB:C4:D0:1A:80:38:16:9B:53:89:4D:17:88:B0:47:3F:4E:6F:E6
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       29C01FF85AC74DC7D69DFEF67EA2B10EB61FD035
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134362e302f32332d3233203d3e20323632343031.roa
Signing time:             Thu 06 Mar 2025 11:29:45 +0000
ROA not before:           Thu 06 Mar 2025 11:24:45 +0000
ROA not after:            Thu 05 Mar 2026 11:29:45 +0000
asID:                     262401
IP address blocks:        177.36.146.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c0:1f:f8:5a:c7:4d:c7:d6:9d:fe:f6:7e:a2:b1:0e:b6:1f:d0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Mar  6 11:24:45 2025 GMT
            Not After : Mar  5 11:29:45 2026 GMT
        Subject: CN=69FBC4D01A8038169B53894D1788B0473F4E6FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:cd:4d:16:0d:14:6b:bd:00:92:0c:d5:8f:
                    37:a0:3b:2b:66:22:3e:d5:39:34:9d:12:8a:a9:21:
                    7c:1e:8b:04:fa:8d:1a:d8:26:d5:09:96:d1:0d:db:
                    39:36:7f:a3:58:8f:cb:1f:3b:eb:8d:27:78:97:9d:
                    95:c2:c0:20:8d:3e:a0:de:d5:80:2a:64:53:1b:35:
                    ab:ad:ea:07:de:a9:f4:ff:7f:06:45:5a:7f:94:82:
                    14:99:e2:3e:d8:32:fe:09:e1:d3:a6:af:bc:9f:92:
                    90:73:ef:79:01:ff:8e:fe:4e:bd:db:41:73:db:3a:
                    fa:0e:f0:dc:4c:62:35:ab:38:b3:15:eb:85:fb:cb:
                    67:29:7b:6a:92:94:21:a5:57:12:b4:62:59:e6:5c:
                    87:f9:ae:22:d2:08:f8:45:85:89:36:4d:8f:58:bc:
                    f7:46:79:99:4c:cf:1b:94:74:9c:06:02:1f:cd:67:
                    10:48:46:7e:89:5a:65:d7:16:fa:43:cf:55:ed:1a:
                    a5:a7:42:19:d4:d3:95:09:8d:7b:e1:fc:aa:26:a5:
                    0c:ef:26:4a:60:43:b0:b5:37:bc:4c:2b:3a:b1:5b:
                    e3:93:67:6d:7d:9f:d4:66:4c:20:cb:09:94:c4:be:
                    f8:52:3f:a8:ec:09:a1:2d:3b:9e:3a:26:43:bb:e2:
                    ee:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FB:C4:D0:1A:80:38:16:9B:53:89:4D:17:88:B0:47:3F:4E:6F:E6
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134362e302f32332d3233203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:bb:00:fb:2a:09:b7:60:21:1d:29:39:d0:bc:f9:e9:58:ad:
         c8:8d:2c:3d:c7:6d:2b:7b:ff:b0:ea:5b:d4:a1:73:79:80:14:
         70:7c:3b:61:3b:e7:3c:07:5f:2d:6b:85:bb:a6:21:ff:42:77:
         9f:f0:95:ef:a2:ea:72:fd:c1:88:4d:6a:56:3f:f5:13:75:5c:
         41:56:e9:58:21:f4:5b:64:cf:14:ff:ed:4f:b1:6d:d3:66:dc:
         50:11:20:7b:e0:3f:72:c9:53:f3:5a:31:3e:b3:a3:5d:2d:1e:
         08:4c:fb:7d:72:e1:55:cd:08:4e:a0:5b:69:e2:e6:0a:53:58:
         55:85:31:a7:99:89:9f:f0:7a:7a:90:00:a2:93:02:cb:e4:ca:
         0a:a0:4e:98:d7:3d:14:ee:e0:23:61:f7:59:0f:5c:e4:ea:31:
         59:56:ae:b4:9a:65:20:33:96:42:be:fb:74:ff:1e:9e:14:b7:
         1e:38:98:2d:b6:d5:e8:12:62:da:cc:3c:84:97:eb:f2:b1:88:
         9c:3c:66:cd:c6:e9:a2:f0:df:a0:e8:dd:3b:7e:81:2e:de:e4:
         8d:91:d9:8b:a1:72:4f:3b:40:65:cf:92:cd:ce:ed:35:10:43:
         95:c6:ed:49:85:86:35:c3:47:41:e2:5a:16:b7:91:33:c9:6c:
         dc:69:c9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:46:59 2025 by rpki-client